Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/boOUh_OegScUQI0rJ0GXkth8K70.roa
File: boOUh_OegScUQI0rJ0GXkth8K70.roa (raw, json)
Hash identifier: h8bMxthrp6BSgypE0yBkUmIOsuBuRoBa/El8mfbO7Rs=
Subject key identifier: 6E:83:94:87:F3:9E:81:27:14:40:8D:2B:27:41:97:92:D8:7C:2B:BD
Certificate issuer: /CN=9d6b9774c94876c98321de3201b11b75a1358d19
Certificate serial: 01941F8C47B2CA661BDDEE898C4DD2B8C9EE
Authority key identifier: 9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/boOUh_OegScUQI0rJ0GXkth8K70.roa
Signing time: Wed 01 Jan 2025 01:47:54 +0000
ROA not before: Wed 01 Jan 2025 01:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 150315
IP address blocks: 2a0d:8140:fff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:47:b2:ca:66:1b:dd:ee:89:8c:4d:d2:b8:c9:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d6b9774c94876c98321de3201b11b75a1358d19
Validity
Not Before: Jan 1 01:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e839487f39e812714408d2b27419792d87c2bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7f:6e:2e:3d:30:c5:01:0e:1b:db:dc:c1:92:
18:85:cd:ca:3a:d8:41:c8:76:b7:8c:82:21:d2:6c:
b8:dc:81:30:81:27:aa:5d:f7:4c:8c:61:6b:7f:38:
ee:c6:3c:3c:94:cf:40:5a:46:6b:6f:f0:b6:ba:d7:
af:f9:86:bc:fd:88:4e:41:1d:78:4f:52:09:ff:f4:
df:c0:0a:1f:82:8d:67:cf:55:7d:24:36:a0:c0:14:
ab:ee:cf:9e:eb:bc:d3:5a:8d:1b:12:7f:c4:f5:e0:
bf:96:9e:1a:21:0c:92:94:58:80:bf:a6:1c:46:d4:
bf:72:54:be:84:b1:e4:b2:8b:2e:a4:15:96:e6:c9:
a6:47:23:1e:79:b3:c2:f7:2d:02:d7:a7:c9:b9:4e:
31:a0:e2:fe:d4:62:52:1d:57:6b:fe:83:64:23:65:
92:74:ae:a6:63:30:aa:99:55:53:c1:07:04:c3:f1:
e7:cf:f4:b1:00:84:9c:e5:6c:c3:7e:0a:2e:fd:a6:
0a:52:31:b5:75:20:fb:f4:9b:83:40:a2:2b:63:9b:
ee:c4:5f:7d:2d:e0:b5:8e:80:3f:3b:72:59:45:19:
44:50:92:c1:7d:df:3c:ae:15:21:cf:f5:a9:aa:f8:
03:c7:15:94:99:41:b4:f3:e3:ef:ba:db:ed:5b:b8:
96:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:83:94:87:F3:9E:81:27:14:40:8D:2B:27:41:97:92:D8:7C:2B:BD
X509v3 Authority Key Identifier:
keyid:9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/boOUh_OegScUQI0rJ0GXkth8K70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:8140:fff::/48
Signature Algorithm: sha256WithRSAEncryption
7f:fa:fd:24:ea:0e:d6:3c:91:53:d3:9a:4c:ac:75:04:e7:ed:
59:8d:dd:bf:29:73:3c:e4:4a:41:63:e3:6e:df:0d:05:25:a5:
00:6f:e8:3e:1d:8c:a5:d2:10:c6:d7:17:ae:88:45:28:f9:8e:
20:35:67:23:d2:f4:ce:bd:c1:cb:44:4b:7d:6e:c2:9b:26:b9:
fb:d6:d6:3b:ed:ca:93:47:0f:c5:51:53:cb:40:86:53:16:57:
5c:15:12:1b:28:7c:85:27:2d:61:70:0a:98:44:6f:1f:8b:d5:
03:16:aa:d5:79:28:99:f8:bc:21:5f:3c:9d:15:85:6a:52:ab:
8e:73:14:77:37:1e:02:9c:20:94:2e:7e:f4:42:a1:b3:b2:ee:
6a:ec:cf:e0:5f:4c:51:b0:87:4f:90:f3:3f:14:04:9d:67:f1:
36:4e:dd:6b:e1:b6:ea:7c:9d:16:87:6a:80:81:b8:04:cd:d4:
12:8c:77:9c:ca:a4:23:67:a6:e8:d1:38:b3:bd:f2:27:6b:d2:
e3:da:fb:4e:9f:34:d5:c5:47:42:6f:aa:07:fb:e0:8a:f3:a0:
36:c9:67:4a:cd:ca:64:51:53:00:51:d1:c6:8a:9e:00:79:6b:
32:39:cc:08:b1:6f:2a:eb:16:a8:8a:c8:3a:8a:bb:76:74:7b:
be:3c:8e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:00 2025 by rpki-client