Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/B0G3sXZP-lhExtNpCnBC4YPOMgM.roa
File: B0G3sXZP-lhExtNpCnBC4YPOMgM.roa (raw, json)
Hash identifier: gLC/9yZUh8hacXl47LTUe+LM65gMVKVuxWQdb+HkSvE=
Subject key identifier: 07:41:B7:B1:76:4F:FA:58:44:C6:D3:69:0A:70:42:E1:83:CE:32:03
Certificate issuer: /CN=7e3150f8c67063121027328954968d08d4cf329a
Certificate serial: 0197891636D02A684C241720AC33061EEE79
Authority key identifier: 7E:31:50:F8:C6:70:63:12:10:27:32:89:54:96:8D:08:D4:CF:32:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/B0G3sXZP-lhExtNpCnBC4YPOMgM.roa
Signing time: Thu 19 Jun 2025 16:47:03 +0000
ROA not before: Thu 19 Jun 2025 16:47:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200529
IP address blocks: 2a06:2c80:2000::/36 maxlen: 48
2a06:2c80:6000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:89:16:36:d0:2a:68:4c:24:17:20:ac:33:06:1e:ee:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e3150f8c67063121027328954968d08d4cf329a
Validity
Not Before: Jun 19 16:47:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0741b7b1764ffa5844c6d3690a7042e183ce3203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cd:fe:4a:44:17:24:d7:4e:8b:a8:11:ea:82:
94:e9:fc:2c:e1:65:29:1d:19:0d:6f:20:2b:bf:c9:
d8:c0:bf:bf:47:a0:6f:2f:c1:b8:29:3b:46:3c:b3:
48:57:87:51:70:d2:16:47:08:ea:a9:75:75:fd:67:
07:6e:9d:1d:c3:02:aa:24:d2:2b:ad:d0:02:56:e0:
ce:8d:cd:c9:f1:ac:f6:8d:9b:aa:be:ec:26:9b:c6:
47:bf:4e:26:01:4a:39:ca:16:44:90:a3:f9:47:6e:
21:37:ad:4a:03:29:34:12:b4:46:56:c8:f7:40:24:
19:23:e0:67:7c:52:d1:a0:f7:b0:52:d3:91:17:d0:
df:62:5b:3f:5b:91:16:0f:13:18:46:a8:7b:fa:2c:
1e:46:40:b2:b5:35:e9:6d:c5:4c:e8:6e:45:af:51:
96:86:6e:4e:3c:e7:4c:c9:fe:c3:4a:55:64:d4:4d:
bc:d2:7d:00:e9:13:75:bb:77:43:24:54:be:6e:c9:
7f:ac:0e:48:cc:09:85:18:c1:69:88:c0:4e:d0:8e:
4b:77:ed:2e:0a:0c:95:d1:16:fa:91:c2:dd:69:9a:
c9:60:62:0b:22:5c:53:20:f7:20:c9:2f:81:e2:9e:
89:1d:02:41:11:94:a2:2a:29:96:0f:d7:88:89:cf:
70:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:41:B7:B1:76:4F:FA:58:44:C6:D3:69:0A:70:42:E1:83:CE:32:03
X509v3 Authority Key Identifier:
keyid:7E:31:50:F8:C6:70:63:12:10:27:32:89:54:96:8D:08:D4:CF:32:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/B0G3sXZP-lhExtNpCnBC4YPOMgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:2c80:2000::/36
2a06:2c80:6000::/36
Signature Algorithm: sha256WithRSAEncryption
05:50:e5:43:eb:ef:c2:a4:1e:ce:51:82:4c:98:d0:76:52:5b:
8a:0d:69:b6:d4:9c:62:78:1d:0c:28:4d:8e:e4:2a:11:75:d0:
3a:25:19:04:35:ed:93:1f:f5:bc:9b:3d:07:57:43:d3:df:fd:
05:d7:29:ad:53:22:8e:da:df:9d:53:60:52:2e:02:9f:6a:cb:
b9:6c:9f:d1:43:34:eb:9a:d2:1b:31:d3:aa:77:aa:f8:ce:8f:
0e:69:8e:cb:fe:9c:7d:53:07:c6:3e:80:ba:43:e4:71:4c:37:
a6:07:b9:b8:cd:9a:8d:1c:f3:e9:03:68:ce:d6:01:50:fc:dc:
37:6a:26:6c:28:f0:c5:cd:ee:f7:c1:a7:89:fd:06:fa:e3:97:
2e:07:77:70:3c:95:02:bc:fe:7b:fc:29:e9:16:c2:6d:c9:bd:
e5:9b:71:1f:da:66:48:84:5f:0f:a1:10:ca:f0:6f:e4:26:a1:
30:8d:94:0a:be:56:3d:51:40:51:ab:64:52:31:f0:01:96:06:
f9:c4:ff:f9:38:a8:29:dd:5c:1c:3d:d7:92:0d:04:8a:1a:f6:
5f:c6:a6:e8:00:4b:f3:c9:dd:b8:7b:73:91:a9:6d:89:f5:ce:
88:66:af:3f:f0:79:12:14:1b:0a:95:b3:f6:2d:07:cb:84:9e:
62:81:a1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 01:52:33 2025 by rpki-client