Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/BqPDpClcFEbySosMOR-1oKvoCIg.roa
File: BqPDpClcFEbySosMOR-1oKvoCIg.roa (raw, json)
Hash identifier: c+VmXdFq88xnvIU6JQFjZLTLRDPvnZMDYtK4C3IL3p0=
Subject key identifier: 06:A3:C3:A4:29:5C:14:46:F2:4A:8B:0C:39:1F:B5:A0:AB:E8:08:88
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01978EDF89D45C30F7CE226C21FA3BBB1902
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/BqPDpClcFEbySosMOR-1oKvoCIg.roa
Signing time: Fri 20 Jun 2025 19:45:03 +0000
ROA not before: Fri 20 Jun 2025 19:45:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215296
IP address blocks: 2a10:ccc0:140::/44 maxlen: 48
2a10:ccc0:140::/48 maxlen: 48
2a10:ccc0:141::/48 maxlen: 48
2a10:ccc0:142::/48 maxlen: 48
2a10:ccc0:144::/48 maxlen: 48
2a10:ccc0:14a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8e:df:89:d4:5c:30:f7:ce:22:6c:21:fa:3b:bb:19:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jun 20 19:45:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06a3c3a4295c1446f24a8b0c391fb5a0abe80888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:92:be:d3:4c:fc:87:b3:f3:87:f9:5d:29:69:
b6:91:4e:46:d9:34:25:59:88:83:43:b3:82:b1:3f:
34:b1:15:5f:ea:98:d4:78:be:5f:ca:0f:e2:e8:24:
87:84:3e:16:26:81:df:c4:d5:89:e8:e4:ff:6b:93:
a6:6b:64:28:b7:d6:b4:31:df:89:0d:12:ca:f5:00:
31:7c:87:12:f9:20:9b:48:d6:8a:a7:b5:ff:4c:e6:
2f:5d:23:23:15:38:d4:63:0e:02:cd:c6:61:cd:86:
13:1f:e2:2b:4b:c5:71:ed:48:3e:63:a8:79:d8:ad:
ac:1c:78:fd:f5:ae:b6:eb:f7:84:73:7e:06:80:96:
9a:f7:d7:0e:41:78:3a:4d:0d:32:e7:cc:38:d5:fb:
a2:68:f4:23:89:7b:3f:fc:d0:f4:a3:dd:34:eb:df:
fb:7d:0b:39:16:fc:c7:03:aa:c0:20:3e:66:86:05:
31:6a:a5:b7:f8:fd:aa:25:95:6d:f8:e3:d1:24:53:
41:6d:15:1f:35:b4:a3:68:c7:70:d7:9e:6e:93:41:
9b:d1:17:13:6a:ec:b3:b2:43:62:07:1f:cb:ff:e4:
20:50:5b:ba:71:bb:31:1c:04:7e:30:55:69:61:5c:
58:60:ce:fc:6d:57:f3:34:f9:98:14:96:6c:ed:c7:
d4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A3:C3:A4:29:5C:14:46:F2:4A:8B:0C:39:1F:B5:A0:AB:E8:08:88
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/BqPDpClcFEbySosMOR-1oKvoCIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ccc0:140::/44
Signature Algorithm: sha256WithRSAEncryption
55:a2:0d:b9:3e:9f:01:62:2e:7e:d4:cb:85:01:2a:48:5c:65:
18:e6:56:63:ff:21:89:96:df:f3:ba:6f:f4:bb:fb:67:f7:3a:
da:64:b0:d0:ad:8b:84:23:4d:0f:8e:5e:a0:da:18:c4:c3:fa:
0b:48:c0:29:50:f1:60:6d:2b:7e:66:d6:00:b8:41:87:c4:3c:
f5:fc:cb:49:06:70:1d:f8:43:8e:a5:8d:bb:b4:da:82:87:9b:
98:02:35:b9:98:5d:f8:28:8f:7b:ee:92:71:86:d4:95:27:06:
28:71:68:31:df:65:cd:6b:22:9c:4c:77:da:33:75:04:a0:ac:
64:b4:c1:e0:eb:1d:0d:28:4c:41:6f:d3:15:c3:32:36:d1:37:
86:86:c6:13:06:96:62:9d:94:8b:e8:ca:09:4a:73:5b:94:83:
a0:19:61:f5:f5:86:3d:78:2f:9d:2c:9a:e7:be:56:29:c7:05:
c6:af:65:02:e0:5c:a8:5a:b4:f0:f2:df:fe:56:78:f8:e0:aa:
d1:14:4a:9c:74:c0:76:7f:8d:6d:d4:dd:6d:f3:79:05:05:8d:
71:a8:63:7b:b5:a1:f3:88:6f:15:f9:cc:18:d2:ed:26:12:94:
0e:3e:89:bc:07:05:b1:f2:56:e0:f1:55:6e:d4:06:a8:32:ad:
10:40:00:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 21:46:54 2025 by rpki-client