Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/6KBWfvurH0ryN0klNLmOfIfXS50.roa
File: 6KBWfvurH0ryN0klNLmOfIfXS50.roa (raw, json)
Hash identifier: bQYxwK8PunB8us4iL4+kd3a48QuBW1TD23kpBG66hec=
Subject key identifier: E8:A0:56:7E:FB:AB:1F:4A:F2:37:49:25:34:B9:8E:7C:87:D7:4B:9D
Certificate issuer: /CN=1f12478b1ca4cba030991bd8cb44d9f24f59c0b8
Certificate serial: 019425217625CEF5EA3BF6627635BC2A6C7B
Authority key identifier: 1F:12:47:8B:1C:A4:CB:A0:30:99:1B:D8:CB:44:D9:F2:4F:59:C0:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxJHixyky6AwmRvYy0TZ8k9ZwLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/6KBWfvurH0ryN0klNLmOfIfXS50.roa
Signing time: Thu 02 Jan 2025 03:48:57 +0000
ROA not before: Thu 02 Jan 2025 03:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202068
IP address blocks: 2001:67c:550::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HxJHixyky6AwmRvYy0TZ8k9ZwLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:76:25:ce:f5:ea:3b:f6:62:76:35:bc:2a:6c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f12478b1ca4cba030991bd8cb44d9f24f59c0b8
Validity
Not Before: Jan 2 03:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8a0567efbab1f4af237492534b98e7c87d74b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:01:ef:a9:49:6f:ff:04:ab:dd:6f:c3:92:96:
07:c3:d6:07:20:25:48:42:48:3e:a2:16:bb:44:af:
70:1c:e1:25:2a:b2:48:6e:2e:0d:ef:75:62:fb:38:
4f:38:e7:3e:f5:31:9d:6f:b0:54:ae:b2:27:9f:10:
e6:cf:e3:48:c0:e7:2c:d0:a7:03:6d:b4:91:8e:8a:
fd:c6:8c:37:8c:17:84:f3:88:ba:11:ad:e8:14:ba:
1f:97:69:c5:cf:a7:a6:9e:93:ee:56:17:9b:29:b3:
28:a0:2d:80:ab:a1:96:57:79:df:ff:9a:1c:d6:a1:
50:f0:3a:a0:a6:0a:d5:fa:8a:a1:69:26:58:53:23:
b7:a1:34:fa:18:96:af:9c:86:97:cf:d7:0f:1c:44:
0d:39:bb:40:cb:b2:b5:03:67:85:e3:17:8c:08:e7:
f8:bb:36:d7:9d:c2:7c:da:28:61:7e:05:3f:c3:87:
dc:f3:08:95:f1:0d:a5:11:96:ef:4c:8e:2a:02:fb:
e9:05:22:7f:f3:ca:c7:1c:84:5d:e5:cd:d8:8e:d7:
b6:f9:e2:2f:6f:1a:43:08:4d:91:ac:9e:dc:92:ff:
e6:44:13:73:c4:f7:4e:85:f7:58:5b:6f:33:b3:45:
63:61:f9:e9:aa:a9:f9:b0:0e:1b:19:35:fd:11:f1:
f5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A0:56:7E:FB:AB:1F:4A:F2:37:49:25:34:B9:8E:7C:87:D7:4B:9D
X509v3 Authority Key Identifier:
keyid:1F:12:47:8B:1C:A4:CB:A0:30:99:1B:D8:CB:44:D9:F2:4F:59:C0:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxJHixyky6AwmRvYy0TZ8k9ZwLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/6KBWfvurH0ryN0klNLmOfIfXS50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:550::/48
Signature Algorithm: sha256WithRSAEncryption
a3:d5:ea:62:48:08:ae:6e:11:36:16:48:19:99:6f:69:41:3e:
13:4b:16:76:35:18:8c:51:da:3b:ec:37:f6:07:c8:8a:6f:2e:
7e:ee:9a:98:5d:c2:c8:c1:03:61:48:37:28:80:56:50:28:d9:
aa:e2:81:44:9d:4b:52:31:1d:39:0d:33:06:56:ed:44:e7:bb:
fe:79:5a:c2:1e:44:22:a8:aa:f5:91:82:86:72:44:1f:24:96:
e2:53:f8:57:5b:ca:68:ad:41:63:a4:08:ce:cd:c7:46:70:56:
eb:f6:9a:13:8b:02:3a:40:ab:7b:14:b2:30:25:5a:b3:f1:32:
35:b4:d0:c5:a1:dc:3f:51:e9:8c:7b:8b:7b:8e:5b:b3:f9:c1:
2f:d8:38:2b:e6:23:f3:54:bd:db:20:7a:1e:9c:4c:91:b1:de:
fb:c0:c4:6f:db:1a:fb:d1:a5:a7:5e:fc:1e:df:08:12:c9:d6:
08:9b:e3:cb:1f:5d:7f:81:da:df:e2:3d:86:b3:59:34:53:a4:
81:5b:a3:67:e1:9b:0e:32:0d:ba:62:6c:98:bf:7f:e1:95:72:
6e:8d:98:36:f2:f0:2a:f6:fc:9e:0e:d4:de:ed:70:aa:94:3d:
2c:46:ce:18:00:8d:b5:f4:b9:95:b2:39:7f:15:b0:ed:96:10:
9b:a8:25:35
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQlIXYlzvXqO/ZidjW8Kmx7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMTI0NzhiMWNhNGNiYTAzMDk5MWJkOGNiNDRkOWYyNGY1
OWMwYjgwHhcNMjUwMTAyMDM0ODU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGEwNTY3ZWZiYWIxZjRhZjIzNzQ5MjUzNGI5OGU3Yzg3ZDc0YjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgHvqUlv/wSr3W/DkpYHw9YHICVI
Qkg+oha7RK9wHOElKrJIbi4N73Vi+zhPOOc+9TGdb7BUrrInnxDmz+NIwOcs0KcD
bbSRjor9xow3jBeE84i6Ea3oFLofl2nFz6emnpPuVhebKbMooC2Aq6GWV3nf/5oc
1qFQ8DqgpgrV+oqhaSZYUyO3oTT6GJavnIaXz9cPHEQNObtAy7K1A2eF4xeMCOf4
uzbXncJ82ihhfgU/w4fc8wiV8Q2lEZbvTI4qAvvpBSJ/88rHHIRd5c3Yjte2+eIv
bxpDCE2RrJ7ckv/mRBNzxPdOhfdYW28zs0VjYfnpqqn5sA4bGTX9EfH1pQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOigVn77qx9K8jdJJTS5jnyH10udMB8GA1UdIwQY
MBaAFB8SR4scpMugMJkb2MtE2fJPWcC4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHhKSGl4eWt5NkF3bVJ2WXkwVFo4azlad0xnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9mNjIzYjYtYTE5OC00MDVjLTgzMjYt
MDlmMTUyNGE1MjQ2LzEvNktCV2Z2dXJIMHJ5TjBrbE5MbU9mSWZYUzUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9mNjIzYjYtYTE5OC00MDVjLTgzMjYtMDlmMTUyNGE1MjQ2
LzEvSHhKSGl4eWt5NkF3bVJ2WXkwVFo4azlad0xnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAVQ
MA0GCSqGSIb3DQEBCwUAA4IBAQCj1epiSAiubhE2FkgZmW9pQT4TSxZ2NRiMUdo7
7Df2B8iKby5+7pqYXcLIwQNhSDcogFZQKNmq4oFEnUtSMR05DTMGVu1E57v+eVrC
HkQiqKr1kYKGckQfJJbiU/hXW8porUFjpAjOzcdGcFbr9poTiwI6QKt7FLIwJVqz
8TI1tNDFodw/UemMe4t7jluz+cEv2Dgr5iPzVL3bIHoenEyRsd77wMRv2xr70aWn
Xvwe3wgSydYIm+PLH11/gdrf4j2Gs1k0U6SBW6Nn4ZsOMg26YmyYv3/hlXJujZg2
8vAq9vyeDtTe7XCqlD0sRs4YAI219LmVsjl/FbDtlhCbqCU1
-----END CERTIFICATE-----
Generated at Sun Apr 20 17:38:28 2025 by rpki-client