Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/1lJdsw_xzlmsFwZG1UK7rJfS7yM.roa
File: 1lJdsw_xzlmsFwZG1UK7rJfS7yM.roa (raw, json)
Hash identifier: 0JBk1rIDLgxyqVMNZoNu72R09dWE+vzIfLwRYs+g+I4=
Subject key identifier: D6:52:5D:B3:0F:F1:CE:59:AC:17:06:46:D5:42:BB:AC:97:D2:EF:23
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 0194489654B7E789BE0BC51E1F0581CF4A6C
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/1lJdsw_xzlmsFwZG1UK7rJfS7yM.roa
Signing time: Thu 09 Jan 2025 01:03:19 +0000
ROA not before: Thu 09 Jan 2025 01:03:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 835
IP address blocks: 2a0f:b244:100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 12:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:48:96:54:b7:e7:89:be:0b:c5:1e:1f:05:81:cf:4a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Jan 9 01:03:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6525db30ff1ce59ac170646d542bbac97d2ef23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:20:e4:d4:92:84:66:72:fd:e7:09:bf:8b:68:
37:e2:f6:a9:0d:09:0d:5e:13:53:ee:e6:3b:8f:60:
3e:9f:ce:a8:48:7a:2a:68:81:db:90:01:13:7c:b4:
1e:66:e7:21:f1:64:00:b0:22:b2:83:24:14:66:01:
aa:ec:93:37:6d:3e:23:10:e6:50:20:16:e9:d0:15:
1f:f9:5c:ca:b1:4d:56:54:41:4c:49:f6:92:ed:cf:
37:62:68:63:cf:ac:55:95:5d:a4:1e:2d:92:8f:01:
5c:8e:23:9d:07:53:23:5d:45:78:eb:4a:94:50:20:
38:5b:5b:9e:76:68:eb:cf:52:80:60:d6:de:0e:ab:
07:ce:34:13:62:f2:0c:e6:aa:07:5f:2e:67:33:7f:
aa:44:cc:4c:0c:6e:73:ff:f1:62:79:0b:c8:be:b7:
f9:ea:af:c3:bc:da:4b:f7:30:fc:11:df:61:ac:2b:
be:98:c3:82:2d:b1:82:cd:5f:6b:75:c5:69:12:ac:
9a:81:c9:3a:4c:51:2f:33:f4:4d:1e:86:32:24:ae:
52:61:0e:89:ea:bb:7c:1e:b4:e8:84:97:4f:62:20:
2c:c3:49:43:78:21:7b:1c:13:12:3d:95:e4:ef:5f:
b0:01:31:ea:12:b3:8e:6b:56:64:93:b0:6b:75:2e:
1e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:52:5D:B3:0F:F1:CE:59:AC:17:06:46:D5:42:BB:AC:97:D2:EF:23
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/1lJdsw_xzlmsFwZG1UK7rJfS7yM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b244:100::/48
Signature Algorithm: sha256WithRSAEncryption
3b:4e:35:8b:b1:91:8e:52:3b:5c:95:d1:d3:ef:bd:7e:0b:b4:
0a:58:27:4e:dc:b2:0f:1c:3a:60:f3:14:6c:dc:34:79:ab:05:
eb:14:4a:96:3b:28:85:60:9e:b5:27:f4:9a:e0:68:ea:22:3a:
9a:e6:b8:82:54:d4:c5:e0:48:21:d7:1d:ec:ac:44:9f:11:ac:
10:65:4f:78:ba:28:d3:9c:6c:2b:f9:5e:50:37:75:99:ec:d3:
3b:2a:b8:0b:ff:e5:2b:1d:c6:99:47:1b:28:cd:81:d1:41:b0:
96:ed:ec:a9:cb:a3:b5:46:58:68:bc:37:c1:39:26:38:6f:79:
36:6f:ff:ef:b1:71:37:a1:42:4e:31:1e:d2:cf:45:d3:b3:02:
94:88:df:0c:30:80:78:40:d1:91:05:f6:fc:5a:ae:d6:02:2d:
70:ce:af:06:35:38:54:a1:ff:6c:10:55:1f:fe:52:bf:1d:ae:
30:ca:0d:ec:30:74:aa:ff:87:96:64:19:82:52:8b:01:0e:bc:
a1:92:e8:67:29:20:65:5c:7f:bb:aa:24:08:c8:51:c8:11:00:
47:08:9d:62:28:0c:81:dc:53:69:8f:62:c9:b7:65:02:02:2f:
62:eb:b0:76:c3:de:5b:d7:64:14:a6:9d:20:4b:57:58:b6:1e:
14:bb:31:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:52:50 2025 by rpki-client