Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/v8tpm7-4VwDQ4BW9MfFdtqRUZ9c.roa
File: v8tpm7-4VwDQ4BW9MfFdtqRUZ9c.roa (raw, json)
Hash identifier: Xcaj7PWNKHBPkwnwanmCNYJ/FSFogXNO8sh3nrmk3Ek=
Subject key identifier: BF:CB:69:9B:BF:B8:57:00:D0:E0:15:BD:31:F1:5D:B6:A4:54:67:D7
Certificate issuer: /CN=6f33afd41ea012fb2803c7274523c8ec3f261311
Certificate serial: 0194221F8E8AA48D1893372281C1296B1326
Authority key identifier: 6F:33:AF:D4:1E:A0:12:FB:28:03:C7:27:45:23:C8:EC:3F:26:13:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/v8tpm7-4VwDQ4BW9MfFdtqRUZ9c.roa
Signing time: Wed 01 Jan 2025 13:48:00 +0000
ROA not before: Wed 01 Jan 2025 13:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201723
IP address blocks: 2001:678:3d4::/48 maxlen: 48
2001:67c:6bc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:8e:8a:a4:8d:18:93:37:22:81:c1:29:6b:13:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f33afd41ea012fb2803c7274523c8ec3f261311
Validity
Not Before: Jan 1 13:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bfcb699bbfb85700d0e015bd31f15db6a45467d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f4:f7:3d:9d:a7:6a:79:6d:5a:b4:a5:7f:72:
1c:2f:b0:87:d2:05:13:c9:89:83:77:90:93:26:e5:
2c:a6:b0:d3:8e:db:02:17:d9:6b:21:6e:ca:e2:09:
03:34:a9:d0:9c:91:68:42:44:e6:9a:d1:63:05:c3:
f6:9b:27:bb:c8:c6:75:b4:20:4b:2f:6c:5b:4b:c6:
02:e3:e2:98:34:c1:bb:31:75:d4:c6:11:1e:f5:53:
d9:bf:15:59:76:b6:f8:ca:99:69:e8:cf:3e:bb:7a:
5a:8f:f2:c9:67:cf:28:aa:93:b8:d8:b2:67:96:c1:
92:67:0f:18:ee:dd:db:87:4a:00:d2:bd:69:b2:3b:
b0:89:07:cc:41:51:ba:f9:e7:0d:ef:db:8c:6f:69:
ce:e6:a8:13:95:c0:8c:06:5a:ed:65:6e:db:da:0d:
6c:a1:20:65:15:b0:c9:c6:23:e2:51:2b:64:cc:ce:
9e:58:62:63:44:a8:bc:b7:b1:ca:8a:3d:1f:85:fd:
4d:d2:9e:f3:d8:30:08:bd:69:dd:a4:b6:a2:c4:8b:
34:ce:42:a3:52:51:2c:73:1c:46:9a:99:22:14:92:
56:20:1c:f8:47:b6:3e:e7:ca:12:ee:3f:08:a2:e7:
fb:ac:90:58:4d:de:ee:be:fc:3e:ed:89:6b:d9:b4:
28:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:CB:69:9B:BF:B8:57:00:D0:E0:15:BD:31:F1:5D:B6:A4:54:67:D7
X509v3 Authority Key Identifier:
keyid:6F:33:AF:D4:1E:A0:12:FB:28:03:C7:27:45:23:C8:EC:3F:26:13:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/v8tpm7-4VwDQ4BW9MfFdtqRUZ9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:3d4::/48
2001:67c:6bc::/48
Signature Algorithm: sha256WithRSAEncryption
0f:cb:d9:5e:3a:d0:d4:4e:97:c7:bc:6f:a4:27:b6:c9:99:38:
72:0a:ab:c1:75:89:24:49:5c:e6:6c:13:8b:32:6b:fb:24:b4:
9b:94:b1:33:e7:e5:40:97:8f:71:bd:7f:f9:61:bc:10:78:cc:
b5:b6:1d:53:1b:15:19:b8:d4:f3:1e:59:e4:f3:92:69:5a:cf:
fc:9a:53:38:31:34:4d:ea:62:e0:eb:2f:d8:d3:65:5c:cd:78:
94:36:ea:7c:93:77:02:03:49:7d:d8:8b:29:b8:c0:9a:24:33:
ba:62:33:c1:06:08:a5:17:b3:69:78:12:0c:08:ee:a8:ad:db:
ef:79:70:ee:e8:6b:44:07:d5:8a:8d:07:36:aa:32:a6:48:6e:
45:45:21:72:3f:dc:90:76:11:09:e6:2a:31:b3:2d:7a:65:a3:
4a:7c:2c:b4:f8:ee:2c:6b:51:35:d4:7a:79:37:70:2a:60:ab:
75:66:21:fb:61:69:44:f1:f3:83:66:f7:2c:44:95:cc:64:ea:
45:34:a8:78:09:f0:9c:b3:40:d0:a0:55:c6:23:b0:7f:a1:46:
ef:86:f9:72:5f:48:8a:51:c9:2f:f4:1e:c8:82:8a:61:81:26:
8b:86:ab:ef:44:6b:15:93:ca:59:64:8a:5a:94:d6:16:db:aa:
7f:32:b9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:01:02 2025 by rpki-client