Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/3e76fc-5dcd-4ba5-8495-1998cb9d065c/1/bidV1RGJvspfkMpdjQXNi22L0Yc.roa
File: bidV1RGJvspfkMpdjQXNi22L0Yc.roa (raw, json)
Hash identifier: TRhOcgWb9Nbze7wnhoqf8wJKPFZyeVfQX0I5QO8Q+S0=
Subject key identifier: 6E:27:55:D5:11:89:BE:CA:5F:90:CA:5D:8D:05:CD:8B:6D:8B:D1:87
Certificate issuer: /CN=573104ff3568cb99b7f5024e73ff2aea0563ce6a
Certificate serial: 019426D988B519A6B6235647FF5308379DC6
Authority key identifier: 57:31:04:FF:35:68:CB:99:B7:F5:02:4E:73:FF:2A:EA:05:63:CE:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzEE_zVoy5m39QJOc_8q6gVjzmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/3e76fc-5dcd-4ba5-8495-1998cb9d065c/1/bidV1RGJvspfkMpdjQXNi22L0Yc.roa
Signing time: Thu 02 Jan 2025 11:49:37 +0000
ROA not before: Thu 02 Jan 2025 11:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211960
IP address blocks: 2001:67c:2924::/48 maxlen: 48
2a04:1ac0:fff3::/48 maxlen: 48
2a04:1ac0:fff4::/48 maxlen: 48
2a04:1ac1:1::/48 maxlen: 48
2a04:1ac1:2::/48 maxlen: 48
2a04:1ac1:3::/48 maxlen: 48
2a04:1ac1:10::/48 maxlen: 48
2a04:1ac1:11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/3e76fc-5dcd-4ba5-8495-1998cb9d065c/1/VzEE_zVoy5m39QJOc_8q6gVjzmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/3e76fc-5dcd-4ba5-8495-1998cb9d065c/1/VzEE_zVoy5m39QJOc_8q6gVjzmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/VzEE_zVoy5m39QJOc_8q6gVjzmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:88:b5:19:a6:b6:23:56:47:ff:53:08:37:9d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=573104ff3568cb99b7f5024e73ff2aea0563ce6a
Validity
Not Before: Jan 2 11:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e2755d51189beca5f90ca5d8d05cd8b6d8bd187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dc:73:e3:28:f9:e2:a0:ee:34:8a:d0:6e:c7:
69:33:d8:7c:96:fc:d4:dc:bb:46:d3:17:e4:a8:a1:
ba:4f:33:ad:40:e4:5d:44:b9:8f:ba:43:4a:c1:44:
c6:aa:87:9d:63:c0:41:38:c4:e9:14:20:91:a1:8e:
68:42:00:cd:4b:fd:34:20:bb:2d:ad:3b:b7:d8:63:
e8:90:95:71:14:ed:cd:37:f5:a8:84:a7:c6:20:2c:
47:ed:28:bc:ef:92:1b:37:bb:b2:41:8a:c2:84:00:
e9:c7:91:4f:74:d9:79:0c:62:cb:94:44:9f:ea:7b:
2f:d1:cf:09:d7:56:34:75:57:5d:e5:0c:e4:04:d4:
4a:f9:ba:5f:b9:d2:12:8d:55:97:ae:51:78:2b:bf:
da:8d:d6:58:18:ea:1d:aa:b3:5a:9c:c4:fc:c0:8a:
ae:e4:ae:93:be:f2:0a:1a:90:35:e2:3b:9c:45:e3:
0c:5e:38:cd:d6:7e:57:13:a0:8d:88:ec:27:e8:5c:
a4:d1:82:68:6a:ef:e9:e6:86:b0:48:eb:c6:d6:a8:
34:cf:5c:ad:93:b2:d6:32:ce:86:5c:32:66:ca:d5:
eb:cc:8b:43:c4:7c:c3:58:5d:99:de:eb:de:a8:65:
b5:44:11:55:17:07:bd:e0:9b:05:c6:73:a4:8b:87:
4b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:27:55:D5:11:89:BE:CA:5F:90:CA:5D:8D:05:CD:8B:6D:8B:D1:87
X509v3 Authority Key Identifier:
keyid:57:31:04:FF:35:68:CB:99:B7:F5:02:4E:73:FF:2A:EA:05:63:CE:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzEE_zVoy5m39QJOc_8q6gVjzmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/3e76fc-5dcd-4ba5-8495-1998cb9d065c/1/bidV1RGJvspfkMpdjQXNi22L0Yc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/3e76fc-5dcd-4ba5-8495-1998cb9d065c/1/VzEE_zVoy5m39QJOc_8q6gVjzmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2924::/48
2a04:1ac0:fff3::-2a04:1ac0:fff4:ffff:ffff:ffff:ffff:ffff
2a04:1ac1:1::-2a04:1ac1:3:ffff:ffff:ffff:ffff:ffff
2a04:1ac1:10::/47
Signature Algorithm: sha256WithRSAEncryption
27:95:4b:8f:6b:36:97:d9:b4:43:be:53:64:f8:d5:ca:23:9b:
8a:34:15:83:00:92:8e:26:d8:bc:84:de:c2:1b:00:d8:99:5a:
f3:82:76:5a:0b:8f:3a:e5:6e:da:e9:d5:62:aa:cb:42:f9:2c:
c9:e3:4e:36:18:01:70:e3:30:ba:ed:d4:4a:0c:36:54:0c:c4:
f1:db:20:ed:48:91:94:04:3f:8b:c1:c6:3d:9c:b2:23:1e:1d:
14:f9:d6:9c:2f:6c:02:1e:04:86:1e:2d:b8:fe:e9:d8:80:b0:
f4:b0:bd:0b:df:51:05:94:85:f4:49:0a:0a:f4:5b:d8:60:c6:
07:f4:ea:eb:68:a5:d9:7f:0a:1a:4f:f0:80:67:75:b6:cf:c8:
ac:85:39:f9:4f:b3:ed:f2:99:49:ce:35:26:66:70:04:6c:68:
49:33:02:c3:93:9c:cf:5d:63:d8:ba:ff:4c:7a:5b:21:78:d9:
c4:a1:e5:95:18:1c:53:d5:ac:78:67:80:34:48:a6:a7:af:e0:
2f:04:45:9f:92:a2:ed:c3:3a:1a:78:70:3b:91:ab:23:20:25:
18:0c:9c:f6:cf:35:ca:ac:e3:c1:e5:e4:1c:7c:43:b5:17:9b:
5a:61:e9:44:e2:3c:4d:47:0a:c9:3d:7d:2e:49:83:17:3e:0b:
5b:e0:80:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:16:52 2025 by rpki-client