Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/K6r4JbxghClQGiOJgPHD3qM06uA.roa
File: K6r4JbxghClQGiOJgPHD3qM06uA.roa (raw, json)
Hash identifier: Z7BS3eMvEl2jFHcYWZaavqiGcVmavHPtMtk5iNM38S8=
Subject key identifier: 2B:AA:F8:25:BC:60:84:29:50:1A:23:89:80:F1:C3:DE:A3:34:EA:E0
Certificate issuer: /CN=7f6bd1a6b04625c571d830f878b1c0238247408c
Certificate serial: 01948F15041ABB26ED0F65554384DBF97B76
Authority key identifier: 7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/K6r4JbxghClQGiOJgPHD3qM06uA.roa
Signing time: Wed 22 Jan 2025 17:35:06 +0000
ROA not before: Wed 22 Jan 2025 17:35:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 812
IP address blocks: 66.220.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 03:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8f:15:04:1a:bb:26:ed:0f:65:55:43:84:db:f9:7b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f6bd1a6b04625c571d830f878b1c0238247408c
Validity
Not Before: Jan 22 17:35:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2baaf825bc608429501a238980f1c3dea334eae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:91:20:b1:38:b8:00:ae:0d:c2:15:65:c2:81:
a7:59:3e:33:5a:fc:87:0f:4d:f7:1c:d6:8c:e2:24:
fc:e0:41:43:e7:e7:55:1e:4d:9e:17:cf:18:c7:26:
88:49:df:4c:9c:72:d8:65:25:83:31:ab:92:dc:14:
43:f8:29:73:54:e4:a4:3e:e0:77:41:7d:7f:0a:41:
12:df:93:82:b2:21:25:87:d1:8f:d7:c6:86:35:98:
da:53:48:0e:ad:7d:6f:b0:8d:41:6b:2e:02:ba:6a:
eb:77:97:5f:cf:80:f7:20:09:2b:e4:89:b8:3e:89:
a6:1d:c5:cb:c3:39:ae:21:c9:87:6d:89:d0:88:49:
52:fc:f5:83:eb:eb:05:43:c9:56:a4:0c:fb:e5:4e:
82:b7:75:b1:16:2a:fc:6d:56:56:1f:fa:4c:f5:20:
bf:13:78:c4:0e:35:2e:c4:77:8c:0a:27:e1:1a:2c:
76:f2:8b:f7:f3:33:f8:7b:c8:3d:c8:7b:5d:0d:45:
bb:b5:01:1c:51:3b:03:1a:09:b1:f2:ce:00:57:5e:
ab:4b:4c:39:b2:da:a7:87:fe:9f:fa:cd:f1:c8:9d:
2d:01:a7:77:50:00:3c:6a:d3:3f:a8:78:e5:15:0e:
33:d2:a2:06:ea:28:3e:00:a1:cd:60:78:f7:a8:88:
a3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:AA:F8:25:BC:60:84:29:50:1A:23:89:80:F1:C3:DE:A3:34:EA:E0
X509v3 Authority Key Identifier:
keyid:7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/K6r4JbxghClQGiOJgPHD3qM06uA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.220.47.0/24
Signature Algorithm: sha256WithRSAEncryption
98:a7:bc:81:a5:bf:a5:ee:ad:47:3d:1b:d4:af:95:ae:ad:48:
e3:cb:22:97:4c:4a:db:65:5c:f7:fd:c6:c2:7c:4e:2a:df:7e:
03:ae:81:18:f9:6f:e8:76:55:1c:da:38:c7:a7:d4:07:9a:a6:
3c:57:6c:c1:96:fc:27:0e:f3:56:ba:61:cc:a8:86:6f:98:b2:
c3:6d:49:df:0b:15:d8:be:64:32:eb:b9:68:e0:d3:53:b3:93:
bb:4c:35:ad:93:96:cf:89:0a:b6:dc:8b:ad:5a:80:0d:94:b2:
f8:58:50:30:91:55:0d:2e:02:c9:a3:72:49:31:b3:49:1a:81:
0c:c1:a6:25:29:54:90:72:99:7e:fc:39:98:77:86:e0:63:4a:
2b:c3:1d:b4:8d:35:a4:14:2a:94:df:71:b0:97:85:4e:5a:21:
ae:61:12:e0:22:b5:01:df:cc:8c:5f:c0:2c:f9:ba:c6:55:dc:
20:f5:05:e7:13:7c:79:61:95:c3:53:24:e3:8a:1d:70:7d:26:
fe:a0:99:9c:52:65:b3:94:98:95:54:ea:4a:d6:5c:49:8e:fa:
29:0a:44:d5:4b:bb:1c:be:f7:ef:f7:c3:98:ca:0a:70:0f:02:
6a:45:b6:05:d1:18:7b:d4:ea:d6:18:fc:d0:b9:ca:71:a1:71:
ab:85:0c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:58 2025 by rpki-client