Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/bj8ZvK_uyCdKljcVZfjeuqSdT1k.roa
File: bj8ZvK_uyCdKljcVZfjeuqSdT1k.roa (raw, json)
Hash identifier: xiFAwHNslOTQsdK9Bug5U/K/Zuun6FXth33SXzlFeJM=
Subject key identifier: 6E:3F:19:BC:AF:EE:C8:27:4A:96:37:15:65:F8:DE:BA:A4:9D:4F:59
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01961F7A0424068202E639F74E963DB4626A
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/bj8ZvK_uyCdKljcVZfjeuqSdT1k.roa
Signing time: Thu 10 Apr 2025 11:33:32 +0000
ROA not before: Thu 10 Apr 2025 11:33:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6079
IP address blocks: 2a06:35c1::/32 maxlen: 32
2a07:a300::/29 maxlen: 29
2a0e:1a86::/32 maxlen: 32
2a0f:2100::/29 maxlen: 29
2a0f:31c0::/32 maxlen: 32
2a0f:dac0::/29 maxlen: 29
2a0f:e0c0::/29 maxlen: 29
2a13:3380::/29 maxlen: 29
2a13:8100::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 09:11:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1f:7a:04:24:06:82:02:e6:39:f7:4e:96:3d:b4:62:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 10 11:33:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e3f19bcafeec8274a96371565f8debaa49d4f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c8:90:9f:6b:d4:07:26:3a:df:5b:42:a0:94:
9c:56:4b:e0:d7:ad:6a:e7:f3:84:69:1f:0f:38:b6:
67:fe:6d:00:61:af:64:ae:13:a8:a0:e0:ed:81:ca:
31:6d:6e:10:ab:70:67:7c:32:f6:91:cb:f7:f8:ec:
3c:b5:45:d4:ec:7e:12:9c:d6:7c:03:bd:a4:5a:a1:
e3:56:b5:62:95:4e:27:b6:28:d3:6d:9f:51:d8:eb:
0f:53:74:a1:4d:06:5c:37:f8:8f:92:97:db:dd:2e:
d8:e4:98:f9:28:09:d4:b5:41:09:71:20:7f:9e:66:
b3:af:73:5a:e9:89:6a:df:0b:38:e1:60:de:68:eb:
ee:db:d7:80:be:26:17:55:83:c8:2e:70:93:66:b6:
41:53:a4:d4:80:fc:7a:2b:d2:40:05:28:02:08:fc:
34:e5:04:b2:11:fa:ad:8a:93:e2:db:09:51:68:65:
b8:5e:52:b8:81:89:88:4d:57:b0:33:09:83:65:3e:
26:31:b5:cc:f6:60:e2:39:e4:18:c4:5d:e5:7b:0f:
ad:9d:8d:0f:8e:48:94:d5:b5:bf:a8:54:f4:a6:9d:
c0:0e:f1:15:0c:f2:75:b6:5d:99:82:d9:7c:14:78:
8f:83:a3:67:22:69:aa:e8:43:3f:fb:ba:c7:04:9a:
7e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:3F:19:BC:AF:EE:C8:27:4A:96:37:15:65:F8:DE:BA:A4:9D:4F:59
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/bj8ZvK_uyCdKljcVZfjeuqSdT1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:35c1::/32
2a07:a300::/29
2a0e:1a86::/32
2a0f:2100::/29
2a0f:31c0::/32
2a0f:dac0::/29
2a0f:e0c0::/29
2a13:3380::/29
2a13:8100::/29
Signature Algorithm: sha256WithRSAEncryption
3d:86:a9:1f:ac:58:d6:d7:eb:c9:64:6f:27:31:b0:47:55:1e:
9d:c0:67:e3:10:71:84:ec:f4:67:25:2a:6b:0d:e9:80:9b:61:
a4:67:37:10:e0:e0:47:68:e7:fa:1f:72:55:08:2c:c0:45:3c:
09:78:76:d8:5b:fe:2a:3d:f1:f1:de:5b:22:4f:c0:a1:69:37:
12:e0:f7:2c:72:d7:32:5e:40:dc:99:55:b0:f6:ea:a1:83:6a:
a8:f7:cd:e6:a9:1f:d6:09:ec:b5:e7:68:b6:c9:92:80:7c:08:
1b:3c:bd:b6:de:7e:1a:ae:fb:49:1e:e8:a9:49:b7:66:9e:d0:
7d:d0:84:b6:2a:97:7a:69:02:07:22:95:17:b9:76:2e:1f:64:
bf:a3:9c:26:d5:96:c8:00:44:e2:61:a1:82:89:0e:e5:c5:1d:
36:01:4c:b4:b0:d5:81:b8:27:34:74:6d:c1:81:1b:e9:5a:3e:
a6:ab:ff:23:7b:33:6f:7c:6a:95:bb:ae:76:a3:d6:ae:58:a5:
9b:5b:b8:71:b1:09:ed:6c:e6:0c:21:75:0f:f0:0b:65:13:6b:
1f:fb:4a:84:70:83:e0:b3:91:58:f2:40:71:b0:a8:23:5f:91:
6b:4e:75:21:aa:7e:f4:91:eb:88:65:00:9d:f3:bb:4f:23:df:
5f:df:a6:46
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgISAZYfegQkBoIC5jn3TpY9tGJqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwNDEwMTEzMzMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTNmMTliY2FmZWVjODI3NGE5NjM3MTU2NWY4ZGViYWE0OWQ0ZjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3siQn2vUByY631tCoJScVkvg161q
5/OEaR8POLZn/m0AYa9krhOooODtgcoxbW4Qq3BnfDL2kcv3+Ow8tUXU7H4SnNZ8
A72kWqHjVrVilU4ntijTbZ9R2OsPU3ShTQZcN/iPkpfb3S7Y5Jj5KAnUtUEJcSB/
nmazr3Na6Ylq3ws44WDeaOvu29eAviYXVYPILnCTZrZBU6TUgPx6K9JABSgCCPw0
5QSyEfqtipPi2wlRaGW4XlK4gYmITVewMwmDZT4mMbXM9mDiOeQYxF3lew+tnY0P
jkiU1bW/qFT0pp3ADvEVDPJ1tl2Zgtl8FHiPg6NnImmq6EM/+7rHBJp+JwIDAQAB
o4ICQjCCAj4wHQYDVR0OBBYEFG4/Gbyv7sgnSpY3FWX43rqknU9ZMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvYmo4WnZLX3V5Q2RLbGpjVlpmamV1cVNkVDFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzBFBAIAAjA/AwUAKgY1wQMF
AyoHowADBQAqDhqGAwUDKg8hAAMFACoPMcADBQMqD9rAAwUDKg/gwAMFAyoTM4AD
BQMqE4EAMA0GCSqGSIb3DQEBCwUAA4IBAQA9hqkfrFjW1+vJZG8nMbBHVR6dwGfj
EHGE7PRnJSprDemAm2GkZzcQ4OBHaOf6H3JVCCzARTwJeHbYW/4qPfHx3lsiT8Ch
aTcS4PcsctcyXkDcmVWw9uqhg2qo983mqR/WCey152i2yZKAfAgbPL223n4arvtJ
HuipSbdmntB90IS2Kpd6aQIHIpUXuXYuH2S/o5wm1ZbIAETiYaGCiQ7lxR02AUy0
sNWBuCc0dG3BgRvpWj6mq/8jezNvfGqVu652o9auWKWbW7hxsQntbOYMIXUP8Atl
E2sf+0qEcIPgs5FY8kBxsKgjX5FrTnUhqn70keuIZQCd87tPI99f36ZG
-----END CERTIFICATE-----
Generated at Tue Apr 22 18:10:27 2025 by rpki-client