Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/v7_R2pBukkHhelIZlVjwiyRa12U.roa
File: v7_R2pBukkHhelIZlVjwiyRa12U.roa (raw, json)
Hash identifier: YZS7E5+HbEHUmVUCvPwNhr8bYkLtOICH1qK382kWMbQ=
Subject key identifier: BF:BF:D1:DA:90:6E:92:41:E1:7A:52:19:95:58:F0:8B:24:5A:D7:65
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425223706A94137F152D4253384F867E8
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/v7_R2pBukkHhelIZlVjwiyRa12U.roa
Signing time: Thu 02 Jan 2025 03:49:46 +0000
ROA not before: Thu 02 Jan 2025 03:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209391
IP address blocks: 2a0e:b107:1c90::/48 maxlen: 48
2a0e:b107:1c91::/48 maxlen: 48
2a0e:b107:1c92::/48 maxlen: 48
2a0e:b107:1c93::/48 maxlen: 48
2a0e:b107:1c94::/48 maxlen: 48
2a0e:b107:1c95::/48 maxlen: 48
2a0e:b107:1c96::/48 maxlen: 48
2a0e:b107:1c97::/48 maxlen: 48
2a0e:b107:1c98::/48 maxlen: 48
2a0e:b107:1c99::/48 maxlen: 48
2a0e:b107:1c9a::/48 maxlen: 48
2a0e:b107:1c9b::/48 maxlen: 48
2a0e:b107:1c9c::/48 maxlen: 48
2a0e:b107:1c9d::/48 maxlen: 48
2a0e:b107:1c9e::/48 maxlen: 48
2a0e:b107:1c9f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:37:06:a9:41:37:f1:52:d4:25:33:84:f8:67:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bfbfd1da906e9241e17a52199558f08b245ad765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c1:9d:d8:5f:f9:65:f1:e3:3a:02:44:69:6f:
65:c2:82:64:b1:87:f9:42:91:aa:23:fa:a3:cb:4d:
63:3e:09:f7:62:7a:77:38:39:e2:b3:7e:79:77:d6:
22:58:7e:6b:a9:a2:75:a1:f4:47:1f:31:93:af:bf:
67:51:ef:09:5d:57:7e:15:09:e6:e1:46:a3:85:c8:
43:ae:e2:f0:a4:ea:5c:26:07:ec:2f:39:17:ca:c2:
d9:b3:03:ad:f7:e1:03:c2:dc:9b:6b:14:3d:ca:18:
42:9e:60:92:56:67:6b:bf:83:db:e4:44:dc:8b:17:
ff:ce:2f:97:6b:9f:91:09:7f:6c:d7:90:27:f1:ff:
87:68:3a:ad:34:74:e7:81:fa:71:16:fa:f4:fb:18:
15:fe:d4:ce:db:42:2b:7e:e7:a3:50:b7:39:78:5e:
cf:db:f4:1f:03:c4:27:71:d0:16:79:ca:c7:97:48:
5b:76:62:d3:50:bc:3b:8f:d3:4d:96:e5:6a:83:3a:
c9:c8:b8:de:66:8d:62:16:e8:54:65:18:79:22:16:
b9:f6:8a:8a:a9:58:6d:85:ad:9b:12:a3:f4:89:a9:
cd:9a:8e:5b:75:db:bd:9a:c0:79:1f:b4:ca:cc:d6:
00:0e:da:19:38:68:7f:08:39:5e:8c:e4:a7:85:90:
70:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:BF:D1:DA:90:6E:92:41:E1:7A:52:19:95:58:F0:8B:24:5A:D7:65
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/v7_R2pBukkHhelIZlVjwiyRa12U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1c90::/44
Signature Algorithm: sha256WithRSAEncryption
49:92:6a:3a:e7:ef:7c:4a:e9:c6:1e:79:1f:07:46:28:6c:b8:
36:74:23:3f:31:1a:1d:06:8d:d9:b4:a2:33:ed:46:d7:e3:9e:
d6:6c:84:fb:b8:25:60:ac:97:41:9f:f6:15:e2:64:ac:48:b6:
6b:83:a6:38:af:47:88:ff:bc:ea:78:e2:39:60:e0:4f:ca:9a:
93:e9:9c:e6:91:42:26:6e:0c:65:c4:e7:36:a2:86:3e:08:65:
d2:15:9c:92:db:90:c5:7c:06:de:34:6c:1c:92:98:1e:44:c7:
11:b6:4c:dc:77:dc:94:3d:41:e4:6a:4a:8f:66:05:a1:42:bc:
3d:2f:3e:5f:4b:bd:fc:9c:7e:ea:81:13:5d:05:fb:a4:64:66:
50:8b:50:98:dd:d3:ea:31:a9:fc:58:5e:47:97:d1:7c:91:dc:
a3:d3:7a:ee:af:d3:ee:0d:6a:84:eb:ef:3e:2e:fa:8d:49:9d:
15:a5:ea:09:87:9d:5c:95:b9:d3:a8:83:63:68:74:da:4a:4f:
10:5d:60:c3:b1:6c:b7:ee:bd:23:0c:22:cc:bb:23:a3:16:4f:
6c:2a:b1:b9:b3:0e:ca:88:2c:6c:5d:a6:59:b8:60:c6:e2:e4:
6f:b1:35:f2:10:21:3e:ce:83:ba:12:c9:d7:7e:ac:54:37:a2:
2f:3b:48:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:35:26 2025 by rpki-client