Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/BJJfZSXEcJpgREmM46bMZWRviEg.roa
File: BJJfZSXEcJpgREmM46bMZWRviEg.roa (raw, json)
Hash identifier: Vob9uzRDkmzFNF1TEWh7Uqaqbcw9CJGRwSmzYae8/Hc=
Subject key identifier: 04:92:5F:65:25:C4:70:9A:60:44:49:8C:E3:A6:CC:65:64:6F:88:48
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 0196A17243B03CD5C6827FD5B086246661A6
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/BJJfZSXEcJpgREmM46bMZWRviEg.roa
Signing time: Mon 05 May 2025 17:15:42 +0000
ROA not before: Mon 05 May 2025 17:15:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44559
IP address blocks: 2a0d:1ac3::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:72:43:b0:3c:d5:c6:82:7f:d5:b0:86:24:66:61:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: May 5 17:15:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04925f6525c4709a6044498ce3a6cc65646f8848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:81:a6:29:5f:40:ea:f7:f6:1c:31:b4:d9:bb:
ad:a0:1a:55:ea:34:50:f4:c6:49:50:89:86:b8:18:
7b:5d:17:9e:12:14:c4:f5:b6:f0:40:b5:84:eb:41:
fe:58:c3:7a:df:1e:05:02:a6:fb:2f:de:6b:73:9c:
b2:61:6a:c7:b6:41:be:67:5f:64:ff:13:37:b8:33:
05:15:76:7d:35:f1:34:59:76:2d:91:e8:22:42:8e:
51:13:57:ae:f4:62:9b:bc:17:23:68:d7:8c:cb:d4:
ea:ef:05:eb:da:17:12:22:51:76:38:cc:5a:45:49:
01:ad:b0:a6:62:65:bd:e3:69:9b:51:fa:23:10:3c:
68:9a:10:29:05:2f:cf:52:66:73:4a:5c:29:a1:05:
0f:b4:b7:0d:90:04:fe:de:19:23:9d:9f:9b:6b:5b:
3d:51:a7:5f:f4:d8:95:22:71:de:27:3b:6c:8f:f7:
e7:da:5a:56:68:e9:fe:8a:0f:17:a1:c9:10:89:3e:
9d:0d:06:d9:7c:a7:8e:27:dc:04:4c:3c:f4:d0:d6:
1a:74:b4:b9:a9:be:df:d5:b5:04:10:5e:6f:bf:45:
84:9d:f2:54:e5:e8:10:27:82:18:44:0a:fb:8e:43:
60:dd:f2:f2:95:22:e8:cc:c3:86:9c:88:ec:d7:39:
9b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:92:5F:65:25:C4:70:9A:60:44:49:8C:E3:A6:CC:65:64:6F:88:48
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/BJJfZSXEcJpgREmM46bMZWRviEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:1ac3::/32
Signature Algorithm: sha256WithRSAEncryption
2b:a0:45:36:56:77:00:c9:c3:1c:cd:c7:81:3a:7c:da:3b:00:
09:37:5c:b4:1d:f8:b5:76:d9:ed:60:79:30:8f:1e:2f:8e:b9:
4a:dd:41:ec:6b:70:ba:23:06:69:4a:9a:c1:61:46:f1:cc:76:
db:8e:8d:c1:1d:d6:74:d9:d0:4d:a2:80:c9:d9:53:e9:b4:cd:
1f:d6:f6:6a:31:f3:b4:aa:11:b7:75:41:ae:c7:db:42:91:02:
f5:2c:54:32:6c:7f:ca:12:aa:9b:56:b6:2d:d9:b1:05:ea:d3:
ec:e4:96:00:54:b0:e1:ef:df:5f:8b:7c:36:82:cd:ea:02:06:
26:95:a9:e8:9a:1c:15:be:f2:b6:05:8b:d3:5e:a3:b9:ff:80:
21:8d:31:ec:46:cf:56:bd:65:91:23:84:56:49:e6:d9:ef:96:
38:dd:da:49:f5:7b:ee:c5:4a:2a:34:a9:a5:2e:c5:f6:0b:6c:
85:31:f0:f4:95:41:bd:01:58:bc:dd:da:be:92:c8:81:8d:38:
db:e6:16:dd:da:64:13:3d:25:16:06:4f:08:a4:ea:bf:f1:8f:
28:bb:e2:6d:30:90:43:fb:cc:de:6b:95:9e:c0:59:96:29:c6:
cd:65:08:51:b3:ee:ef:09:5d:75:91:89:47:79:2a:38:c2:d8:
cb:d1:bb:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:00:00 2025 by rpki-client