Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/b_K-XO5P7WSoaWNrsvXhJvIjTbM.roa
File: b_K-XO5P7WSoaWNrsvXhJvIjTbM.roa (raw, json)
Hash identifier: bfmFzTeuKRR28Ci+54IJObwwwONZ0pFYWnhKp/hu7PE=
Subject key identifier: 6F:F2:BE:5C:EE:4F:ED:64:A8:69:63:6B:B2:F5:E1:26:F2:23:4D:B3
Certificate issuer: /CN=046acac713123856d4ae6c16054602684dfd07cb
Certificate serial: 0194266BE5ECA1A2F4491019DCE35F60AA3D
Authority key identifier: 04:6A:CA:C7:13:12:38:56:D4:AE:6C:16:05:46:02:68:4D:FD:07:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/b_K-XO5P7WSoaWNrsvXhJvIjTbM.roa
Signing time: Thu 02 Jan 2025 09:49:52 +0000
ROA not before: Thu 02 Jan 2025 09:49:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214718
IP address blocks: 2a14:6440::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:e5:ec:a1:a2:f4:49:10:19:dc:e3:5f:60:aa:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046acac713123856d4ae6c16054602684dfd07cb
Validity
Not Before: Jan 2 09:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ff2be5cee4fed64a869636bb2f5e126f2234db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:77:ba:e9:e3:71:3f:11:db:65:eb:3d:73:80:
9e:18:1d:65:da:ba:7c:ca:08:43:c8:ae:53:a1:44:
97:ed:d4:ef:84:1b:c9:71:7c:21:29:90:90:17:e7:
d5:6c:7c:a2:35:a2:7f:bc:19:68:26:29:dd:e0:a0:
40:82:4d:9b:3a:d7:83:16:b9:dd:b9:a2:e9:3f:96:
11:a4:ae:1b:08:07:27:59:04:95:05:98:16:20:59:
b6:0c:88:1d:d1:05:42:9a:23:58:0d:0d:16:a4:6e:
15:25:85:51:45:35:b5:f5:8d:91:45:a0:02:17:d7:
64:8a:c8:48:94:ec:d5:1e:1f:55:24:0d:2a:34:f9:
1f:05:29:6b:7a:46:d9:f7:15:bc:94:c5:b2:30:02:
be:23:bb:0e:c3:63:e8:8b:67:79:24:80:ed:be:47:
4d:08:28:c7:74:74:4b:6b:c5:b2:64:24:49:0e:07:
f6:6b:39:2e:c5:05:9a:f7:88:52:9a:e1:56:7c:c8:
df:9b:d4:01:da:a0:92:de:91:53:8e:20:58:a1:6b:
9d:59:b8:0c:9e:ae:8e:12:ae:e7:de:87:21:13:71:
ed:2d:68:14:b8:3c:af:f3:91:9b:31:b4:10:34:c4:
30:4d:a3:9d:89:9f:87:2d:8a:e5:1b:70:1c:22:41:
f2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F2:BE:5C:EE:4F:ED:64:A8:69:63:6B:B2:F5:E1:26:F2:23:4D:B3
X509v3 Authority Key Identifier:
keyid:04:6A:CA:C7:13:12:38:56:D4:AE:6C:16:05:46:02:68:4D:FD:07:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/b_K-XO5P7WSoaWNrsvXhJvIjTbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6440::/32
Signature Algorithm: sha256WithRSAEncryption
74:f2:76:52:ba:d9:27:5e:74:0f:9f:35:7e:85:24:65:bb:15:
e6:eb:c1:79:02:cd:62:59:1e:b7:60:a2:a5:21:c0:66:0e:f8:
09:72:78:7a:2c:c5:d3:be:83:18:e2:21:04:76:e1:c1:74:36:
d6:4c:1c:aa:6e:78:15:e5:4a:89:23:cf:a8:94:63:9e:d1:ac:
d9:4d:ab:82:73:10:2a:59:6a:ab:9e:fa:6e:91:e1:ae:8c:d6:
f3:50:0e:bf:73:24:b8:32:ff:e2:b5:fa:3b:b7:a6:8c:04:41:
10:24:89:bd:ed:63:56:6d:2a:aa:76:d4:e6:8e:52:73:bd:6d:
b8:5c:af:e1:b0:15:e0:3b:a9:a8:df:87:57:00:41:4e:70:f5:
b8:99:53:eb:3c:42:9a:88:38:6c:28:bf:ef:22:71:bb:59:cc:
e9:ad:f9:53:2d:a5:02:c5:41:ee:0e:78:ea:2f:f0:aa:ee:46:
a0:6d:e8:f3:75:86:eb:5b:83:a6:e3:7f:9a:40:bb:44:da:e6:
94:39:93:96:d6:58:5f:5a:dc:07:08:20:8b:e4:fa:26:05:1d:
b0:7c:43:3a:4e:a4:74:39:c2:79:d1:7c:1c:9d:67:6c:58:88:
42:e6:25:30:51:8a:2b:c5:7c:f1:c5:20:72:cb:a4:34:5d:46:
a1:6a:b0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:31:04 2025 by rpki-client