Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/bjCtwaamOgxw0Xg82kluS8PB7V8.roa
File: bjCtwaamOgxw0Xg82kluS8PB7V8.roa (raw, json)
Hash identifier: v+0XNorCDJlFbTsmyu56ngcT05sUOeAxt+RXGTOihD8=
Subject key identifier: 6E:30:AD:C1:A6:A6:3A:0C:70:D1:78:3C:DA:49:6E:4B:C3:C1:ED:5F
Certificate issuer: /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial: 01941FFA433A0BDC554B743FEACCAEB63371
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/bjCtwaamOgxw0Xg82kluS8PB7V8.roa
Signing time: Wed 01 Jan 2025 03:48:02 +0000
ROA not before: Wed 01 Jan 2025 03:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60998
IP address blocks: 2a0f:4440:aaaa::/48 maxlen: 48
2a0f:4440:abcd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:43:3a:0b:dc:55:4b:74:3f:ea:cc:ae:b6:33:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Validity
Not Before: Jan 1 03:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e30adc1a6a63a0c70d1783cda496e4bc3c1ed5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:12:90:32:9c:6c:85:75:27:05:c2:dc:20:af:
59:21:2f:ab:b0:50:59:ec:29:38:c7:6a:ec:bf:13:
91:b1:b0:9e:cf:1c:8d:61:a2:e0:c5:be:80:42:4c:
70:a1:6c:f6:41:63:32:97:46:5e:06:c5:e2:da:ba:
a1:59:4b:2a:db:b7:11:75:8b:51:aa:df:5e:06:b7:
ee:b2:32:e4:0d:d5:a5:5c:f4:19:8c:26:0a:02:ef:
44:5f:66:1c:c0:c9:82:7c:71:b7:83:9c:55:69:47:
eb:ba:0c:f7:cd:64:da:70:d1:69:6f:24:91:23:dc:
30:55:ac:70:c5:0c:26:7c:fe:a2:c4:6a:49:5e:26:
09:ea:63:e1:cc:a3:2e:ff:33:36:fd:d6:a4:a3:e0:
fc:93:6f:2a:fc:54:e7:2b:15:9f:fc:e9:44:63:76:
dc:71:c7:51:89:9d:01:63:bc:70:f7:1a:9b:88:5e:
10:6e:97:7f:95:ef:af:3b:7c:39:96:5d:b2:4e:1b:
7e:3a:4d:47:ff:07:5c:01:e3:36:b3:e4:20:9b:21:
29:f2:06:4b:40:17:cb:a6:07:58:5e:4b:d9:bc:74:
ba:ca:25:55:93:4f:35:5d:7d:c6:cb:d7:0f:4a:a9:
7b:50:55:bb:78:a0:45:2d:49:25:ea:65:bc:9f:54:
66:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:30:AD:C1:A6:A6:3A:0C:70:D1:78:3C:DA:49:6E:4B:C3:C1:ED:5F
X509v3 Authority Key Identifier:
keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/bjCtwaamOgxw0Xg82kluS8PB7V8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:4440:aaaa::/48
2a0f:4440:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
78:92:35:be:f6:cc:c3:db:05:0d:c7:88:10:d3:36:0e:72:0b:
5e:d4:a5:8e:b7:bd:a9:a3:cf:19:2f:70:1d:ad:46:64:50:df:
72:af:fb:bb:1e:51:a1:86:d0:fe:c6:33:fb:5f:54:25:0b:7e:
23:34:57:02:88:e9:96:ff:1a:ed:53:f3:2f:aa:11:ca:9a:c4:
e3:c0:df:dd:3f:34:3d:09:43:de:0a:a1:46:f2:a3:bc:6c:e6:
0e:d4:7c:2b:b0:44:5b:04:8b:54:49:6b:4f:44:71:3d:65:bc:
8c:a7:f6:16:fd:42:18:d6:25:d8:7d:11:90:32:25:a0:0e:52:
37:78:61:29:4a:90:fe:94:a0:97:02:97:0c:01:20:75:58:68:
3e:a4:03:2b:94:6e:48:dd:e8:6f:d4:e5:fc:9d:9f:4b:0a:ad:
c5:5d:ab:94:15:c3:e1:8e:49:ef:86:63:3e:65:e0:c1:f6:ce:
b8:54:68:e0:b5:f1:85:7b:dc:d5:ec:37:ad:19:ef:db:33:4b:
4a:a2:b6:e6:01:8d:3e:80:61:79:bb:9a:ac:c2:fa:fe:97:91:
fc:80:a4:20:73:e0:28:4c:9d:84:f5:42:2d:d3:e1:b0:ad:3d:
bf:56:49:7c:ca:6a:3d:4b:cc:4c:7d:d9:52:0f:ee:0d:ee:02:
32:1d:dd:f9
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQf+kM6C9xVS3Q/6syutjNxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ODI0N2QzZjgxNDcyZGJiYTA2ZGJlYTliZDE5Yzc4NWQx
OGJhYmUwHhcNMjUwMTAxMDM0ODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTMwYWRjMWE2YTYzYTBjNzBkMTc4M2NkYTQ5NmU0YmMzYzFlZDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthKQMpxshXUnBcLcIK9ZIS+rsFBZ
7Ck4x2rsvxORsbCezxyNYaLgxb6AQkxwoWz2QWMyl0ZeBsXi2rqhWUsq27cRdYtR
qt9eBrfusjLkDdWlXPQZjCYKAu9EX2YcwMmCfHG3g5xVaUfrugz3zWTacNFpbySR
I9wwVaxwxQwmfP6ixGpJXiYJ6mPhzKMu/zM2/dako+D8k28q/FTnKxWf/OlEY3bc
ccdRiZ0BY7xw9xqbiF4Qbpd/le+vO3w5ll2yTht+Ok1H/wdcAeM2s+QgmyEp8gZL
QBfLpgdYXkvZvHS6yiVVk081XX3Gy9cPSql7UFW7eKBFLUkl6mW8n1RmUwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFG4wrcGmpjoMcNF4PNpJbkvDwe1fMB8GA1UdIwQY
MBaAFNmCR9P4FHLbugbb6pvRnHhdGLq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMllKSDBfZ1VjdHU2QnR2cW05R2NlRjBZdXI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC82ZGJjOTktYmZhOS00ZWY3LWE3OTgt
YTMwMzI2MTU2NjBjLzEvYmpDdHdhYW1PZ3h3MFhnODJrbHVTOFBCN1Y4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC82ZGJjOTktYmZhOS00ZWY3LWE3OTgtYTMwMzI2MTU2NjBj
LzEvMllKSDBfZ1VjdHU2QnR2cW05R2NlRjBZdXI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKg9EQKqq
AwcAKg9EQKvNMA0GCSqGSIb3DQEBCwUAA4IBAQB4kjW+9szD2wUNx4gQ0zYOcgte
1KWOt72po88ZL3AdrUZkUN9yr/u7HlGhhtD+xjP7X1QlC34jNFcCiOmW/xrtU/Mv
qhHKmsTjwN/dPzQ9CUPeCqFG8qO8bOYO1HwrsERbBItUSWtPRHE9ZbyMp/YW/UIY
1iXYfRGQMiWgDlI3eGEpSpD+lKCXApcMASB1WGg+pAMrlG5I3ehv1OX8nZ9LCq3F
XauUFcPhjknvhmM+ZeDB9s64VGjgtfGFe9zV7DetGe/bM0tKorbmAY0+gGF5u5qs
wvr+l5H8gKQgc+AoTJ2E9UIt0+GwrT2/Vkl8ymo9S8xMfdlSD+4N7gIyHd35
-----END CERTIFICATE-----
Generated at Mon Apr 7 03:55:58 2025 by rpki-client