Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/b4SKLCY2y7-iMcrD3H3mIT9sOGQ.roa
File: b4SKLCY2y7-iMcrD3H3mIT9sOGQ.roa (raw, json)
Hash identifier: rsGhRjWrx7X22oIL5DlgglbmrpuMELFktv3dKFu4LTI=
Subject key identifier: 6F:84:8A:2C:26:36:CB:BF:A2:31:CA:C3:DC:7D:E6:21:3F:6C:38:64
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 019781D7707F5F4D2CD28389280C8E5EB944
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/b4SKLCY2y7-iMcrD3H3mIT9sOGQ.roa
Signing time: Wed 18 Jun 2025 07:01:09 +0000
ROA not before: Wed 18 Jun 2025 07:01:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215614
IP address blocks: 2a0c:b641:610::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 19:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:81:d7:70:7f:5f:4d:2c:d2:83:89:28:0c:8e:5e:b9:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jun 18 07:01:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f848a2c2636cbbfa231cac3dc7de6213f6c3864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1a:58:8b:8c:43:b9:5d:a5:bd:c4:b4:16:ec:
99:b6:f0:08:bc:41:da:2d:36:2d:a8:76:70:49:27:
87:f4:dd:08:49:07:34:44:6c:27:15:4b:fc:5d:b7:
08:b5:49:75:cc:f6:27:e8:21:8c:ee:73:c4:b3:33:
92:7e:02:9e:dc:5f:37:4f:29:46:bc:e5:84:6f:dd:
90:cb:fb:ee:61:91:86:af:1a:20:73:f1:6c:61:f0:
0e:48:ac:95:7a:07:64:de:6d:f5:5f:35:ba:7e:61:
c6:1a:20:4d:24:0f:7a:09:60:8d:7a:67:b3:7d:be:
98:de:de:52:1c:65:cc:2d:d2:83:02:63:25:5a:90:
4e:63:20:c5:2d:51:5e:0e:65:ad:75:db:3b:40:15:
00:19:41:b6:52:48:11:fa:52:91:90:9b:e3:03:bb:
52:6f:c6:dd:a6:01:6c:47:fb:44:b1:18:c8:81:99:
54:ce:f9:53:e0:c6:50:05:1b:da:ed:91:3c:11:7c:
d3:98:b1:0f:a5:0a:e9:80:47:cc:41:2b:d6:05:ba:
0e:49:f6:16:e7:8c:80:e9:b3:0a:9a:12:11:d6:e4:
b4:88:04:8e:f6:6c:10:5d:47:ac:e4:30:58:9a:17:
e9:9a:de:f3:63:26:fc:89:54:5b:ff:c8:7d:c2:0b:
84:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:84:8A:2C:26:36:CB:BF:A2:31:CA:C3:DC:7D:E6:21:3F:6C:38:64
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/b4SKLCY2y7-iMcrD3H3mIT9sOGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:610::/44
Signature Algorithm: sha256WithRSAEncryption
7d:d1:e0:b9:ba:d2:34:a4:f0:91:7e:21:cb:84:c6:8d:a1:75:
6d:f1:e8:bc:a3:10:d9:7a:05:49:a0:09:0e:a7:c5:50:7b:f0:
07:9a:bc:1e:96:2f:3e:c2:4b:4e:f4:fd:18:b7:8a:d6:ee:f5:
73:54:34:bf:99:04:35:e9:2f:cb:04:1b:66:4e:cd:d1:a6:87:
98:42:1b:5a:c2:50:1d:26:ab:d7:45:68:89:86:60:0a:29:37:
52:ec:2b:43:69:b3:8d:d8:17:c9:48:6a:a3:11:3f:d8:13:66:
b0:d6:8c:72:44:37:8b:f2:b8:8e:92:73:6c:66:1a:52:5f:95:
f6:e5:b8:79:51:85:12:09:12:d6:a7:33:14:76:52:6f:b5:55:
24:84:9d:eb:5c:3b:aa:4e:b2:11:ec:d1:4c:ba:ec:63:d1:1b:
20:5f:be:13:ee:3b:66:e4:2e:9c:3a:89:99:1b:4f:72:c1:d5:
0f:d8:ea:bd:4f:70:7b:de:bc:4a:9c:88:43:40:10:15:6d:22:
f4:ae:07:ee:57:8a:7f:a1:77:2d:3f:bc:da:cf:87:8b:26:e4:
28:cf:cc:fc:17:7e:82:a6:1d:57:e8:d1:82:f7:4f:3d:df:14:
b6:da:92:0f:35:f4:e0:58:38:46:35:20:01:d5:a1:d8:07:d9:
0e:f7:e9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 04:14:54 2025 by rpki-client