Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/bXxx-llWekyrtBewA8UESiAygSk.roa
File: bXxx-llWekyrtBewA8UESiAygSk.roa (raw, json)
Hash identifier: CVAUCXJbLgxcc/u+sDImVr2cGi4Am9sXCXZAdGDnVHY=
Subject key identifier: 6D:7C:71:FA:59:56:7A:4C:AB:B4:17:B0:03:C5:04:4A:20:32:81:29
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 01966D007C052DC531D14F13B5AC391AE17C
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/bXxx-llWekyrtBewA8UESiAygSk.roa
Signing time: Fri 25 Apr 2025 12:51:10 +0000
ROA not before: Fri 25 Apr 2025 12:51:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42689
IP address blocks: 46.20.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6d:00:7c:05:2d:c5:31:d1:4f:13:b5:ac:39:1a:e1:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Apr 25 12:51:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d7c71fa59567a4cabb417b003c5044a20328129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:57:95:c7:f5:9b:a7:b2:97:74:7c:7c:56:91:
4e:e1:75:8b:53:c4:fc:6d:81:82:0b:00:79:c9:b9:
65:cc:5e:1a:0a:3a:a9:ca:73:8b:f9:d8:a0:3e:41:
c8:43:00:17:97:22:de:9c:27:a1:db:43:53:d3:1d:
20:77:01:5f:2e:0b:6c:e3:df:58:93:7d:8f:1a:3d:
d4:bb:55:f9:f0:96:c0:4b:d5:5e:b4:0c:b8:ed:b6:
26:fd:1c:39:69:f0:13:f9:d2:2e:2d:94:f1:2c:c3:
d3:89:bb:61:d7:a5:20:5d:70:0a:10:7a:9a:7e:54:
fd:0c:91:be:1b:e5:ac:0f:8f:64:a4:de:53:96:20:
61:79:fa:49:44:21:c9:b0:90:3a:a7:04:7a:2e:fc:
7e:e9:19:37:f2:e6:c3:0d:a5:80:dd:a5:6d:ac:a4:
c2:9b:3a:18:90:71:00:4a:20:3f:1b:39:2c:aa:fe:
11:45:fc:8a:a5:e6:66:01:2b:1d:90:da:56:d2:0c:
90:74:e2:d3:3f:80:a3:31:e6:02:6e:e8:fb:62:cf:
5f:76:52:60:42:d2:7b:25:55:b3:45:c2:08:4b:f1:
a2:a3:e5:6b:d8:88:0e:ba:7c:4f:09:7f:9a:0c:54:
d2:a2:41:8d:62:bc:4b:97:46:29:14:44:85:1e:ee:
a8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:7C:71:FA:59:56:7A:4C:AB:B4:17:B0:03:C5:04:4A:20:32:81:29
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/bXxx-llWekyrtBewA8UESiAygSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.101.0/24
Signature Algorithm: sha256WithRSAEncryption
39:9b:c0:e3:73:71:e6:6c:46:58:fd:16:85:b4:ec:a4:1b:09:
a7:db:43:cc:32:55:15:14:46:2f:0e:3f:48:c2:cb:04:c1:03:
6a:ee:67:05:75:8f:dc:29:bc:6b:b7:bf:e5:69:ec:7a:c6:27:
e0:ed:97:a2:e3:59:c0:a2:70:1c:0c:bb:24:a4:11:60:cc:d4:
0d:67:a4:4c:7b:6a:35:d1:5b:ae:5d:cf:a9:2c:66:ce:da:1e:
0b:18:ec:af:64:cc:e2:ed:81:a4:36:65:4e:8e:7b:ad:c4:c5:
3d:30:16:1b:60:62:2d:f3:50:49:84:dd:9b:83:88:23:0a:a4:
b2:f5:67:18:cd:b2:a1:46:38:d6:ba:e4:79:84:d2:b6:37:e1:
5a:f5:4a:1d:5b:d4:61:d8:61:5d:28:55:79:2d:a3:6a:00:a9:
dd:8e:ec:cb:f1:50:a1:c6:35:f5:7e:b2:4e:5a:67:d4:57:42:
a3:6b:d4:e5:ce:78:cf:0e:2a:86:16:c7:c0:f0:22:50:d6:8d:
d4:36:92:fe:42:27:5c:9e:a2:5a:8e:90:c3:c4:55:2f:b1:30:
e2:9b:43:34:92:f5:3b:1c:aa:00:0c:23:35:6d:5f:61:67:a3:
b2:63:6f:92:9c:df:d5:ea:64:37:71:72:3b:c6:bd:b4:51:ef:
5a:dc:c3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:32:20 2025 by rpki-client