Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/BqboxR0rfckxhxVfB8PLIh5Oufk.roa
File: BqboxR0rfckxhxVfB8PLIh5Oufk.roa (raw, json)
Hash identifier: lqkNljEPqGsw8F9fHd6v0Bl4V6xUh4m+FGkq2VHN7to=
Subject key identifier: 06:A6:E8:C5:1D:2B:7D:C9:31:87:15:5F:07:C3:CB:22:1E:4E:B9:F9
Certificate issuer: /CN=3ec50ab4ccf72e3d60c09f964019d6c034c50a6c
Certificate serial: 0193251FA0AFE4CC957F435414994716086C
Authority key identifier: 3E:C5:0A:B4:CC:F7:2E:3D:60:C0:9F:96:40:19:D6:C0:34:C5:0A:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/BqboxR0rfckxhxVfB8PLIh5Oufk.roa
Signing time: Wed 13 Nov 2024 10:44:09 +0000
ROA not before: Wed 13 Nov 2024 10:44:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209641
IP address blocks: 2a0d:b9c2::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:25:1f:a0:af:e4:cc:95:7f:43:54:14:99:47:16:08:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec50ab4ccf72e3d60c09f964019d6c034c50a6c
Validity
Not Before: Nov 13 10:44:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=06a6e8c51d2b7dc93187155f07c3cb221e4eb9f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:53:77:21:5b:34:9a:a3:56:d8:44:27:31:47:
1c:f3:03:e0:7f:81:5c:34:20:43:05:c4:9e:89:e9:
72:93:1d:b8:20:62:03:d2:6d:e2:69:e6:ea:86:ad:
c1:41:e4:8f:2b:01:af:cc:bd:ca:c4:fc:07:3b:c3:
e0:f0:6a:56:8d:6d:6e:1f:73:bd:91:17:ec:e0:b4:
40:a4:4e:3e:53:96:6a:ad:67:19:5d:2d:1e:07:ef:
3c:e7:94:d7:83:4a:5c:60:31:b1:a5:fd:f1:5c:1e:
72:5d:57:19:9a:45:dc:15:b7:e5:7f:63:a5:a6:a0:
90:83:e5:6d:93:20:28:e9:c8:7a:04:46:c2:59:31:
5d:fe:9b:e0:c0:8c:4d:89:2c:1f:41:92:96:e9:e2:
ec:28:3e:ee:d4:f5:2f:ee:0f:bd:04:f2:3b:67:b8:
ef:5f:64:7c:cf:a6:4e:e6:aa:ce:f2:c1:e2:a1:bf:
04:1a:98:3a:dd:dd:29:c1:cb:bf:bf:6a:be:9a:94:
cf:4b:dd:de:19:98:de:86:25:42:f0:34:03:4e:09:
52:15:d2:2d:00:d1:c2:0b:a7:4d:8a:b2:a7:76:c2:
3c:48:55:e5:66:6f:e4:f8:ee:4b:92:7f:90:98:2f:
87:52:42:19:65:16:8b:c8:c5:ec:b3:ef:89:e3:7c:
c7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A6:E8:C5:1D:2B:7D:C9:31:87:15:5F:07:C3:CB:22:1E:4E:B9:F9
X509v3 Authority Key Identifier:
keyid:3E:C5:0A:B4:CC:F7:2E:3D:60:C0:9F:96:40:19:D6:C0:34:C5:0A:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/BqboxR0rfckxhxVfB8PLIh5Oufk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:b9c2::/32
Signature Algorithm: sha256WithRSAEncryption
56:27:2c:2c:2c:35:eb:7f:45:b0:c9:a6:3d:a3:84:98:2a:45:
f0:d2:7c:9a:df:06:12:4c:43:7d:0a:1d:15:bc:26:a8:18:24:
39:5c:18:71:10:ba:c7:d5:3e:66:ca:a8:14:d3:82:4d:14:30:
e5:e4:45:0e:fd:e9:d7:a8:cb:e5:da:e3:0a:e8:51:a7:5d:14:
e5:b2:11:2f:87:a0:81:29:15:63:c2:23:e6:23:7b:53:34:d8:
b7:41:67:c1:ff:fc:33:98:a9:02:99:9e:31:40:2e:6c:6f:72:
8f:41:aa:55:38:7e:a6:57:fd:9a:f7:26:85:8f:61:e1:65:ba:
40:c5:3a:4d:1b:55:d4:d9:fa:94:db:73:c6:8f:04:56:70:1b:
6c:bd:be:c3:41:1e:ef:eb:8a:7f:f4:0f:7d:70:b3:2c:65:88:
10:cb:0c:89:a9:a3:b5:f5:a5:ee:af:29:ea:a5:93:7f:e7:a2:
08:a2:98:0b:cf:ac:ce:d4:38:27:0f:dd:42:c3:14:83:c6:a0:
ff:e0:cf:d5:61:2b:46:57:b8:07:93:72:3d:e0:f9:98:a0:94:
8c:dc:ac:0b:c1:2a:f1:e4:0d:86:c8:67:2d:5a:81:e7:4e:2e:
ef:fe:4c:88:72:71:be:50:95:11:b8:f0:46:ca:29:24:c9:50:
4f:5b:c4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:38:56 2024 by rpki-client on console-fra.rpki-client.org