Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/bvHSQ8ORKeTNZqYBmxDbSSXFcWE.roa
File: bvHSQ8ORKeTNZqYBmxDbSSXFcWE.roa (raw, json)
Hash identifier: guzy+Zba6OBuC7Re3Ry1KHRe+ITSeHQhCpoidDUXo6c=
Subject key identifier: 6E:F1:D2:43:C3:91:29:E4:CD:66:A6:01:9B:10:DB:49:25:C5:71:61
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01959E2D64DADCA5AB66C17B783721C3F266
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/bvHSQ8ORKeTNZqYBmxDbSSXFcWE.roa
Signing time: Sun 16 Mar 2025 08:58:49 +0000
ROA not before: Sun 16 Mar 2025 08:58:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26042
IP address blocks: 2a0f:1584:1::/48 maxlen: 48
2a10:67c3::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:9e:2d:64:da:dc:a5:ab:66:c1:7b:78:37:21:c3:f2:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 16 08:58:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ef1d243c39129e4cd66a6019b10db4925c57161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:38:00:76:11:9e:6f:c4:dc:27:86:9e:d9:87:
66:f5:79:1e:56:e4:1c:81:c2:ed:d0:0e:85:a0:3b:
01:66:9f:fe:8e:02:d5:bc:01:6a:60:f7:fd:4d:1a:
46:39:51:99:58:8e:de:0e:20:74:16:81:13:e3:1f:
65:24:6e:91:b4:e3:8f:81:d6:10:fb:1a:30:cd:7e:
4a:b4:0e:4d:74:e8:0c:80:8d:a1:40:3a:94:7d:68:
5a:61:77:be:18:44:09:be:0e:69:2d:f6:36:d8:42:
4c:08:5b:76:a1:82:09:72:0a:5b:72:c0:9d:9d:0b:
22:25:f5:95:e5:7f:7c:45:78:85:47:c0:c7:07:3a:
28:34:5f:c3:0e:ff:2c:96:53:15:93:9d:bb:d7:f6:
ec:1f:5f:fd:2c:1a:31:74:00:17:ea:19:6e:2a:db:
89:12:d7:2b:eb:73:64:5d:72:76:45:4d:c0:36:5b:
95:17:5f:8d:5a:78:30:02:d1:ac:07:fb:7a:c8:24:
42:02:f3:5d:a2:a1:d8:b5:6a:05:ba:ab:71:63:30:
cc:bf:9a:15:03:7c:b8:de:dc:d1:8a:6c:16:2a:ef:
8c:c1:b0:77:fc:92:06:d8:b6:be:85:f8:ca:7a:d2:
3b:56:ff:a2:07:81:4b:49:d1:bd:2d:01:04:70:49:
52:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F1:D2:43:C3:91:29:E4:CD:66:A6:01:9B:10:DB:49:25:C5:71:61
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/bvHSQ8ORKeTNZqYBmxDbSSXFcWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1584:1::/48
2a10:67c3::/32
Signature Algorithm: sha256WithRSAEncryption
5c:8d:54:31:48:59:1a:a2:f0:b0:74:6b:e0:80:8d:74:34:c8:
1a:8a:83:1e:80:2b:6f:ab:a8:0d:25:45:b3:51:18:8f:20:fb:
e5:8a:52:de:cf:ab:22:2f:35:9d:01:aa:cd:9d:26:86:cc:3a:
1f:e5:c8:e8:95:72:84:4b:09:53:62:7b:f3:3e:db:70:31:34:
78:24:8a:c2:7b:0a:2c:c9:6d:56:75:0b:e0:1c:97:c2:8e:9a:
ed:b8:11:f6:38:f4:5b:27:4e:9a:ed:aa:0d:c7:47:a0:c4:4e:
db:7c:01:4a:62:06:0e:b8:2b:92:fd:18:68:fc:44:75:2f:e2:
cb:5a:27:5f:d7:f3:5e:dc:d8:fa:4c:b8:dd:bd:16:b1:1e:39:
5d:fa:cd:da:ed:f3:ce:cd:ee:42:9e:8d:df:02:74:d2:8c:f1:
af:e4:0e:52:85:e3:df:a1:2c:c6:30:cc:e3:63:18:17:40:bc:
5d:39:4a:f6:d2:ce:71:ef:45:89:8b:26:f2:22:cb:dd:e3:c0:
53:1a:96:4a:14:5e:ad:83:ce:40:5a:96:ad:77:6d:57:dc:c5:
76:27:da:9c:06:91:0f:30:b3:80:3c:08:36:e4:8c:67:22:82:
d3:c6:e4:22:6e:23:c1:53:48:f9:5d:ca:b2:87:75:3d:48:94:
37:66:11:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:37:17 2025 by rpki-client