Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/dbsBfIyjlvnJeHFT9yt_2dWfazQ.roa
File: dbsBfIyjlvnJeHFT9yt_2dWfazQ.roa (raw, json)
Hash identifier: bQniy8nZ8a6zJ0Od+7AKUQSXFo7deYGH7yzxQPJEcPg=
Subject key identifier: 75:BB:01:7C:8C:A3:96:F9:C9:78:71:53:F7:2B:7F:D9:D5:9F:6B:34
Certificate issuer: /CN=df8f961c6efbb7f9ce74217b1d5dbb54e981c6f2
Certificate serial: 0194214406B7A809EC115D9560C9335BB7D2
Authority key identifier: DF:8F:96:1C:6E:FB:B7:F9:CE:74:21:7B:1D:5D:BB:54:E9:81:C6:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/dbsBfIyjlvnJeHFT9yt_2dWfazQ.roa
Signing time: Wed 01 Jan 2025 09:48:13 +0000
ROA not before: Wed 01 Jan 2025 09:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398781
IP address blocks: 2a09:77c4::/30 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 09:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:06:b7:a8:09:ec:11:5d:95:60:c9:33:5b:b7:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df8f961c6efbb7f9ce74217b1d5dbb54e981c6f2
Validity
Not Before: Jan 1 09:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75bb017c8ca396f9c9787153f72b7fd9d59f6b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ad:87:72:9a:2d:7f:d3:7b:2d:3b:32:71:5a:
5c:fd:16:32:b9:17:d7:1c:71:64:ee:ca:7b:da:76:
49:6c:c5:0b:00:26:40:08:fb:89:d9:ed:56:f7:f0:
96:84:d9:1b:10:c7:3e:e3:eb:57:3a:d2:94:77:09:
dd:3f:be:da:51:eb:bf:a6:e1:ee:ea:62:c1:82:39:
98:34:bd:af:54:4e:bd:bd:9c:e5:81:de:3a:36:9b:
7b:ef:99:3a:63:5a:94:d8:e9:7b:61:7d:ec:12:7b:
5d:f6:72:25:a5:a1:2f:ee:15:8c:30:38:40:d5:c2:
6b:35:5c:57:1d:d2:a5:ce:3b:8d:63:31:05:5d:eb:
40:b4:05:ca:52:e9:8b:27:80:62:0d:ad:46:7f:c3:
a0:0f:ba:11:3f:c4:e1:58:cb:4e:49:3e:ff:da:09:
f7:dc:d3:78:d5:0c:b3:ba:2c:d3:cb:4c:80:76:00:
f1:df:8c:02:ab:5b:fa:56:5b:28:0e:e4:eb:0c:c7:
58:4d:74:0e:07:95:9c:89:c7:f4:f6:b7:e2:b7:38:
2a:4d:41:9c:3a:12:cd:a0:68:30:86:47:05:e1:cd:
f9:c9:8d:ca:66:b0:71:61:02:c2:58:83:19:6c:25:
95:0a:7a:2f:30:c5:14:30:48:a7:c6:8f:31:e3:3e:
a8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:BB:01:7C:8C:A3:96:F9:C9:78:71:53:F7:2B:7F:D9:D5:9F:6B:34
X509v3 Authority Key Identifier:
keyid:DF:8F:96:1C:6E:FB:B7:F9:CE:74:21:7B:1D:5D:BB:54:E9:81:C6:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/dbsBfIyjlvnJeHFT9yt_2dWfazQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:77c4::/30
Signature Algorithm: sha256WithRSAEncryption
4f:0b:7c:2a:d5:b7:c5:f5:c1:7d:cf:1f:40:f0:93:32:0e:6b:
79:77:b3:ff:11:4b:40:19:06:1d:f7:ff:08:13:7e:39:4b:52:
02:54:e3:92:dd:84:e0:aa:95:3b:e5:ce:3a:83:db:2f:2c:e7:
57:a7:44:4b:28:89:97:f3:90:9b:f4:f2:00:9b:b7:43:d4:62:
f7:a0:33:cf:23:b7:91:02:44:51:e5:e7:d3:e0:59:2f:d1:09:
d3:34:6a:72:21:04:75:30:64:d9:0a:ea:eb:41:e8:f0:88:df:
63:27:3b:3d:97:c5:cf:e7:04:ab:5f:af:23:4d:f1:1b:f4:38:
a1:1e:10:f5:2a:bd:a1:cc:30:38:b8:46:ba:ce:78:0b:4d:91:
e3:de:05:be:d6:d5:74:d6:82:f6:af:25:67:54:0e:ff:5d:8b:
4c:c0:9d:1c:81:76:82:5d:7d:14:d8:ac:2e:6e:fc:aa:9b:56:
50:fc:60:12:90:07:52:35:da:7a:86:af:a0:af:5f:9b:9b:01:
2b:aa:f2:d4:a9:b9:88:9e:26:38:c7:6a:d3:93:ae:34:ac:c7:
61:a1:06:e1:1d:d2:7d:5c:4e:69:9a:03:90:f7:fe:24:b4:44:
4d:ed:ab:0f:99:bb:79:06:70:15:4c:23:fb:c9:44:78:c8:4f:
ca:55:66:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:26:43 2025 by rpki-client