Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/X8BxYTHLIWztZKq8_5sCsJ-l-JE.roa
File: X8BxYTHLIWztZKq8_5sCsJ-l-JE.roa (raw, json)
Hash identifier: 13Oy/wOBz7UsjlNa/DI3p4YdDq26zretsz1QcdQGK4g=
Subject key identifier: 5F:C0:71:61:31:CB:21:6C:ED:64:AA:BC:FF:9B:02:B0:9F:A5:F8:91
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 0195E44D0E679986FE4AAE92C8BA0B66BD96
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/X8BxYTHLIWztZKq8_5sCsJ-l-JE.roa
Signing time: Sat 29 Mar 2025 23:46:50 +0000
ROA not before: Sat 29 Mar 2025 23:46:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58212
IP address blocks: 2a12:bec4:1520::/44 maxlen: 44
2a12:bec4:1750::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 17:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e4:4d:0e:67:99:86:fe:4a:ae:92:c8:ba:0b:66:bd:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Mar 29 23:46:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5fc0716131cb216ced64aabcff9b02b09fa5f891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c0:12:e4:06:a1:0a:22:bb:84:f4:44:bd:53:
58:69:c6:32:62:42:94:ef:1b:89:d2:e1:bc:b4:d5:
a0:99:9e:54:9d:78:9d:a3:44:18:db:c5:08:c6:53:
a9:36:1f:f6:54:d8:a9:c4:ff:59:65:8b:58:4d:54:
b5:b0:15:d1:a9:11:99:9d:6a:7c:db:f1:05:3b:c4:
8d:a7:84:19:35:ca:18:cb:e7:5f:9e:d4:d3:18:e3:
a3:98:43:99:39:04:0b:4e:13:c8:a4:08:7c:e8:0f:
d2:fc:d6:72:50:1b:80:4a:43:39:e1:d5:d7:e5:90:
3e:60:79:3c:54:58:f2:bc:14:d9:57:80:d5:eb:da:
27:fa:6a:be:c0:ca:7e:38:c2:39:1e:58:04:de:31:
3b:b3:95:94:ec:4b:9f:f4:da:12:37:d9:82:e7:74:
23:d6:43:80:19:4e:a5:c5:28:9d:22:9e:65:d2:59:
bf:a9:a8:e4:a8:f4:40:ed:5e:0c:b3:c3:35:03:52:
d3:bc:ea:b4:ec:af:5e:7c:18:0f:4b:06:bb:68:75:
bb:de:36:57:45:1b:38:42:88:ed:7a:e9:d2:07:88:
9b:1f:07:23:dc:f7:78:ae:ed:86:8e:a9:14:08:d6:
e6:16:c0:11:9c:52:e8:06:b1:29:20:b5:ca:2a:ca:
7d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C0:71:61:31:CB:21:6C:ED:64:AA:BC:FF:9B:02:B0:9F:A5:F8:91
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/X8BxYTHLIWztZKq8_5sCsJ-l-JE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1520::/44
2a12:bec4:1750::/44
Signature Algorithm: sha256WithRSAEncryption
20:02:9c:b4:e0:1f:73:a2:b0:e1:3e:ae:57:2e:fb:a7:73:7f:
d5:2a:b1:53:b5:d9:40:a2:cd:05:43:5b:1b:67:f3:5b:e7:4c:
0f:75:6d:31:8e:15:a0:e2:12:66:68:d9:82:65:66:cd:3f:3c:
cc:56:92:94:52:f2:c9:72:31:69:04:02:8e:09:ce:f4:34:58:
e8:84:29:3c:93:0a:f1:a4:2e:5b:9e:40:48:36:e7:34:00:12:
55:4c:61:5b:85:ce:6c:5d:b2:f1:51:7f:da:62:b0:c5:27:1e:
c4:78:f8:30:c0:98:f8:62:59:9d:eb:3b:db:60:b9:42:5a:ef:
be:d4:c2:af:32:e0:91:bf:3c:10:41:9b:bb:b3:b2:74:d3:f0:
25:7f:66:78:f3:d1:d8:71:16:03:e5:48:14:fd:9b:d6:89:d1:
11:b9:c6:11:c0:fa:dd:1b:05:b9:2c:1e:53:28:3e:76:83:5d:
21:20:08:2d:26:a1:be:27:41:48:4d:15:37:c2:04:f1:72:1f:
b7:49:55:2b:ad:8a:01:bc:a9:37:00:44:a8:9f:ab:36:60:42:
fb:05:42:96:0f:b8:d7:db:bf:68:5c:03:a6:58:d7:ff:43:5d:
ed:6b:05:a2:4c:30:43:8a:55:e9:cd:bd:17:8a:c9:72:74:7f:
1a:90:1c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:38:10 2025 by rpki-client