Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/bBSuIrniLlyqsAd0x9--LhS2TuU.roa
File: bBSuIrniLlyqsAd0x9--LhS2TuU.roa (raw, json)
Hash identifier: nGEUoCEuhTiMio8Abu1OmeIFpXlpUPecna4p4Q+HCiY=
Subject key identifier: 6C:14:AE:22:B9:E2:2E:5C:AA:B0:07:74:C7:DF:BE:2E:14:B6:4E:E5
Certificate issuer: /CN=b9e6c41a2b04fcd8f8e95718fa7d2e12cc44ac1f
Certificate serial: 01974A9B3FF959DED1AF834771485E92E3B0
Authority key identifier: B9:E6:C4:1A:2B:04:FC:D8:F8:E9:57:18:FA:7D:2E:12:CC:44:AC:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uebEGisE_Nj46VcY-n0uEsxErB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/bBSuIrniLlyqsAd0x9--LhS2TuU.roa
Signing time: Sat 07 Jun 2025 13:36:17 +0000
ROA not before: Sat 07 Jun 2025 13:36:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207695
IP address blocks: 2a12:de40:9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/uebEGisE_Nj46VcY-n0uEsxErB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/uebEGisE_Nj46VcY-n0uEsxErB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uebEGisE_Nj46VcY-n0uEsxErB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:9b:3f:f9:59:de:d1:af:83:47:71:48:5e:92:e3:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e6c41a2b04fcd8f8e95718fa7d2e12cc44ac1f
Validity
Not Before: Jun 7 13:36:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c14ae22b9e22e5caab00774c7dfbe2e14b64ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6b:09:70:36:d6:11:d3:82:76:de:12:4d:ab:
03:d8:da:9a:c9:ef:85:f0:32:d5:66:b6:2b:4e:a7:
d8:42:6d:e5:b7:8a:59:b6:1d:8f:20:d4:8f:6a:a6:
26:49:dc:aa:63:3e:8b:4f:2c:c8:6e:25:bc:eb:b1:
96:b0:1a:da:be:4e:cc:b4:67:1d:52:85:bd:a2:0d:
31:8b:f5:ee:94:6e:fe:83:ce:9b:c6:fc:6d:60:10:
6b:2a:c3:47:6e:8e:c9:fd:6e:aa:93:ff:fb:ea:12:
43:7c:66:a0:6c:da:1d:f0:8a:c6:87:e3:ef:a8:66:
44:ef:e0:5e:2c:a6:93:73:c7:a0:d3:3e:57:fc:8e:
2e:05:7e:7a:7d:ca:63:ea:05:e5:68:6d:39:86:67:
b7:10:bd:06:04:bf:26:de:d3:0d:be:d5:ea:e9:39:
c6:e7:a4:79:73:72:70:f8:c4:0a:78:20:ba:78:b9:
96:45:81:ae:23:45:38:15:3e:a8:13:0f:d4:7e:ea:
66:97:07:29:09:76:3e:95:ad:f0:4a:25:5c:10:ae:
60:b3:5d:cc:bd:3a:f4:b6:4d:3c:43:78:69:97:61:
4f:c3:60:f1:24:41:ec:66:2a:01:7e:4f:e5:7b:f8:
7e:d9:91:fd:f6:c2:e9:39:4d:5f:74:7f:63:15:ee:
8e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:14:AE:22:B9:E2:2E:5C:AA:B0:07:74:C7:DF:BE:2E:14:B6:4E:E5
X509v3 Authority Key Identifier:
keyid:B9:E6:C4:1A:2B:04:FC:D8:F8:E9:57:18:FA:7D:2E:12:CC:44:AC:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uebEGisE_Nj46VcY-n0uEsxErB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/bBSuIrniLlyqsAd0x9--LhS2TuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/uebEGisE_Nj46VcY-n0uEsxErB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:de40:9::/48
Signature Algorithm: sha256WithRSAEncryption
29:96:af:d5:ae:d5:6d:e5:be:7d:69:e0:92:8c:21:98:57:ad:
8f:26:f8:22:b4:3a:2f:d1:80:9e:3a:f3:89:03:c7:cc:c0:f3:
c0:d2:5b:9b:29:e7:0e:0e:3c:bd:75:4e:15:5d:ac:b8:d9:46:
19:21:4b:e0:78:ab:52:95:68:ba:41:7d:e0:9a:de:de:a2:4c:
3c:38:04:2d:d1:67:30:3b:fe:57:ac:a2:67:ba:af:38:35:99:
35:ca:d6:63:90:9e:43:42:c5:69:34:a6:c7:ab:ed:90:a1:dd:
92:33:63:76:47:2d:be:2f:6e:aa:af:2d:42:60:24:d0:ea:5c:
fb:7c:f6:5e:88:00:e5:60:08:6e:fa:d5:0f:b1:65:bc:56:b6:
09:3f:ec:ee:a7:cc:07:65:83:ea:cf:96:4c:c2:72:45:e8:4f:
cc:21:3c:c4:f1:90:b1:69:e9:93:8c:35:5a:12:eb:80:d7:a3:
cc:17:31:0c:86:f9:45:6e:81:fe:f7:91:90:97:97:e3:54:25:
40:ff:7c:eb:f5:a9:f7:e9:24:01:79:7e:18:69:95:60:79:53:
4a:dc:d8:66:1e:6b:60:df:d5:c8:08:f3:24:73:65:0b:c4:a1:
56:74:bc:43:0b:1f:56:e8:22:f8:44:99:52:cf:ca:d9:e0:7c:
97:7d:d0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 23:46:55 2025 by rpki-client