Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/bVoPO_kuGjJeQ_WdFTCc4Jx2oLw.roa
File: bVoPO_kuGjJeQ_WdFTCc4Jx2oLw.roa (raw, json)
Hash identifier: EJPg3LL1a0LdpJ0FryPnZdGj4+/hRiOP31APEGYRAlc=
Subject key identifier: 6D:5A:0F:3B:F9:2E:1A:32:5E:43:F5:9D:15:30:9C:E0:9C:76:A0:BC
Certificate issuer: /CN=9d07041fe55591e4e2236a40f43900ef26ef045e
Certificate serial: 0194258E31C94A5B363F2D71ACEA4555559A
Authority key identifier: 9D:07:04:1F:E5:55:91:E4:E2:23:6A:40:F4:39:00:EF:26:EF:04:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/bVoPO_kuGjJeQ_WdFTCc4Jx2oLw.roa
Signing time: Thu 02 Jan 2025 05:47:43 +0000
ROA not before: Thu 02 Jan 2025 05:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31382
IP address blocks: 2001:67c:2248::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:31:c9:4a:5b:36:3f:2d:71:ac:ea:45:55:55:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d07041fe55591e4e2236a40f43900ef26ef045e
Validity
Not Before: Jan 2 05:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d5a0f3bf92e1a325e43f59d15309ce09c76a0bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6c:05:d1:61:89:71:ab:ea:f8:b2:4e:84:29:
fc:bd:cd:f8:f0:d8:a2:bd:43:cd:52:b4:be:15:3e:
b2:e6:33:2f:a2:a4:96:32:93:5e:49:44:a0:f2:fd:
75:cf:e0:d2:0c:be:ca:92:50:38:11:6a:d2:ac:dc:
13:b2:8d:b4:03:59:23:19:6b:84:43:9e:b1:be:a4:
90:3d:1d:77:bd:fe:e6:d3:be:0b:12:f3:4d:31:de:
33:45:29:42:6b:d5:0c:29:6b:e4:13:72:6c:be:c1:
67:f0:8b:68:61:79:1b:3c:58:2a:6c:cd:42:d9:67:
7a:a1:c2:1d:b9:03:4c:47:94:d4:04:ec:4b:5a:87:
33:c7:d4:1e:c9:e1:19:67:13:4b:88:86:1d:71:a7:
14:2d:1d:4a:e1:0f:76:ea:2c:f8:64:c0:ae:55:6c:
56:0a:04:98:a4:a0:7b:e3:b7:b4:9a:74:6c:ff:ed:
33:0f:f6:cb:50:20:1d:3b:ae:18:5e:c1:de:1c:5d:
d3:13:59:60:d7:fe:0c:f6:24:82:bf:ad:43:d8:8a:
1c:05:10:e3:fa:a5:60:19:e7:53:56:73:ad:37:d7:
4e:99:19:ba:34:88:28:2b:e0:de:91:9f:aa:9a:e7:
bb:73:6a:12:c9:9f:8e:f0:2d:26:e0:36:34:92:b3:
bd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:5A:0F:3B:F9:2E:1A:32:5E:43:F5:9D:15:30:9C:E0:9C:76:A0:BC
X509v3 Authority Key Identifier:
keyid:9D:07:04:1F:E5:55:91:E4:E2:23:6A:40:F4:39:00:EF:26:EF:04:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/bVoPO_kuGjJeQ_WdFTCc4Jx2oLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2248::/48
Signature Algorithm: sha256WithRSAEncryption
0f:86:eb:de:34:d9:61:2d:b4:db:3f:49:6e:2a:63:92:7e:65:
1a:a8:b7:6d:64:37:84:9a:f7:97:9b:9f:2c:42:a4:22:be:93:
35:9f:a7:90:2d:f2:f5:b8:bc:93:5a:b6:2f:9b:f5:71:04:31:
af:80:88:8c:32:cc:95:42:68:1d:cf:ae:87:52:1e:63:46:8e:
36:c0:f5:f1:09:29:8f:6c:0f:8d:9b:04:7d:a6:44:ea:d3:57:
0a:59:de:eb:04:92:fa:22:b2:d0:76:2f:19:c8:a1:49:61:3a:
01:19:68:54:52:b1:cc:8c:39:b7:41:52:5e:53:26:1f:0b:5d:
87:eb:f7:d1:70:b9:dc:22:b6:ca:70:40:61:50:82:d7:76:5d:
fb:34:fd:85:d2:26:76:85:38:41:42:70:c6:07:6f:62:cc:c2:
60:67:be:39:62:1a:ec:01:3b:47:03:88:d2:67:3a:fa:b9:d0:
4c:6c:32:c7:2a:d4:3a:e1:5b:8f:51:a5:5d:bf:a4:d6:2a:48:
41:56:c5:d6:a8:97:cf:ca:1d:39:67:88:af:98:e0:f2:de:c4:
66:ce:87:69:0f:89:c7:29:d6:27:7b:07:8c:76:93:c2:5c:dd:
e3:ab:55:95:62:77:43:2f:6c:c1:3e:c8:5c:00:29:31:f0:a0:
db:11:03:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:42:36 2025 by rpki-client