Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/R_6Boo__taaN3VAx2GBKAmJIKdQ.roa
File: R_6Boo__taaN3VAx2GBKAmJIKdQ.roa (raw, json)
Hash identifier: fuyB9El3FH7/OJZWRGlAxDEIBNos8nEiSk5ALbrazqs=
Subject key identifier: 47:FE:81:A2:8F:FF:B5:A6:8D:DD:50:31:D8:60:4A:02:62:48:29:D4
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 01941F8CB3F1683C7439F738206B073FD256
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/R_6Boo__taaN3VAx2GBKAmJIKdQ.roa
Signing time: Wed 01 Jan 2025 01:48:22 +0000
ROA not before: Wed 01 Jan 2025 01:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199290
IP address blocks: 2a0a:3000::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:b3:f1:68:3c:74:39:f7:38:20:6b:07:3f:d2:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 1 01:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47fe81a28fffb5a68ddd5031d8604a02624829d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f6:10:32:8f:2e:19:cb:e1:0d:56:f8:d7:c5:
33:c8:f1:0a:09:30:1c:56:3b:56:11:fd:c3:1e:bf:
54:89:b5:22:f8:8e:68:0b:e4:1b:aa:9a:de:48:f8:
fc:b1:ab:30:31:ca:7e:4a:6c:e5:d7:00:0f:d6:70:
35:c3:d2:f8:f9:3c:ec:64:75:9e:30:88:b0:e5:ab:
73:7c:29:71:eb:1d:24:10:b5:ef:fc:6f:ae:e7:65:
d5:f0:57:94:fe:33:90:3e:75:6d:6f:83:18:11:ff:
c6:da:68:4f:72:b6:96:48:19:4b:bd:0a:bd:d7:16:
be:c8:c5:7e:a2:2b:91:f9:c9:13:54:24:08:3a:96:
aa:4b:97:59:22:83:30:eb:9b:91:07:dd:24:48:e5:
15:6b:fc:6b:0b:7f:88:cd:c1:18:c0:ba:e6:b2:2a:
99:6d:49:a6:43:64:50:af:e1:7a:c5:2b:2b:af:b3:
ee:58:82:77:7b:bb:e1:94:fb:1d:a3:74:53:63:c9:
59:ee:e4:11:ee:e4:08:6f:6a:46:4b:6e:27:33:ee:
26:2b:c3:78:77:1d:c9:c0:90:3a:12:05:8a:bc:30:
6e:f6:6b:2b:de:d3:f3:47:db:82:42:f8:f3:88:8f:
c3:66:98:0b:28:13:c7:4f:64:32:0d:9b:ec:37:d9:
7b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:FE:81:A2:8F:FF:B5:A6:8D:DD:50:31:D8:60:4A:02:62:48:29:D4
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/R_6Boo__taaN3VAx2GBKAmJIKdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:3000::/32
Signature Algorithm: sha256WithRSAEncryption
7d:6d:67:b4:4f:51:05:0c:f4:d3:5c:4f:e9:a5:94:87:64:0c:
0f:ae:58:0a:20:c4:e9:e3:54:1e:55:d9:29:85:9a:6d:d1:46:
6a:32:7f:e0:b1:4c:a0:d9:c9:a9:1c:37:1a:a7:62:72:c6:92:
24:87:a8:cc:1b:57:5f:18:d8:77:3c:81:ea:ff:60:0c:54:b0:
33:b0:cb:e0:42:6b:9a:ea:3f:4e:83:bd:b2:33:58:4b:db:65:
e1:ea:69:51:0d:4b:c0:b2:38:25:59:a0:82:19:0b:7d:d5:51:
75:a5:d5:39:57:ea:5a:ae:76:a2:63:76:fc:c3:44:0d:c9:c7:
9d:4f:1c:52:43:ab:15:66:51:07:aa:fa:93:2e:8a:b3:3f:18:
ad:e1:bc:db:85:3e:b3:e8:c5:4f:e8:a6:d1:ec:86:5c:fc:0a:
ea:48:ee:a4:66:4b:b8:f0:ff:53:30:4a:d7:0c:e4:61:eb:06:
81:3a:03:78:25:37:8a:f5:d7:13:c2:bf:9d:b2:df:d6:81:5e:
1a:fe:13:27:ea:52:de:96:45:d6:78:07:5f:54:b6:b8:a6:29:
2a:9f:97:e8:15:a2:c0:99:17:68:39:98:11:f5:92:77:3c:30:
b1:3e:c3:32:d4:e5:6a:18:9a:ea:ec:6d:5a:a2:f3:a2:7b:da:
74:67:5f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:42:14 2025 by rpki-client