Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/bvBCOOZR_53uuydhAIJbHOE_y50.roa
File: bvBCOOZR_53uuydhAIJbHOE_y50.roa (raw, json)
Hash identifier: O8HiOtyZpJTxAkEZvvlqiB0vlYICj10yBc68YG6rua0=
Subject key identifier: 6E:F0:42:38:E6:51:FF:9D:EE:BB:27:61:00:82:5B:1C:E1:3F:CB:9D
Certificate issuer: /CN=cddb6f10030e276f8316276f40b3d4a4184d94dd
Certificate serial: 019427B3E2489BD719A5B1C10CBB28A92C68
Authority key identifier: CD:DB:6F:10:03:0E:27:6F:83:16:27:6F:40:B3:D4:A4:18:4D:94:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/bvBCOOZR_53uuydhAIJbHOE_y50.roa
Signing time: Thu 02 Jan 2025 15:48:07 +0000
ROA not before: Thu 02 Jan 2025 15:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64445
IP address blocks: 2a00:8c60:c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:e2:48:9b:d7:19:a5:b1:c1:0c:bb:28:a9:2c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cddb6f10030e276f8316276f40b3d4a4184d94dd
Validity
Not Before: Jan 2 15:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ef04238e651ff9deebb276100825b1ce13fcb9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:44:ce:bf:5b:57:98:4e:98:f1:41:51:12:3d:
b8:7e:91:3d:27:0a:d8:85:6d:89:cc:c6:a0:77:c9:
35:f2:f0:7e:f5:8e:b5:b3:14:f3:ab:48:07:a4:1e:
98:81:f4:73:e2:3c:49:52:5f:93:a2:cf:42:23:23:
9b:57:dd:c1:ce:ec:b6:78:b2:fc:f3:ec:d6:67:f1:
52:ee:fe:6b:98:da:dc:61:f1:87:48:68:7b:bd:71:
94:14:8e:d1:28:44:fa:fb:90:3d:66:8e:5c:8a:c1:
ed:bb:c0:a5:98:0d:76:eb:24:6f:f9:86:f0:99:cf:
56:9c:58:83:1a:7a:c0:36:66:9b:a6:33:13:8c:b1:
81:7e:cb:48:6e:8f:8d:1b:84:f8:88:65:fc:ba:b7:
84:3a:1d:d3:88:74:ee:fc:77:1e:fd:f9:8f:30:40:
12:2e:59:fa:b9:a2:fe:58:68:5e:b4:be:46:e3:f3:
55:4d:57:3d:9c:1d:2b:ec:e2:5c:7b:7e:b0:fe:ed:
d5:e1:9c:ec:93:a2:04:83:f4:3c:5d:15:09:76:42:
44:6b:d4:47:91:69:cf:5d:dd:69:6a:dd:81:e2:42:
53:bb:55:cd:58:8a:d5:eb:f3:fa:ce:2a:a0:f3:c7:
64:39:3e:af:e9:3a:f3:6f:d0:40:41:96:aa:83:f1:
d3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F0:42:38:E6:51:FF:9D:EE:BB:27:61:00:82:5B:1C:E1:3F:CB:9D
X509v3 Authority Key Identifier:
keyid:CD:DB:6F:10:03:0E:27:6F:83:16:27:6F:40:B3:D4:A4:18:4D:94:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/bvBCOOZR_53uuydhAIJbHOE_y50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:8c60:c::/48
Signature Algorithm: sha256WithRSAEncryption
1e:88:d9:b7:c2:1a:cc:a6:f8:86:59:94:66:52:07:3e:69:b6:
e8:5f:44:85:11:2a:49:f7:0b:e5:df:a9:38:cb:d6:b6:25:3b:
53:ab:92:f0:04:b9:b0:ec:73:16:9e:0f:ab:36:a9:18:46:17:
b1:a3:2a:a9:37:7a:3d:40:fb:8a:d0:26:dd:2c:2e:69:46:f2:
86:5d:c6:a3:f9:51:a7:95:b4:bb:f0:26:d3:c4:0d:ef:85:81:
6f:49:2f:9e:e7:13:8b:f0:ec:fe:32:c1:46:f4:49:7c:53:3d:
3c:c9:5a:de:ce:56:29:80:6e:35:07:dd:09:23:90:62:11:32:
f7:53:ef:23:78:c8:5d:78:19:7b:d3:c2:70:0a:6c:b7:31:56:
68:38:cb:38:ef:ab:bd:54:00:33:07:eb:71:a4:a0:79:6d:0a:
e8:e8:e0:d6:fd:20:5e:40:3d:37:c1:68:e0:31:5e:94:3b:2c:
7b:b9:4b:66:08:18:41:68:7f:8b:cb:49:a3:ed:08:f3:6c:b5:
1a:30:94:ce:34:76:45:7e:ef:30:3f:b9:a8:8a:26:53:35:c9:
ca:4b:55:51:36:2a:13:8e:32:b4:cf:23:c8:fb:65:e2:04:46:
dd:e4:3f:47:41:b1:b6:5c:99:10:5b:85:fb:d1:4b:c2:12:ad:
80:09:be:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:59:09 2025 by rpki-client