Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/BviWEmaP3_lgIrWubDU6uMTA2H8.roa
File: BviWEmaP3_lgIrWubDU6uMTA2H8.roa (raw, json)
Hash identifier: atRgCl8RxHKHCEL0/AcFViVgxr58CMMvRd/DcUp5/fw=
Subject key identifier: 06:F8:96:12:66:8F:DF:F9:60:22:B5:AE:6C:35:3A:B8:C4:C0:D8:7F
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 019551C4B20E7E4C53D2A294AC2AEEE45551
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/BviWEmaP3_lgIrWubDU6uMTA2H8.roa
Signing time: Sat 01 Mar 2025 12:53:19 +0000
ROA not before: Sat 01 Mar 2025 12:53:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12844
IP address blocks: 62.100.196.0/22 maxlen: 24
185.71.220.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 16:11:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:51:c4:b2:0e:7e:4c:53:d2:a2:94:ac:2a:ee:e4:55:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Mar 1 12:53:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06f89612668fdff96022b5ae6c353ab8c4c0d87f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ec:4e:be:39:cf:06:50:e2:54:90:f4:f4:f2:
ac:55:37:9d:ff:33:f1:0a:5f:c8:1a:7b:6f:8b:3e:
2e:d3:fe:ba:6e:b3:fd:ca:5d:8c:f6:f1:f0:53:dc:
20:86:c8:7e:c2:20:75:09:1c:47:7e:44:71:2a:39:
8a:94:77:79:3d:0c:ef:1f:3c:4f:05:2c:5e:ec:56:
a8:dd:f8:e2:ac:0f:2d:6f:74:a8:11:49:c0:ec:a1:
6c:9f:e8:7a:10:53:2d:be:3c:7a:c8:17:ac:30:3b:
43:3e:cb:68:51:c8:e4:ab:75:25:bd:5b:cb:b2:06:
c7:bb:3b:7d:a5:67:18:cf:fe:54:6f:00:d7:13:89:
2f:62:d1:b0:b0:8c:42:67:53:8e:2e:f9:21:2a:09:
67:a5:5f:b6:2b:4b:a8:77:11:c4:9a:0c:b3:67:43:
c6:d8:2c:4f:b6:31:c3:bd:15:22:4f:75:28:6e:72:
25:84:e9:c8:87:ac:9e:3d:cc:32:31:40:41:ae:13:
13:96:26:b6:c4:12:5d:34:22:57:95:fe:aa:a6:bd:
eb:f6:29:e3:0d:e3:42:fb:af:4c:51:3a:3b:44:4a:
54:84:39:ba:b6:78:02:78:61:20:36:6a:8f:dc:7f:
21:50:cc:06:b5:54:d6:f0:ff:96:59:6a:8f:2a:71:
6d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F8:96:12:66:8F:DF:F9:60:22:B5:AE:6C:35:3A:B8:C4:C0:D8:7F
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/BviWEmaP3_lgIrWubDU6uMTA2H8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.100.196.0/22
185.71.220.0/23
Signature Algorithm: sha256WithRSAEncryption
22:1e:6b:ed:5a:a1:8f:b2:82:49:fc:af:b6:82:bf:3d:9d:39:
1b:4e:ef:14:4c:42:ab:37:b1:ce:13:af:d8:6a:dd:05:3d:89:
02:8f:01:fc:ef:79:95:84:6c:01:54:57:f2:24:37:98:0a:2d:
a4:48:35:a4:97:ed:6c:30:8b:75:78:c4:cf:99:c4:fa:bd:cf:
96:d1:b6:d7:85:2c:76:d8:49:7e:7e:f9:5b:33:ae:48:3d:11:
c9:05:90:45:cd:8c:7d:bb:b7:49:88:00:28:0e:00:bd:47:9b:
b5:7d:9e:42:14:90:16:8b:ce:07:98:1b:d5:02:47:13:55:73:
1f:0d:e8:ab:1d:78:32:07:cd:54:9f:da:43:f0:63:26:6e:9d:
35:59:70:c0:e6:1c:3c:62:f8:a3:1d:bd:49:62:0e:18:29:48:
dd:5f:b3:48:35:35:31:33:81:c9:a0:4b:da:54:43:5a:60:09:
cb:ce:1f:99:f4:29:e7:19:36:d4:4e:a5:a1:c5:52:c4:03:3d:
4f:cb:9a:00:3c:bc:cd:cb:9f:0f:43:91:68:a7:86:90:8b:99:
71:0d:72:a3:ee:2f:1c:01:80:05:45:09:6e:95:3a:5b:b5:15:
30:e0:06:68:e3:cc:c6:60:cf:58:f7:da:29:cd:b0:73:12:04:
9b:b5:38:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 02:12:10 2025 by rpki-client