Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/b2qcws1yCmD6AFlTLFciLaL0rpc.roa
File: b2qcws1yCmD6AFlTLFciLaL0rpc.roa (raw, json)
Hash identifier: Rv3+U639/BXH8ADZzkpPGvsw+vziwnjLXX+TiB3flx8=
Subject key identifier: 6F:6A:9C:C2:CD:72:0A:60:FA:00:59:53:2C:57:22:2D:A2:F4:AE:97
Certificate issuer: /CN=5e6d2c2b69c24851623bf91476902635a4ce09ea
Certificate serial: 01941FFA79B49C5886D4C03BEDFC3E5BE8D4
Authority key identifier: 5E:6D:2C:2B:69:C2:48:51:62:3B:F9:14:76:90:26:35:A4:CE:09:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/b2qcws1yCmD6AFlTLFciLaL0rpc.roa
Signing time: Wed 01 Jan 2025 03:48:16 +0000
ROA not before: Wed 01 Jan 2025 03:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49736
IP address blocks: 213.108.184.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 15:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:79:b4:9c:58:86:d4:c0:3b:ed:fc:3e:5b:e8:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6d2c2b69c24851623bf91476902635a4ce09ea
Validity
Not Before: Jan 1 03:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f6a9cc2cd720a60fa0059532c57222da2f4ae97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7e:e3:ce:ee:28:d1:26:71:dd:02:4c:19:36:
b0:9f:e6:43:d1:b1:ce:7e:72:6e:88:ab:24:02:a9:
24:29:fe:d8:51:54:49:20:14:ce:27:b0:b5:f2:51:
ec:da:0d:75:0a:3b:7d:8c:64:a6:1e:cb:66:0f:d4:
32:78:3b:6f:b4:6e:f1:66:ac:c8:09:3d:f3:ac:5e:
d5:2c:6e:a2:95:56:41:26:f4:e4:3a:ea:cf:73:fd:
c8:24:7e:54:32:e1:66:5e:f0:04:7a:60:38:93:cd:
af:d0:dd:64:59:2c:ca:c2:ef:d3:ba:cc:a3:57:5a:
df:67:a1:ae:dd:9f:ae:76:6f:4b:40:7e:f6:72:dd:
ab:bd:ed:1a:4e:16:d5:82:d6:b9:43:d5:fa:eb:7a:
e5:a4:28:05:6c:c6:f2:31:1d:26:03:71:be:aa:cd:
d9:dc:16:9f:e3:60:a7:41:6f:35:68:b3:10:e9:c4:
70:21:72:84:ee:e4:69:44:2c:01:db:83:87:39:50:
8b:b1:59:af:00:1e:ed:e9:79:b2:f6:99:17:80:56:
fe:de:e3:6e:16:fa:42:bb:0b:9d:b7:bc:4d:c3:7b:
22:55:8e:f5:b8:99:de:14:9f:5e:fe:52:40:74:00:
0c:b4:84:19:d0:0d:60:22:59:2d:8f:92:47:3c:16:
2a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:6A:9C:C2:CD:72:0A:60:FA:00:59:53:2C:57:22:2D:A2:F4:AE:97
X509v3 Authority Key Identifier:
keyid:5E:6D:2C:2B:69:C2:48:51:62:3B:F9:14:76:90:26:35:A4:CE:09:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/b2qcws1yCmD6AFlTLFciLaL0rpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.108.184.0/21
Signature Algorithm: sha256WithRSAEncryption
4e:0c:9f:35:ba:16:cc:23:f8:93:2c:35:61:71:8c:ad:ff:f0:
dd:46:6b:30:d8:5f:a9:e3:10:6a:5d:23:17:12:e9:0f:d5:44:
9e:94:3d:13:b3:b5:42:c3:ee:bf:67:b3:fa:3f:d1:8a:6e:9d:
f4:3d:21:26:cd:05:ce:bf:7f:92:59:ad:04:0d:66:5c:53:7d:
62:00:f6:8c:21:b0:b3:62:87:d9:e0:b0:d8:32:2f:28:be:34:
47:cb:b0:2f:f8:28:45:19:1f:ae:30:b4:5b:6c:c4:07:2c:b1:
c4:14:16:c4:39:51:f1:2e:48:e6:22:00:49:15:31:db:07:7f:
84:db:bf:9a:a8:82:ce:0a:df:a6:e1:40:a1:09:59:b7:1a:40:
ff:57:77:4e:33:a0:a0:42:39:32:55:dd:08:a4:87:3c:ca:c6:
20:62:7c:33:bf:dc:da:aa:a6:f7:36:f4:78:14:a7:73:d9:1a:
87:a9:51:4b:8f:31:ee:29:0b:bb:c8:7c:0c:6f:1f:62:9f:21:
73:94:e1:09:e8:5f:0a:48:2a:4d:5e:a8:bf:99:5e:89:44:bd:
0f:90:66:9a:4d:09:c6:3b:38:9b:0a:a9:e6:e0:22:f5:38:d1:
ec:cf:be:0c:b3:7e:7f:03:c6:2d:94:32:78:b4:ff:2b:56:0c:
2d:01:95:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:34:47 2025 by rpki-client