Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/BbuHJsl2GHi-xNUZUly9rA1sNAg.roa
File: BbuHJsl2GHi-xNUZUly9rA1sNAg.roa (raw, json)
Hash identifier: OVZHuj8GxKU1TCQ84/Pf+P8QcjTJMhiCa9tC1ijvdTM=
Subject key identifier: 05:BB:87:26:C9:76:18:78:BE:C4:D5:19:52:5C:BD:AC:0D:6C:34:08
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01942369C1277040F5F41F5EED61F151B901
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/BbuHJsl2GHi-xNUZUly9rA1sNAg.roa
Signing time: Wed 01 Jan 2025 19:48:40 +0000
ROA not before: Wed 01 Jan 2025 19:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 2a11:fc00::/29 maxlen: 29
2a11:fc00::/32 maxlen: 32
2a11:fc01::/32 maxlen: 32
2a11:fc02::/32 maxlen: 32
2a11:fc03::/32 maxlen: 32
2a11:fc04::/32 maxlen: 32
2a11:fc05::/32 maxlen: 32
2a11:fc06::/32 maxlen: 32
2a11:fc07::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:c1:27:70:40:f5:f4:1f:5e:ed:61:f1:51:b9:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jan 1 19:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05bb8726c9761878bec4d519525cbdac0d6c3408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:19:b6:1b:27:23:dd:67:74:43:75:06:8c:04:
32:0d:0d:b9:1e:5a:58:6b:5a:44:5d:e9:7f:f9:9f:
dd:b4:81:75:3a:53:b3:29:80:26:fe:b9:c1:24:39:
d4:cb:1f:fb:73:0e:cd:2b:51:91:de:ed:e8:72:92:
87:05:3e:bc:1f:c9:13:77:19:27:f0:a8:ff:db:c3:
27:b2:da:3a:03:16:bd:e3:5d:30:86:c1:38:83:c2:
06:0c:58:fa:70:df:c7:89:61:e5:9b:97:ea:2a:24:
d9:a5:ba:4d:d3:b1:3b:72:ca:32:b2:f6:c2:3b:9f:
b1:1f:9a:ca:86:bb:0f:8a:b1:d0:47:c5:cf:9a:4c:
7e:c0:01:6e:bd:32:1d:6d:e4:0a:47:a5:75:e3:2f:
6a:6c:94:2f:74:74:63:bd:b4:f6:09:32:61:81:3c:
53:97:01:43:f6:a6:23:b2:ba:26:03:7f:ce:0c:bb:
0c:43:e4:ea:1c:9b:a1:03:b3:66:04:64:07:83:1a:
e1:ea:40:3d:e1:b6:b6:e0:2b:73:27:74:18:06:39:
6c:2a:a6:07:ac:80:16:d5:e3:d8:b2:d9:87:03:b4:
d0:9a:3c:c0:c8:1b:49:6d:4b:fd:26:b6:9c:bc:50:
f2:56:87:14:5c:ac:b7:f6:32:57:ac:53:79:cb:27:
75:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:BB:87:26:C9:76:18:78:BE:C4:D5:19:52:5C:BD:AC:0D:6C:34:08
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/BbuHJsl2GHi-xNUZUly9rA1sNAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:fc00::/29
Signature Algorithm: sha256WithRSAEncryption
5f:d4:9b:71:c0:4f:7d:2a:22:a4:bf:42:78:33:f4:c7:dd:bc:
25:d9:63:e0:92:33:6d:1d:9e:7c:06:71:16:b5:54:76:32:71:
37:3a:d3:ae:bd:63:52:f7:a1:d5:9c:12:9c:9a:50:c9:11:fe:
fb:c5:f9:34:d9:16:b1:ac:ed:4b:c1:69:21:32:2b:d0:70:78:
f4:0b:de:f1:db:e7:fd:ec:8d:ae:37:fc:b1:14:2c:f4:96:59:
ab:78:ff:b2:27:d1:ba:9d:44:e5:be:09:ca:d9:ec:b0:54:89:
78:7a:c6:98:59:9d:c8:5c:db:1b:28:3c:4b:63:d2:0b:7b:b7:
42:42:69:53:4c:d8:67:21:77:60:90:4f:8a:cc:91:e4:f0:86:
23:45:3e:50:7c:26:d3:b4:16:20:7d:13:9a:ca:83:8a:6e:25:
c2:a7:c0:37:8d:d0:f1:db:8c:da:25:8e:4b:b5:fc:f7:a9:71:
92:32:ad:03:6a:03:d7:c5:d8:01:c9:a2:2d:51:2f:d7:2b:f0:
05:d2:7f:ea:98:88:1d:20:ba:6f:96:e8:d3:bb:61:20:e7:d6:
98:9e:29:25:2a:ad:29:4d:da:32:12:ae:ca:50:c3:3b:30:ad:
bb:8b:90:46:cf:17:9f:6e:8b:ed:ad:d6:7e:06:22:16:06:c2:
c4:ed:93:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:26:15 2025 by rpki-client