Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/BjNcWgFCcgba03gZ00Wn0vEqj3g.roa
File: BjNcWgFCcgba03gZ00Wn0vEqj3g.roa (raw, json)
Hash identifier: U/XRsHv7C+f9dXk91I1pC9Y4HNFCH0uKUdMuFoDViRQ=
Subject key identifier: 06:33:5C:5A:01:42:72:06:DA:D3:78:19:D3:45:A7:D2:F1:2A:8F:78
Certificate issuer: /CN=4776afb74fad5baf0a6180b49510d8b8497df8d3
Certificate serial: 0194221FF378A0C750802FA556A1A7406CED
Authority key identifier: 47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/BjNcWgFCcgba03gZ00Wn0vEqj3g.roa
Signing time: Wed 01 Jan 2025 13:48:26 +0000
ROA not before: Wed 01 Jan 2025 13:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212222
IP address blocks: 2a04:2b00:14cc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft
rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Apr 2025 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:f3:78:a0:c7:50:80:2f:a5:56:a1:a7:40:6c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4776afb74fad5baf0a6180b49510d8b8497df8d3
Validity
Not Before: Jan 1 13:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06335c5a01427206dad37819d345a7d2f12a8f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e8:b7:69:c9:6f:b0:86:2b:0d:56:3a:0d:59:
82:62:85:3a:06:f8:3d:48:f1:59:b9:b9:b9:06:c4:
05:8e:03:b3:e2:ff:99:b5:d0:b3:2e:6c:0e:ef:18:
94:03:98:1b:11:c2:1c:27:66:9c:3b:9d:fd:1e:0e:
53:cb:47:b3:80:38:9f:5b:72:fd:bf:c8:f0:bb:40:
24:dc:c3:2b:6a:66:6b:d3:fb:37:82:a3:35:bf:66:
a3:92:02:20:1b:00:15:60:c2:a8:ca:c5:35:19:65:
2b:c0:ac:17:92:51:96:fa:75:b3:03:31:9c:0e:ef:
17:e2:c5:3f:84:7e:ed:0b:3e:aa:dd:df:33:ff:d1:
c7:40:65:21:e8:f8:dc:57:5b:7f:60:45:88:79:c8:
80:39:36:c0:37:a0:d8:ba:cf:84:ba:c6:55:27:0c:
2d:9c:e0:75:b5:a0:97:2d:9e:5a:76:b0:46:73:21:
55:6f:6a:f9:e3:3f:11:56:a8:2f:ba:74:16:84:4a:
c5:f2:9d:d8:b1:c3:8c:62:94:0a:b8:cc:81:de:56:
a5:6b:9f:42:9e:bc:6e:da:e3:b6:bf:fa:a1:c3:d0:
c7:f2:a6:76:3f:36:d7:2d:5c:6d:6c:97:26:b0:e2:
a1:2d:69:07:e9:5c:59:87:e9:5e:c1:18:c8:78:ea:
47:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:33:5C:5A:01:42:72:06:DA:D3:78:19:D3:45:A7:D2:F1:2A:8F:78
X509v3 Authority Key Identifier:
keyid:47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/BjNcWgFCcgba03gZ00Wn0vEqj3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:2b00:14cc::/48
Signature Algorithm: sha256WithRSAEncryption
59:05:9e:ba:58:9e:1a:a1:e0:cb:52:9a:fd:b5:af:2e:99:ff:
93:18:af:27:b6:09:b9:5f:22:64:b9:24:e0:8f:de:78:9d:93:
4b:9b:2d:1b:6f:06:fd:ef:76:28:a6:85:b6:97:61:61:72:71:
54:8c:4d:63:6f:62:2b:9b:8b:24:4e:f5:f6:a2:0b:73:ed:29:
b9:ef:ee:84:2a:79:d9:b7:ba:c7:32:92:fa:f1:c5:22:3e:c5:
e8:47:9f:99:e4:20:98:3c:aa:71:65:aa:75:fa:39:ad:d3:48:
7c:91:9e:ef:bc:44:0b:67:97:d4:05:3c:3e:52:67:48:73:74:
a6:2f:31:e9:14:10:3d:52:9d:39:88:57:e2:3f:e2:bd:4a:86:
57:44:c0:c7:e2:6c:3a:cc:4e:2f:12:72:67:dd:13:c9:99:ae:
69:2e:ca:0f:e8:ea:47:04:7e:3b:6d:7f:37:4a:36:10:0f:54:
70:4c:1b:12:26:90:c1:ab:50:69:33:23:ab:f0:05:6d:37:f9:
51:4c:3f:00:63:f2:1f:0c:18:cf:f7:0d:5c:de:72:9a:de:21:
33:12:36:a6:1d:dd:dd:d3:ed:77:57:ba:5f:0d:c4:76:5e:23:
31:c5:e8:8e:ac:bf:5c:90:84:a1:e6:55:8f:51:09:74:1b:92:
90:ff:94:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 11:04:05 2025 by rpki-client