Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/EQ2IvZUqnVn0lMaxD-2uyfZIE68.roa
File: EQ2IvZUqnVn0lMaxD-2uyfZIE68.roa (raw, json)
Hash identifier: Qthm1o1lZVCkgyrZ5XiBtPb86SGLq9HwTrkWvzHtL+4=
Subject key identifier: 11:0D:88:BD:95:2A:9D:59:F4:94:C6:B1:0F:ED:AE:C9:F6:48:13:AF
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 01944853BBA9D09A042E8D3EC651C40C7F03
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/EQ2IvZUqnVn0lMaxD-2uyfZIE68.roa
Signing time: Wed 08 Jan 2025 23:50:34 +0000
ROA not before: Wed 08 Jan 2025 23:50:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215473
IP address blocks: 2a0f:b241:91::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 09:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:48:53:bb:a9:d0:9a:04:2e:8d:3e:c6:51:c4:0c:7f:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Jan 8 23:50:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=110d88bd952a9d59f494c6b10fedaec9f64813af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f6:1b:87:85:08:73:cc:bf:5d:b2:23:48:e9:
77:74:a7:c7:3d:2c:f1:15:b0:bd:7e:a1:1f:65:e2:
21:dd:ad:06:63:76:40:eb:07:a7:b2:34:d0:3e:e8:
20:ef:ec:54:56:ac:43:d9:91:b0:dc:db:a8:f4:57:
93:65:5c:c4:bc:db:db:88:86:67:b3:55:18:ff:96:
a4:c5:98:d8:ee:be:69:4f:b2:67:93:f8:85:d3:d4:
63:86:2d:05:92:89:05:d7:d2:1e:7c:0b:93:98:fc:
0b:ee:f9:94:60:54:f2:e7:7d:9f:0c:75:00:fa:7d:
85:7d:27:b2:77:6b:f1:78:24:d6:3a:d9:be:cf:de:
5f:e3:8e:3d:9d:82:7f:a2:07:75:c0:cc:f8:34:6b:
68:ea:53:aa:56:d0:54:b1:43:2b:a2:3c:da:a9:d0:
ca:4b:08:d0:0f:da:1e:ec:3f:eb:e8:85:f0:bf:31:
c5:6e:c6:ed:90:a0:21:ee:5e:04:22:a9:14:89:50:
93:57:b5:ea:b2:97:d8:ee:50:00:83:7f:3f:e7:bd:
75:f2:e9:fd:a8:f2:1c:13:1b:e2:24:6c:2e:ef:c8:
7e:18:8a:bb:8b:05:7a:e3:f1:3e:51:ec:a6:0c:4f:
29:16:d9:c5:55:cb:ce:ca:90:1c:6f:b3:88:b6:d0:
83:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:0D:88:BD:95:2A:9D:59:F4:94:C6:B1:0F:ED:AE:C9:F6:48:13:AF
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/EQ2IvZUqnVn0lMaxD-2uyfZIE68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:91::/48
Signature Algorithm: sha256WithRSAEncryption
56:10:bd:22:b0:9e:f6:c5:1c:2f:b9:e8:42:02:c7:bb:ae:4e:
9b:e9:8e:c7:e3:f4:06:d6:bb:e8:cc:dc:8b:e1:7a:b0:10:4a:
28:2d:ee:12:66:34:73:a0:a8:ca:75:5a:e5:a0:fe:76:29:8a:
c6:02:16:0e:35:ba:1e:0d:59:d0:b3:8a:28:73:23:2c:1f:b8:
b0:fc:ad:d2:b0:69:3c:89:76:98:d5:39:f1:c4:1f:69:49:d4:
47:17:44:de:ce:63:6a:e5:b7:0a:be:51:fe:95:12:c5:74:d5:
32:c6:cf:28:2a:c2:48:7d:c2:1b:33:77:fc:f2:e0:3f:a2:13:
dd:63:e7:16:f2:64:94:97:7e:14:a4:31:e3:04:be:b6:82:cc:
f4:b5:80:0e:74:ee:fd:6f:cf:bc:bd:eb:4a:4e:13:38:94:71:
2e:20:ec:71:c3:dd:62:13:67:7f:e8:7d:b8:fb:c7:f7:13:e5:
06:8f:8e:b9:e6:ea:fa:6e:fa:f1:c6:b1:3e:c9:7a:44:52:35:
d1:c5:fc:0a:48:7e:a2:ee:67:2d:1f:ed:25:21:e3:1e:77:61:
95:36:bd:d0:c3:d6:0d:05:4b:26:51:ab:36:fe:3c:e4:8e:62:
b3:1d:41:af:0c:15:d0:a2:a7:98:61:ef:21:cf:e5:0f:65:53:
8e:4d:c7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:13:44 2025 by rpki-client