Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/52FAWMjukwSClkWfxKSDo4XBBoo.roa
File: 52FAWMjukwSClkWfxKSDo4XBBoo.roa (raw, json)
Hash identifier: ypKj+SswxrhtvLkdDH0jGSwTM/p8FbWFW1TsPUqiZDY=
Subject key identifier: E7:61:40:58:C8:EE:93:04:82:96:45:9F:C4:A4:83:A3:85:C1:06:8A
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 0194282576C182925631DB774F40F049FDDF
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/52FAWMjukwSClkWfxKSDo4XBBoo.roa
Signing time: Thu 02 Jan 2025 17:52:11 +0000
ROA not before: Thu 02 Jan 2025 17:52:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211562
IP address blocks: 2a0f:b241:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 09:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:76:c1:82:92:56:31:db:77:4f:40:f0:49:fd:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Jan 2 17:52:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7614058c8ee93048296459fc4a483a385c1068a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f4:fc:72:77:ad:e2:cd:f2:02:e7:92:b7:68:
3c:00:8d:17:c8:44:44:6b:f7:62:d0:83:13:24:92:
20:a5:89:12:ac:c5:81:ce:81:b4:f0:b9:c0:7e:5b:
9d:fe:05:11:bf:a4:af:7b:39:2b:1c:96:4f:f2:f3:
ea:a7:76:0d:97:67:ed:5a:f9:bc:60:ad:a0:d0:3a:
cc:07:15:dc:a3:f7:fa:80:0b:12:ce:86:61:1c:86:
11:e8:a6:35:9b:62:39:0b:21:b2:f7:7f:7f:08:51:
d2:67:36:b3:79:5e:df:76:22:ca:10:ad:40:9f:3c:
c0:2e:8e:86:0b:0a:a7:a9:8d:61:52:5f:7c:83:92:
30:29:dc:2d:ef:8b:05:13:c5:45:58:ab:e4:68:67:
ba:86:b5:62:77:40:e4:a5:4f:0b:48:50:13:16:9c:
da:14:07:b0:a2:23:13:cb:03:93:29:a1:c1:3c:b0:
48:0a:75:54:53:81:47:18:70:da:e5:7c:dc:3c:3b:
3e:41:80:22:85:32:34:95:13:70:04:c2:55:02:2e:
08:6d:51:fd:42:e8:a6:90:f8:39:c2:42:a0:fe:5a:
5c:9d:02:c7:75:74:a8:ef:11:26:a0:e1:5d:d9:4d:
b0:23:83:8d:cd:cd:97:d8:0d:0b:ba:63:64:24:ed:
7f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:61:40:58:C8:EE:93:04:82:96:45:9F:C4:A4:83:A3:85:C1:06:8A
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/52FAWMjukwSClkWfxKSDo4XBBoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:4::/48
Signature Algorithm: sha256WithRSAEncryption
82:f2:0e:7b:de:d9:4f:6a:e0:65:3e:57:cb:fe:ed:05:3c:4f:
c9:6c:d7:3b:d4:36:85:3d:fd:33:21:52:56:90:4a:ae:3d:81:
ae:1f:fc:2f:1c:16:fd:53:7f:91:c6:68:b5:23:b6:17:cb:fa:
69:08:6d:5c:73:a5:7b:5f:a3:48:a6:fe:27:7e:a9:6a:7b:5a:
1a:e6:ef:28:2f:c6:10:98:ab:51:c1:29:44:e8:ee:39:06:f1:
4e:1b:1b:1d:52:14:a1:a5:42:f3:30:85:d0:f1:cc:9c:b9:e2:
89:84:58:59:78:80:b4:7e:26:6d:90:af:6b:24:93:6a:54:79:
54:ca:d7:fe:d1:ce:98:05:8c:2d:e8:d8:bb:07:6c:93:0a:0b:
c4:44:24:db:2c:11:3e:c6:fb:50:56:d5:e0:a8:c8:4b:80:dd:
7b:e3:46:f5:1a:60:c0:13:f5:ac:0f:98:96:97:86:96:1a:eb:
f4:20:b5:c3:67:76:35:e1:6c:be:c6:a1:56:f3:a6:13:d8:1a:
4a:64:1a:26:b7:ea:e0:90:fa:dd:64:cb:13:cc:f7:55:16:b1:
39:d6:8a:a2:1a:b6:66:27:8e:c8:02:a3:b5:98:39:da:88:e7:
d1:66:7c:41:25:de:63:0a:e3:da:ec:dc:20:df:73:3d:bd:d5:
2e:e1:7c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:11:14 2025 by rpki-client