Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/BIfb7ZxJcI_z8KzHeX5n3JHCcq0.roa
File: BIfb7ZxJcI_z8KzHeX5n3JHCcq0.roa (raw, json)
Hash identifier: zQ0KDMqG7X6AzmJpBDsrH1YQkiSpOUR257iu4JXF7UQ=
Subject key identifier: 04:87:DB:ED:9C:49:70:8F:F3:F0:AC:C7:79:7E:67:DC:91:C2:72:AD
Certificate issuer: /CN=bde1ac8f8ebb502fcc44562dc10d973884493be5
Certificate serial: 0194221FA9CD636AF115DD77C52C2EA056C5
Authority key identifier: BD:E1:AC:8F:8E:BB:50:2F:CC:44:56:2D:C1:0D:97:38:84:49:3B:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/BIfb7ZxJcI_z8KzHeX5n3JHCcq0.roa
Signing time: Wed 01 Jan 2025 13:48:07 +0000
ROA not before: Wed 01 Jan 2025 13:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210562
IP address blocks: 2001:67c:8cc::/48 maxlen: 48
2001:67c:b10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:a9:cd:63:6a:f1:15:dd:77:c5:2c:2e:a0:56:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde1ac8f8ebb502fcc44562dc10d973884493be5
Validity
Not Before: Jan 1 13:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0487dbed9c49708ff3f0acc7797e67dc91c272ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:38:56:86:7e:b9:8b:b1:0e:60:07:06:69:29:
ad:98:a6:bf:70:09:35:17:da:44:5d:b3:06:b2:97:
a5:54:d9:8f:36:2e:26:73:08:3b:dd:fd:02:84:d3:
a5:ab:b9:80:62:7d:98:f5:3c:3f:df:6a:fb:a2:15:
fe:62:05:46:c5:30:92:c6:fa:84:79:fe:4f:88:66:
ff:9b:0a:22:ac:0e:7e:ca:68:2c:a1:f9:d8:f9:5d:
81:eb:d4:f1:71:c6:cb:3b:a8:4d:e2:a9:46:96:1a:
ed:2e:3a:98:c4:d3:b4:22:b9:53:19:81:08:54:2e:
76:f7:be:31:80:cd:30:f5:b2:4c:96:00:7e:d8:b3:
78:06:f5:60:17:c6:9e:a7:20:97:70:a2:6a:69:35:
e0:9a:93:14:ce:0d:61:58:2a:2c:93:9e:d0:73:cf:
a5:cb:ac:14:73:32:23:4e:0e:c8:15:2a:dc:92:76:
93:4b:6b:f7:f2:f7:ce:3d:17:4a:24:db:9b:33:a9:
55:62:5b:31:d6:8d:0a:9c:d1:b0:21:2f:26:42:70:
01:4b:ee:04:68:59:2d:45:df:32:de:8e:70:89:28:
b3:e4:5a:93:a7:c4:c0:00:fd:66:0b:dd:e1:75:42:
fc:e0:bb:21:0d:ef:80:3e:9d:93:1b:bf:38:a6:2a:
8e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:87:DB:ED:9C:49:70:8F:F3:F0:AC:C7:79:7E:67:DC:91:C2:72:AD
X509v3 Authority Key Identifier:
keyid:BD:E1:AC:8F:8E:BB:50:2F:CC:44:56:2D:C1:0D:97:38:84:49:3B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/BIfb7ZxJcI_z8KzHeX5n3JHCcq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:8cc::/48
2001:67c:b10::/48
Signature Algorithm: sha256WithRSAEncryption
78:5e:93:af:69:26:7b:c7:25:54:df:6c:74:88:ad:73:97:04:
fb:fe:7e:84:ad:dc:0b:22:bd:0e:a2:95:ed:8e:03:8a:64:50:
14:9e:ca:c9:9c:fd:ef:2e:20:86:56:89:ae:f8:2e:0c:04:c2:
b4:1c:a8:f2:12:9d:ff:f7:de:10:21:25:0b:6f:60:c5:4b:82:
93:8e:77:0f:1a:e6:c2:f1:64:9d:71:69:d8:5c:6e:39:f9:77:
a5:d1:1f:35:6b:10:ee:08:71:a7:5e:f2:4d:62:4a:93:4d:70:
de:4b:5b:d7:26:3e:a1:04:ba:b4:69:0c:c6:ea:5f:39:72:f3:
2d:03:1f:53:27:8a:8c:0f:6b:14:36:35:aa:a2:37:69:0a:62:
cd:63:4b:fa:5c:91:e6:73:e7:70:e2:a9:f3:ce:b0:32:1b:1f:
20:a5:d3:bb:72:b9:b8:e5:94:37:17:54:bd:c4:cc:f5:a3:69:
83:8c:42:20:44:55:ce:93:a3:4c:4c:7a:7d:98:00:f0:11:db:
e6:80:e4:31:65:7d:41:dd:cc:66:b0:45:38:16:49:ce:0d:fd:
b7:fb:ce:cf:d6:0a:c4:4a:a7:9a:f8:f5:e0:1f:6a:0c:37:70:
df:9d:11:dd:5a:20:69:60:a1:67:8b:32:3b:05:47:e5:f5:b8:
09:bd:56:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:05:07 2025 by rpki-client