Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/B_U0Thd2hek7c5TP5isgn3nFY38.roa
File: B_U0Thd2hek7c5TP5isgn3nFY38.roa (raw, json)
Hash identifier: oQ6pviFf5arQiDT+3KFkPtsqKciLEZWlSeEkqGt55/c=
Subject key identifier: 07:F5:34:4E:17:76:85:E9:3B:73:94:CF:E6:2B:20:9F:79:C5:63:7F
Certificate issuer: /CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
Certificate serial: 01942143AD35369B8A9BFFB8170166553C43
Authority key identifier: EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/B_U0Thd2hek7c5TP5isgn3nFY38.roa
Signing time: Wed 01 Jan 2025 09:47:50 +0000
ROA not before: Wed 01 Jan 2025 09:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 131642
IP address blocks: 2a13:2200::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:ad:35:36:9b:8a:9b:ff:b8:17:01:66:55:3c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
Validity
Not Before: Jan 1 09:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07f5344e177685e93b7394cfe62b209f79c5637f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:68:5a:57:b4:04:44:8f:52:a3:c3:07:41:b6:
1e:d4:67:b5:67:b2:d8:82:50:76:d2:88:b7:8a:97:
44:ae:56:78:70:21:0a:88:19:f8:4b:b9:51:ed:1f:
32:92:9e:4d:4d:6d:46:ce:6e:d2:6d:7c:af:2b:53:
2f:83:e9:53:48:e6:e2:d3:c4:c4:c6:b8:47:47:bb:
93:63:3a:44:e2:59:71:1a:f1:58:f2:95:3e:3d:df:
10:75:35:d8:18:7d:65:0d:d8:9a:a4:11:57:fa:ca:
4b:5c:90:15:5d:dd:49:81:72:0b:40:fe:85:17:24:
43:36:d6:f1:18:43:66:03:a2:7a:9d:c2:9b:af:6b:
21:18:cc:f4:4d:68:1b:8f:1b:53:c8:43:98:91:be:
f7:f9:1b:01:4a:13:4c:3a:77:e5:64:93:ab:ab:dd:
78:c0:13:84:03:30:43:89:d7:ce:e8:2a:8e:25:1f:
bd:80:ee:9a:b7:a7:4e:9c:09:a8:da:66:6f:b0:6b:
d7:50:35:4d:2d:a8:e8:ef:86:9b:73:c0:41:68:4e:
78:6c:08:1d:40:83:4f:ad:f6:be:2e:20:c5:43:43:
26:d8:e8:4b:00:4b:1e:60:57:82:3c:fe:a6:8a:39:
bd:81:9a:db:25:1c:f5:f5:01:95:e7:19:fd:11:78:
8b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F5:34:4E:17:76:85:E9:3B:73:94:CF:E6:2B:20:9F:79:C5:63:7F
X509v3 Authority Key Identifier:
keyid:EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/B_U0Thd2hek7c5TP5isgn3nFY38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:2200::/47
Signature Algorithm: sha256WithRSAEncryption
64:7c:99:27:d1:11:63:8d:4e:80:54:e9:11:cd:38:13:6c:92:
8d:14:62:28:e1:e2:31:b6:54:c8:72:cc:c4:4f:9d:95:c4:7a:
fa:44:5a:f6:23:a8:4d:de:b0:2a:58:24:05:54:35:34:42:fb:
41:e4:9b:6e:67:32:16:7b:cb:31:db:1c:38:36:90:f5:eb:ab:
9e:fa:8e:2c:b7:bc:e2:c1:52:a0:fc:1b:8f:86:cb:a8:ae:2a:
30:9f:ae:51:2d:2e:5d:05:36:76:6f:7a:ff:9e:89:df:6c:0a:
3b:95:d9:67:34:4b:a6:4a:90:de:d3:b5:86:ee:89:b7:e0:7a:
36:a4:b3:06:55:76:8c:ab:9c:86:e7:a3:4f:9d:25:d5:dd:c6:
76:0f:17:f4:81:bd:2a:6b:f7:1a:4e:0f:23:f8:9e:dc:9f:af:
67:63:19:35:e6:c5:e2:f9:8e:4a:75:ad:0f:89:cf:99:85:53:
b9:e2:f4:71:e7:6a:cf:b9:d4:d2:bf:5e:58:ab:df:c0:66:b2:
65:35:b4:19:15:a6:21:d3:6c:05:bd:7b:9a:7b:a7:dd:e9:4c:
f3:27:d3:c3:5c:c7:d5:6f:e5:7b:fa:63:ba:c8:c4:9a:5c:9e:
3e:f0:38:5f:62:9c:74:82:82:3f:e6:82:8a:86:fe:7d:44:78:
bc:61:59:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:45:58 2025 by rpki-client