Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/BSKyscvQ3nExMPLDsZnzOtDyPn0.roa
File: BSKyscvQ3nExMPLDsZnzOtDyPn0.roa (raw, json)
Hash identifier: 0G/NEbmQBX4xHGs1virHRK4PzlJoNrkOAGXadEBAaoU=
Subject key identifier: 05:22:B2:B1:CB:D0:DE:71:31:30:F2:C3:B1:99:F3:3A:D0:F2:3E:7D
Certificate issuer: /CN=ca9c980eaa16141b5c4815c6389ca25b3f2ed77c
Certificate serial: 0194258FCB62D87996CFF7D9240A6B9A3AEB
Authority key identifier: CA:9C:98:0E:AA:16:14:1B:5C:48:15:C6:38:9C:A2:5B:3F:2E:D7:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/BSKyscvQ3nExMPLDsZnzOtDyPn0.roa
Signing time: Thu 02 Jan 2025 05:49:28 +0000
ROA not before: Thu 02 Jan 2025 05:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202329
IP address blocks: 2001:678:6e0::/45 maxlen: 45
2001:678:6e0::/48 maxlen: 48
2001:678:6e2::/48 maxlen: 48
2001:678:6e3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 17:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:cb:62:d8:79:96:cf:f7:d9:24:0a:6b:9a:3a:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9c980eaa16141b5c4815c6389ca25b3f2ed77c
Validity
Not Before: Jan 2 05:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0522b2b1cbd0de713130f2c3b199f33ad0f23e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8b:43:62:b8:d6:5b:7c:95:da:49:3c:53:85:
91:6f:04:cc:68:98:ed:fb:80:b6:c0:a6:fa:3b:cf:
d4:2b:53:d5:c0:85:0a:20:54:c5:d1:4a:72:cc:57:
e2:bd:2a:b6:50:ee:a8:e4:ec:52:b7:f0:d4:b7:40:
e2:70:1c:14:bc:af:55:b0:ff:1f:92:2c:66:62:19:
e8:c5:23:31:63:75:4b:77:39:77:d6:1f:18:9e:a1:
81:25:0d:0a:07:2e:c6:10:ca:1f:6c:90:65:91:07:
be:f2:22:31:4b:0d:d4:ca:c5:3d:ac:08:b7:d9:3a:
73:9e:af:07:c4:40:6e:e0:d3:67:2f:43:25:ff:5b:
81:a5:37:29:00:53:59:21:b1:8a:a7:d0:00:9f:62:
ee:bd:b6:54:ea:40:1c:66:70:bf:59:44:a1:fd:34:
03:42:b6:5e:a8:85:c4:29:8f:54:45:ff:10:cd:7d:
0e:af:27:5c:82:32:61:a4:ff:81:50:87:0f:00:dd:
ab:f6:7c:b6:f8:75:ff:9b:98:ba:f6:9f:13:f3:29:
4c:e2:9b:14:37:b4:6f:28:d7:b0:38:ae:a2:3e:be:
5d:a7:ca:1f:ba:2b:30:14:2d:f5:ed:85:6b:41:06:
ee:bd:84:56:b6:e4:95:e0:e1:29:db:43:7c:bc:36:
a0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:22:B2:B1:CB:D0:DE:71:31:30:F2:C3:B1:99:F3:3A:D0:F2:3E:7D
X509v3 Authority Key Identifier:
keyid:CA:9C:98:0E:AA:16:14:1B:5C:48:15:C6:38:9C:A2:5B:3F:2E:D7:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/BSKyscvQ3nExMPLDsZnzOtDyPn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:6e0::/45
Signature Algorithm: sha256WithRSAEncryption
0e:70:6a:a3:5f:56:c0:1d:ff:de:8d:f1:ab:53:86:a0:db:cc:
3a:77:73:cf:3e:44:9d:57:5f:4d:59:fd:60:f5:9e:72:21:86:
21:87:9f:8f:11:96:40:e1:aa:ba:16:a4:ce:95:3c:a7:8a:d3:
25:19:e7:40:0d:a3:24:72:34:1d:fc:87:ba:6e:8c:4e:68:f6:
85:27:5a:62:14:27:d9:ef:36:0b:0f:df:d1:18:99:1a:68:ec:
b9:a5:9f:d7:10:64:ac:c4:3b:9b:75:2b:14:8e:a7:7c:21:c8:
fc:aa:98:80:0f:30:9c:c9:b8:85:87:51:9a:8e:44:65:d0:fb:
a8:6d:37:b0:11:e9:ca:ce:2d:79:45:00:45:13:ea:15:7d:86:
79:d7:7e:f8:c5:4b:cc:2d:0c:cb:c8:92:a9:bd:2c:ba:1d:03:
ef:3f:e4:74:43:8d:43:2e:fc:fb:93:e4:e4:05:7b:c7:f2:78:
55:d0:ab:60:a5:05:71:5e:a8:a1:f9:ca:ad:cb:36:4f:e7:db:
fa:b0:08:39:f6:8c:b7:ba:ae:fd:09:24:e1:59:0b:0a:85:45:
5b:4e:c6:80:b2:b8:14:85:8c:44:14:69:b8:1f:9e:98:19:63:
13:5d:6c:23:d2:63:b5:55:3f:df:04:5c:a6:99:12:d1:96:74:
24:bb:42:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:47:05 2025 by rpki-client