Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/bEnGjclY-_QlGRE7ZiztgqZ66uY.roa
File: bEnGjclY-_QlGRE7ZiztgqZ66uY.roa (raw, json)
Hash identifier: 7ckrGHEYIH7GQYIRDaFhef6A6QyoadZsL9wCvlLcghQ=
Subject key identifier: 6C:49:C6:8D:C9:58:FB:F4:25:19:11:3B:66:2C:ED:82:A6:7A:EA:E6
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 019654A2FF1AB7BEF64B34DCFF61339DAC22
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/bEnGjclY-_QlGRE7ZiztgqZ66uY.roa
Signing time: Sun 20 Apr 2025 19:18:10 +0000
ROA not before: Sun 20 Apr 2025 19:18:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2a0b:3e00::/29 maxlen: 29
2a0c:8340::/29 maxlen: 29
2a10:9600::/29 maxlen: 29
2a13:b840::/29 maxlen: 29
2a13:ddc0::/29 maxlen: 29
2a14:35c0::/29 maxlen: 29
2a14:72c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 10:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:a2:ff:1a:b7:be:f6:4b:34:dc:ff:61:33:9d:ac:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Apr 20 19:18:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c49c68dc958fbf42519113b662ced82a67aeae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:06:b8:f2:ce:bb:a0:c0:d8:da:f9:e0:24:d0:
32:6d:46:4e:1e:54:3c:0e:96:cb:f8:c4:11:5b:25:
85:2c:75:ae:f8:a4:02:cd:01:2d:d6:35:73:4b:b1:
49:a9:44:e3:e6:6f:55:45:71:1d:42:99:87:60:d4:
fb:7e:b2:d6:be:fd:cc:ca:c7:c5:1b:ca:a5:bb:dd:
c3:1f:cf:8a:f8:99:a5:ca:12:d6:19:2a:f8:d7:0b:
37:8f:ee:b4:f7:1c:41:b0:e4:81:89:54:45:e9:9c:
28:71:fa:30:97:c7:4d:a7:cd:a6:02:32:0d:9f:b4:
10:39:8b:0f:44:0d:7f:18:60:48:f9:6f:ad:d0:89:
dd:c4:07:44:f6:52:48:ea:95:a6:03:b7:fc:8c:58:
b0:2b:2e:28:a6:a3:c5:9a:91:c4:1b:2e:27:89:d0:
39:94:bc:76:2b:8a:c5:2f:b7:6d:a0:26:62:d9:89:
cf:ac:aa:21:fa:2a:12:59:3b:a9:1e:85:9b:26:0a:
4b:e6:e8:43:2e:5c:39:72:93:04:11:b8:00:a8:75:
88:f6:8d:85:6b:61:06:bb:2f:00:77:57:4b:07:c9:
10:e9:f6:39:19:68:73:03:35:5c:6d:61:e4:38:cd:
e5:35:6b:52:89:fd:6f:38:86:f4:84:e1:33:ac:af:
01:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:49:C6:8D:C9:58:FB:F4:25:19:11:3B:66:2C:ED:82:A6:7A:EA:E6
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/bEnGjclY-_QlGRE7ZiztgqZ66uY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:3e00::/29
2a0c:8340::/29
2a10:9600::/29
2a13:b840::/29
2a13:ddc0::/29
2a14:35c0::/29
2a14:72c0::/29
Signature Algorithm: sha256WithRSAEncryption
12:0f:7f:95:e9:1e:a1:fa:ec:70:bb:73:b4:63:02:21:a8:aa:
7b:42:ce:51:c5:e1:d6:2a:4c:fd:b9:ee:84:a8:11:21:95:1b:
b2:de:f3:4e:b3:95:d0:45:7d:1f:25:a0:00:e6:6c:1b:ef:b2:
d6:d2:45:6e:a2:51:78:47:3a:f6:66:b2:f4:e4:24:75:0a:55:
f4:31:63:cf:cb:63:1a:89:5e:9c:ec:e6:e4:13:ee:a7:53:ee:
43:42:3a:96:11:17:c2:bb:bd:1b:26:6f:54:b9:85:de:01:d3:
db:1b:b4:3e:c3:a6:12:4d:5a:f8:ef:d9:55:60:d3:aa:5c:b5:
03:51:42:53:0c:70:6a:e3:08:f6:d0:e7:e3:cd:33:77:e2:ad:
37:b1:05:ae:27:5d:5c:fa:0c:e1:ef:1b:9b:41:e2:7f:bb:84:
cc:85:cc:77:ab:3a:05:ad:71:81:3a:96:54:6f:5a:7b:f5:5e:
a5:17:6a:6c:1e:67:f2:0c:6a:19:18:30:89:8f:84:7e:67:87:
ee:dd:95:74:2e:e1:e4:a7:c3:06:64:ba:e3:ad:e1:db:2b:12:
0a:0c:14:ff:5e:6a:02:18:0f:cc:7e:f8:cb:10:f8:6a:ac:b4:
2f:a3:05:00:5c:23:f9:b7:65:c1:48:96:9e:59:80:46:25:86:
55:4d:ce:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:40:25 2025 by rpki-client