Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/bFqAr18-DoQ6dVM9w_6gb9zQnTA.roa
File: bFqAr18-DoQ6dVM9w_6gb9zQnTA.roa (raw, json)
Hash identifier: CuuNkCn7ATc07S7puEJg/6wk+lxa5wMurXD4UWOiLPU=
Subject key identifier: 6C:5A:80:AF:5F:3E:0E:84:3A:75:53:3D:C3:FE:A0:6F:DC:D0:9D:30
Certificate issuer: /CN=ff32d6463621b13f78e530d144feac023e1e4582
Certificate serial: 019662A9B2A36B41E834254DD56B679E59A6
Authority key identifier: FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/bFqAr18-DoQ6dVM9w_6gb9zQnTA.roa
Signing time: Wed 23 Apr 2025 12:40:10 +0000
ROA not before: Wed 23 Apr 2025 12:40:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36352
IP address blocks: 2a14:15c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:62:a9:b2:a3:6b:41:e8:34:25:4d:d5:6b:67:9e:59:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff32d6463621b13f78e530d144feac023e1e4582
Validity
Not Before: Apr 23 12:40:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c5a80af5f3e0e843a75533dc3fea06fdcd09d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a6:d6:b2:a4:79:69:cc:84:80:f9:f8:09:66:
50:92:8a:de:31:03:0e:5b:2b:6e:da:d4:c3:17:7f:
54:ff:f6:4a:59:22:0b:17:c7:0d:67:3f:7f:a9:a8:
c2:7a:1a:59:ec:a7:c3:98:05:e8:d0:20:24:39:fe:
37:29:5b:90:fd:30:00:2b:b9:f2:d6:89:d3:9d:03:
3a:a9:5d:ad:7d:59:28:72:c2:03:13:4e:8f:66:91:
ae:1d:2a:a4:eb:bf:9c:f6:ed:a8:99:cd:5e:b4:9c:
14:e4:00:fd:d4:12:7b:ef:0d:73:19:07:d1:c5:d1:
6a:77:d0:c0:89:0e:45:d6:02:a4:b9:75:13:e2:8f:
a6:7b:f0:ed:e1:e3:a7:c7:c5:9c:f2:41:53:44:38:
a3:1a:e9:f0:d6:39:91:9a:23:c6:85:f0:f1:04:b2:
8a:f0:bc:82:b3:5e:a8:10:03:4d:35:da:f9:78:90:
22:30:0b:09:ce:1a:3c:de:dd:20:9a:19:0f:13:43:
5b:15:ab:ae:0e:0b:31:22:f7:24:53:69:84:5b:06:
2b:1c:b4:c5:2c:d0:9b:48:3c:a3:bc:1f:fb:36:bd:
9f:af:02:94:41:06:3a:7b:f6:b6:74:09:fd:bd:85:
87:5b:7a:e2:23:c6:78:78:9e:92:62:58:c7:c0:44:
18:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5A:80:AF:5F:3E:0E:84:3A:75:53:3D:C3:FE:A0:6F:DC:D0:9D:30
X509v3 Authority Key Identifier:
keyid:FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/bFqAr18-DoQ6dVM9w_6gb9zQnTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:15c0::/29
Signature Algorithm: sha256WithRSAEncryption
84:f5:cf:cd:b5:6b:60:9c:63:a0:7c:5c:fe:71:6c:a4:81:71:
09:1a:02:16:ef:b7:ae:21:b0:35:91:cd:25:03:6b:6f:bc:63:
8d:14:1d:6d:1d:ee:d1:06:9d:31:ef:d7:2c:5c:9b:4d:a9:ac:
c0:5b:9b:a0:6f:5d:4f:ea:b6:5d:1a:be:f3:10:0d:df:ac:5f:
1f:d0:e2:81:08:43:cf:8e:73:a5:ac:b9:95:cc:01:07:1e:96:
ea:57:12:cc:51:66:ab:11:b2:e1:10:c6:1a:85:5b:26:68:aa:
07:e4:76:78:47:11:d3:23:c9:32:ee:e7:0f:44:8b:95:0d:ce:
23:2c:1b:ee:8f:a9:fc:21:26:b1:a5:99:4d:bc:1e:45:72:14:
26:12:4c:06:88:b8:c2:c9:69:cd:82:28:69:97:bf:61:44:8a:
66:a7:e7:16:da:3b:fc:7b:05:1b:81:7b:95:89:da:d8:91:dc:
b5:25:0c:58:5a:22:47:1c:92:af:0c:ce:7f:14:d0:d2:cd:5b:
2e:80:1c:14:16:07:48:0e:c2:cf:80:56:8d:13:e5:dc:ee:46:
78:97:1a:11:b6:3e:3a:29:ff:45:8b:43:e9:df:65:fe:1e:c5:
0b:89:ea:d9:1f:47:5c:ac:5a:88:f5:79:06:6e:8a:fb:11:a9:
3c:79:cd:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:46:30 2025 by rpki-client