Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/53-6v4txkTBlrr4mQ9BEOoOITGQ.roa
File: 53-6v4txkTBlrr4mQ9BEOoOITGQ.roa (raw, json)
Hash identifier: /V7dlEX/iodJqJllmpCrS8JubIsPMm3gyCbsrYPAXNQ=
Subject key identifier: E7:7F:BA:BF:8B:71:91:30:65:AE:BE:26:43:D0:44:3A:83:88:4C:64
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 0194282577B8208233F7E68877ADECC71617
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/53-6v4txkTBlrr4mQ9BEOoOITGQ.roa
Signing time: Thu 02 Jan 2025 17:52:11 +0000
ROA not before: Thu 02 Jan 2025 17:52:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215122
IP address blocks: 2a0f:b241:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 09:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:77:b8:20:82:33:f7:e6:88:77:ad:ec:c7:16:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Jan 2 17:52:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e77fbabf8b71913065aebe2643d0443a83884c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:79:8c:19:2e:86:08:18:38:98:e8:8a:9c:2f:
32:97:47:42:62:0c:73:45:b1:90:22:e8:57:99:22:
b7:21:51:82:e4:6c:47:f3:ec:8f:dd:57:37:54:dc:
f1:3f:95:60:6b:ef:41:7f:2d:3f:a8:ff:e9:59:32:
42:84:74:13:b8:bc:c9:6f:c9:9d:ba:61:64:62:a9:
67:3a:d8:3b:8e:8d:1a:eb:14:97:53:1b:89:12:46:
97:8a:46:fa:84:68:a2:d8:80:ae:ca:c5:16:71:8c:
97:34:a6:68:b4:78:ea:d3:8d:b7:69:07:9c:1f:9e:
b8:dd:51:02:cc:7a:be:ce:4c:fb:33:05:fe:5e:29:
76:07:86:c3:69:39:b7:fe:16:5b:ed:e3:f0:d2:90:
a0:66:98:0f:5c:e3:19:b8:fb:41:03:39:bd:fb:28:
a3:9a:cb:94:60:12:d3:59:70:df:87:8b:c2:90:0f:
bb:eb:4b:f1:59:91:48:09:71:14:6f:68:91:8a:81:
28:12:da:81:6a:88:cc:65:62:ee:bd:03:dd:8c:0e:
4f:34:03:a3:73:00:86:bb:70:ce:a3:dc:ba:35:0c:
f6:4f:e8:71:d2:a0:9c:68:1e:37:94:2c:bf:0d:8a:
7a:f3:b5:c7:84:cb:7d:1e:37:ed:63:68:41:2c:fe:
8c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:7F:BA:BF:8B:71:91:30:65:AE:BE:26:43:D0:44:3A:83:88:4C:64
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/53-6v4txkTBlrr4mQ9BEOoOITGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:1::/48
Signature Algorithm: sha256WithRSAEncryption
6f:a1:26:e4:a6:02:f4:d0:c2:9e:04:6e:63:80:4e:4d:bf:d8:
b4:5a:73:f7:86:c2:75:8f:88:a9:c4:df:a6:64:7e:85:c7:97:
4d:45:a4:61:cb:a3:b5:03:07:58:46:39:3f:31:86:ec:eb:53:
06:42:45:a3:58:92:d8:8d:59:3e:93:a6:3a:a6:46:4e:92:df:
b7:b9:dc:5c:ca:4a:24:68:93:47:c3:69:2a:67:29:2c:4a:8d:
e4:b6:7e:06:c2:4c:12:e8:2d:d4:cf:ce:ff:36:ff:4a:dc:ad:
13:96:6e:d8:e0:f2:31:42:8f:40:88:00:19:31:ce:e9:e4:86:
0d:2a:d4:3e:c4:a9:e7:5f:04:b1:35:f8:55:54:f6:ac:89:5f:
56:01:26:54:b7:6f:70:bc:17:70:93:dc:94:bc:7f:6d:53:e2:
fe:70:1b:45:03:ca:70:61:ee:a6:5b:7b:e2:9d:8e:99:ce:30:
ce:a3:7e:84:f8:ac:5a:87:0a:4f:8c:74:04:00:df:7e:82:4f:
7e:01:96:f3:9f:43:18:af:aa:62:2c:cf:00:2e:96:2e:48:ef:
c8:b7:97:b0:56:38:61:59:38:0d:53:60:98:89:f8:f0:d7:3a:
43:66:7e:1c:b9:b8:c0:01:e1:e8:3e:75:09:2e:a6:cb:f5:61:
12:e6:6a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:34:10 2025 by rpki-client