Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/b_otylVy-2-ZaxqS63ImTnqN5XY.roa
File: b_otylVy-2-ZaxqS63ImTnqN5XY.roa (raw, json)
Hash identifier: 497dF0dLgdp1YY0zONF+uPLOwSZ1FCeF9z4sWNvPg4M=
Subject key identifier: 6F:FA:2D:CA:55:72:FB:6F:99:6B:1A:92:EB:72:26:4E:7A:8D:E5:76
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 01951078BB40C253EF6BD1CD5C576A82A274
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/b_otylVy-2-ZaxqS63ImTnqN5XY.roa
Signing time: Sun 16 Feb 2025 20:35:02 +0000
ROA not before: Sun 16 Feb 2025 20:35:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395954
IP address blocks: 2a13:c040::/29 maxlen: 29
2a14:6ac0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 11:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:78:bb:40:c2:53:ef:6b:d1:cd:5c:57:6a:82:a2:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Feb 16 20:35:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ffa2dca5572fb6f996b1a92eb72264e7a8de576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0e:f1:88:6e:4c:32:d7:ce:6d:6c:2d:b8:09:
f4:26:d3:98:a8:59:63:71:ac:6b:f5:7f:6e:eb:b8:
5c:04:02:22:25:cf:48:59:02:8b:77:6c:27:a7:1a:
53:1a:fe:32:9e:d7:20:7f:a5:40:94:39:46:6b:21:
79:07:10:32:77:87:62:42:9e:17:03:f9:f9:a4:d5:
0b:68:38:db:46:46:f8:fd:a3:d3:21:0e:aa:8e:44:
6b:b5:ad:d3:3c:e8:20:55:cd:85:40:fd:8c:92:b2:
53:99:9c:bc:ea:e2:87:0a:2b:16:cb:eb:48:38:d3:
57:2a:ad:bc:bf:17:11:06:3f:73:bf:eb:c0:0f:40:
c4:43:50:5f:a9:9a:bb:34:3b:7e:fd:61:fb:0a:45:
bd:8e:50:8a:ac:0f:53:91:bb:4b:60:d0:a7:93:a2:
a3:35:2d:a4:38:57:da:98:65:bf:11:3f:f5:14:00:
b1:d5:20:48:1c:b8:90:a6:88:31:cf:d6:aa:ce:4e:
e0:44:c8:af:76:e2:ac:d1:8e:60:cc:35:5e:a0:1d:
ae:15:38:09:28:9a:2e:80:9a:7c:75:c5:2e:6a:e9:
48:01:12:8b:3e:26:79:3c:78:6a:15:81:2c:76:55:
aa:39:d2:08:0e:91:37:10:64:95:9f:59:8b:55:a3:
4c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FA:2D:CA:55:72:FB:6F:99:6B:1A:92:EB:72:26:4E:7A:8D:E5:76
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/b_otylVy-2-ZaxqS63ImTnqN5XY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c040::/29
2a14:6ac0::/29
Signature Algorithm: sha256WithRSAEncryption
0c:12:83:a4:8a:f7:49:af:bb:d9:55:e2:21:08:1c:3c:1d:f0:
d4:e8:d7:08:a2:37:8d:45:0b:b4:fc:d7:d3:c7:69:79:30:e0:
e7:0e:49:5e:62:86:ee:14:15:80:17:96:8d:96:ed:8b:94:10:
69:85:01:94:e8:68:8a:07:b5:7f:d2:85:43:1c:31:e9:05:1f:
cb:73:b1:bf:69:34:3c:02:0e:17:4c:93:45:62:d5:3e:a2:1b:
54:30:bd:a8:51:fd:4a:30:66:77:23:22:51:0d:29:8c:ab:6c:
e1:5b:b7:95:98:4e:ee:61:8a:81:2b:bf:3c:10:8e:ce:2d:97:
f2:e4:29:d6:97:54:ec:72:8f:2b:5c:cb:02:56:8f:49:d3:0b:
f0:6c:d0:ba:61:5c:c9:b8:1d:e2:32:69:b8:4f:85:17:7e:6d:
0c:62:5c:f5:57:9d:66:29:7b:71:05:eb:57:49:b2:1a:c7:a4:
a7:48:0c:39:e6:6c:e3:8d:ef:55:98:5e:b5:bb:63:36:93:0b:
fc:1d:8a:5a:82:04:a5:3d:4e:97:4a:15:a8:55:6c:0a:3b:96:
00:27:9f:ed:cb:7d:79:02:54:9b:62:f6:fe:e5:f4:6f:71:83:
82:aa:4b:6c:17:6a:72:d3:8e:ed:d4:45:3a:2b:56:da:2f:7d:
7c:38:84:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:08 2025 by rpki-client