Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/B6TvGnS0qaW4w8_ylWjHeB7x6_Y.roa
File: B6TvGnS0qaW4w8_ylWjHeB7x6_Y.roa (raw, json)
Hash identifier: ELh8MwjWyitgWq7e/AgF2IxFzCjizrqqL473yQ3M83I=
Subject key identifier: 07:A4:EF:1A:74:B4:A9:A5:B8:C3:CF:F2:95:68:C7:78:1E:F1:EB:F6
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0194274834ED178F0A6E5BCA35025AD8DF98
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/B6TvGnS0qaW4w8_ylWjHeB7x6_Y.roa
Signing time: Thu 02 Jan 2025 13:50:31 +0000
ROA not before: Thu 02 Jan 2025 13:50:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28049
IP address blocks: 217.76.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:34:ed:17:8f:0a:6e:5b:ca:35:02:5a:d8:df:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 2 13:50:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07a4ef1a74b4a9a5b8c3cff29568c7781ef1ebf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:10:d8:f7:a3:9c:7b:a3:04:8f:f6:80:4c:fa:
87:5a:21:9f:a4:2c:96:40:9b:51:eb:42:ea:47:b8:
aa:11:a1:0d:3b:70:eb:e6:c8:66:e4:95:eb:ad:74:
22:99:92:ff:26:2d:8a:14:d2:3e:fc:c2:2c:03:35:
f1:85:d5:1f:ae:ef:48:e8:0e:1b:4c:fe:47:9d:83:
17:0a:f6:f7:0c:42:d4:8e:bb:a9:34:42:73:82:84:
26:54:7a:94:2c:a2:05:c5:9a:34:08:9b:fe:29:ed:
76:a8:fb:8b:78:3f:ab:e0:cd:c8:c6:6d:93:3b:fc:
58:0b:27:8b:b9:b9:97:c9:cf:74:8b:8a:05:e9:b9:
1e:56:1f:0c:22:9e:03:47:e3:24:15:c4:47:87:f5:
0b:94:7e:1f:ad:17:58:ad:be:b4:46:1f:93:74:bb:
a3:59:f1:13:cc:72:f5:22:86:46:7d:65:cb:45:d5:
27:f2:f6:13:1e:95:dd:cb:4e:9e:0c:8b:87:38:fb:
fe:1b:c7:d9:69:a8:45:2e:9b:bf:a0:53:a7:5a:fa:
d9:3e:68:db:a9:ea:11:b7:ca:ef:af:11:3a:b9:33:
db:b1:dc:ce:54:d6:ca:ca:f2:f7:aa:08:9a:d2:16:
55:9f:31:c8:5d:0d:95:bb:28:09:aa:3b:2b:9d:3a:
b7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A4:EF:1A:74:B4:A9:A5:B8:C3:CF:F2:95:68:C7:78:1E:F1:EB:F6
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/B6TvGnS0qaW4w8_ylWjHeB7x6_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.76.240.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:7d:a7:71:3b:ea:97:86:83:0e:ed:4e:d3:dc:0b:ff:2f:fd:
a8:0f:3e:15:7d:1f:d1:40:10:b7:2e:83:2d:9e:ef:9d:0f:99:
6f:8f:3d:7d:32:4c:0f:de:a1:ab:39:da:21:0d:b5:d1:90:5c:
22:7b:d6:02:a1:5f:33:4a:4a:eb:4a:ec:c3:05:2f:06:ea:8c:
1f:0d:88:21:f3:44:b0:c8:7d:fa:e6:8b:63:c1:bd:56:e1:1d:
6f:49:cf:0a:30:d2:77:6f:f0:af:3a:62:4a:f9:0a:6c:e0:93:
ce:ef:6a:33:06:72:33:db:28:b0:23:50:aa:b9:0a:9e:1b:56:
e2:b4:8f:52:ec:bc:93:a2:9c:e9:50:1b:89:f4:8d:b5:c7:ee:
d3:63:de:e8:0f:65:69:f0:15:63:63:76:1b:60:ea:ff:ae:da:
52:f3:96:ee:dd:85:39:ca:42:9d:d9:88:6c:46:f9:d7:19:63:
c8:a6:1d:36:6c:d8:39:48:74:66:05:2c:e6:55:ec:ea:c1:bb:
49:47:44:79:fc:e0:c2:ba:68:b6:c2:31:db:d6:52:79:02:bd:
03:d6:c7:02:79:7b:c7:28:3d:94:5a:b7:67:4d:71:0a:9c:e7:
41:95:8d:fe:0f:6e:c9:48:ca:7b:e9:21:a9:5f:85:32:7c:0f:
79:8d:43:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 17:58:09 2025 by rpki-client