Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/B2n18W6FZZHyRPgmArtbq0-BQHI.roa
File: B2n18W6FZZHyRPgmArtbq0-BQHI.roa (raw, json)
Hash identifier: sGRiT/dWrEM0f4SVXVnUW/pThWPm0EW+IVYQygpGhOY=
Subject key identifier: 07:69:F5:F1:6E:85:65:91:F2:44:F8:26:02:BB:5B:AB:4F:81:40:72
Certificate issuer: /CN=5babcaa10a336072ebc0820a6df0bfa4dc5cfdaa
Certificate serial: 01942521636220805389876878C6618C5FE8
Authority key identifier: 5B:AB:CA:A1:0A:33:60:72:EB:C0:82:0A:6D:F0:BF:A4:DC:5C:FD:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W6vKoQozYHLrwIIKbfC_pNxc_ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/B2n18W6FZZHyRPgmArtbq0-BQHI.roa
Signing time: Thu 02 Jan 2025 03:48:52 +0000
ROA not before: Thu 02 Jan 2025 03:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15580
IP address blocks: 194.34.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/W6vKoQozYHLrwIIKbfC_pNxc_ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:63:62:20:80:53:89:87:68:78:c6:61:8c:5f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5babcaa10a336072ebc0820a6df0bfa4dc5cfdaa
Validity
Not Before: Jan 2 03:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0769f5f16e856591f244f82602bb5bab4f814072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:92:fc:59:0f:8a:b9:ef:e0:ff:a1:ed:58:e2:
15:bb:fd:2a:36:1f:6e:e7:0e:3e:70:61:c4:1a:49:
0a:c5:4e:da:b2:29:a3:25:b0:47:df:d1:ab:54:b4:
f1:f2:8a:cb:b4:9d:ad:22:3b:de:9d:53:eb:fa:bd:
67:bc:0f:b9:4e:82:47:ef:34:2e:64:0a:7a:55:1a:
e6:1c:1a:e1:7f:50:6e:95:e0:69:7d:51:97:b5:4a:
4e:1c:aa:cd:79:f7:6f:80:52:27:6f:36:a0:a5:3d:
5c:80:c7:95:f6:77:ed:b9:58:d4:45:5f:ed:95:c2:
8b:9b:e5:ce:27:09:e4:34:c4:4f:de:11:74:10:ee:
40:a2:ac:c8:fb:dc:7f:c6:a2:19:f2:21:cf:7c:41:
8a:35:87:f3:4d:1b:fa:4e:a6:65:7f:1f:69:6f:03:
23:b2:d7:9d:6f:22:19:5a:e4:75:91:5e:02:ec:b3:
90:d2:69:4c:98:7f:fa:cb:56:93:5a:ba:88:7d:9e:
f4:56:36:ef:94:f9:64:fa:9a:a7:42:ed:1e:2f:26:
99:9a:9e:04:5f:5c:25:d6:58:54:7e:6f:30:18:1d:
f7:85:81:27:c4:5d:fc:b1:18:c4:fe:24:d9:6b:6d:
f7:4d:14:4f:21:16:95:74:14:ed:7a:75:a9:a6:9d:
3c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:69:F5:F1:6E:85:65:91:F2:44:F8:26:02:BB:5B:AB:4F:81:40:72
X509v3 Authority Key Identifier:
keyid:5B:AB:CA:A1:0A:33:60:72:EB:C0:82:0A:6D:F0:BF:A4:DC:5C:FD:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W6vKoQozYHLrwIIKbfC_pNxc_ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/B2n18W6FZZHyRPgmArtbq0-BQHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.174.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:5a:4e:aa:1e:ac:09:f7:dd:ee:1c:bf:05:0c:96:c6:bb:a8:
c8:d9:04:b7:91:c3:59:35:f4:0d:82:40:17:81:0f:13:44:1c:
18:31:a5:1c:d4:b4:97:6a:0b:97:95:9d:e9:43:f7:73:4f:b6:
7e:05:07:a1:61:51:3c:22:19:91:bd:cc:d9:d2:7d:03:eb:08:
68:97:48:31:4b:ed:07:60:07:2d:29:31:47:99:fe:bb:5c:b7:
bf:26:f8:dc:32:a4:8a:95:51:49:3b:5b:f0:0d:5b:2f:85:19:
a6:ce:79:cc:5b:9c:bf:b0:ad:11:85:c1:a6:d8:05:b4:5f:cc:
4d:5b:1a:33:79:98:9e:ae:1b:0e:98:c7:b4:b5:cb:4f:62:a5:
f2:f6:04:50:74:ea:c0:43:b4:45:43:8d:ff:e0:04:e3:e8:92:
04:a3:fa:10:08:da:91:fa:c6:3e:ab:b8:1a:cf:70:30:47:05:
60:d1:fb:18:88:d0:ca:70:a1:4d:40:55:6c:e4:46:cb:63:c9:
84:51:44:94:f2:fd:45:57:6d:06:3f:b1:c3:7a:8c:29:6d:cb:
5d:71:a9:df:d4:29:b5:ee:4e:f5:c2:b2:5f:fb:7a:e4:01:16:
33:ba:41:4c:5a:fb:b9:88:4d:3a:75:59:d2:1c:bd:d5:0f:5f:
f7:01:89:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 20:59:52 2025 by rpki-client