Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/vCsrdLZ3sjv7jX0AsouEukps7zI.roa
File: vCsrdLZ3sjv7jX0AsouEukps7zI.roa (raw, json)
Hash identifier: 0mduqHJYJw2QdsAngOAfbzJ7V4cIEG2VwhLeCMRkpDI=
Subject key identifier: BC:2B:2B:74:B6:77:B2:3B:FB:8D:7D:00:B2:8B:84:BA:4A:6C:EF:32
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 019567C2451C3F9FA628F5E821F5BBAE0B4F
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/vCsrdLZ3sjv7jX0AsouEukps7zI.roa
Signing time: Wed 05 Mar 2025 19:22:19 +0000
ROA not before: Wed 05 Mar 2025 19:22:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62513
IP address blocks: 2a0f:b243::/32 maxlen: 48
2a0f:b247::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 09:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:67:c2:45:1c:3f:9f:a6:28:f5:e8:21:f5:bb:ae:0b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Mar 5 19:22:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc2b2b74b677b23bfb8d7d00b28b84ba4a6cef32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e3:80:0e:45:9f:0c:3a:4e:52:cd:9d:dc:b8:
da:85:1d:62:a0:12:bf:e3:f4:ee:73:b9:c3:55:3e:
51:f7:47:04:6e:95:74:e1:29:d6:a8:9a:36:d4:19:
67:0d:89:94:80:dd:fa:20:73:7e:9e:6a:21:21:84:
e0:1c:7d:86:39:8e:6f:06:11:b1:c1:ba:1f:51:9b:
bf:76:ce:8e:6f:24:e5:c2:9e:13:10:3c:10:89:4a:
c2:1c:33:dd:96:1f:bf:20:79:8c:89:ca:81:6f:21:
ea:da:19:4e:bd:e8:ed:bb:17:7e:0d:2d:db:14:b7:
a5:4d:48:65:02:9c:07:8c:ca:f2:7e:08:f3:b4:13:
12:d8:4a:08:fb:cf:8d:6d:8e:e5:6e:d4:f9:b5:ab:
26:78:2b:2d:c2:75:fc:2c:07:8f:4b:c0:0f:86:7b:
ae:05:55:6d:3f:ca:48:c2:5c:6a:f9:8b:de:7a:fd:
07:80:7d:af:fc:bb:3c:8c:e4:13:60:80:1e:5c:1c:
15:29:05:7f:c2:4e:af:1f:2e:c6:f1:f8:06:ee:ae:
06:67:1a:20:b8:a3:a8:2b:f9:c7:69:28:52:47:77:
41:b1:f0:aa:71:88:5c:c0:ec:b6:f9:b0:b4:2e:4b:
ad:50:3f:2c:c1:5d:03:93:1d:79:fb:e0:8b:cb:d5:
c0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:2B:2B:74:B6:77:B2:3B:FB:8D:7D:00:B2:8B:84:BA:4A:6C:EF:32
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/vCsrdLZ3sjv7jX0AsouEukps7zI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b243::/32
2a0f:b247::/32
Signature Algorithm: sha256WithRSAEncryption
8d:01:01:55:d6:62:20:d5:5e:e2:69:cf:28:7b:6d:9e:9d:ba:
ab:07:2f:d6:09:b3:89:54:75:99:3c:fd:5e:34:7b:cd:d4:79:
11:c1:64:77:c2:68:14:ca:ee:5e:43:66:8c:20:fe:b2:e9:10:
02:09:ed:f5:f9:44:34:62:66:ba:92:65:49:63:c0:a2:a4:18:
0f:79:3f:c5:34:65:9b:45:a6:4e:97:bb:4b:d9:a3:a8:07:48:
ef:39:f0:b5:b5:5b:56:c9:f7:f0:e2:37:e2:8a:4d:2b:eb:db:
c7:62:69:73:a9:01:4d:87:e5:ed:64:cb:c5:51:8b:fc:b9:bb:
d2:a6:f9:01:38:33:29:cc:f9:f2:52:ac:67:1a:59:6e:79:8f:
af:bd:ca:94:e0:70:36:94:47:40:68:69:22:80:5d:7e:ec:d5:
63:5e:ea:f5:53:24:0a:27:fc:14:36:a8:29:30:26:84:3f:b6:
54:cb:c3:17:a1:68:71:be:c3:fc:78:6b:33:2a:4f:5f:33:9b:
55:d2:70:43:d6:01:80:ac:fb:72:4c:fc:0e:9f:1a:75:21:e7:
0f:fe:fc:bf:4e:d0:39:bb:ff:e7:52:23:4d:6e:cc:3f:b3:14:
d5:f7:cb:40:92:fb:b9:32:67:d1:e5:a5:9f:a5:99:7d:d9:93:
c5:2b:15:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:08:35 2025 by rpki-client