Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/BESUQ_xkU05nTzj12KAAZUGhmKo.roa
File: BESUQ_xkU05nTzj12KAAZUGhmKo.roa (raw, json)
Hash identifier: 7Xnw2aMPy03aURE/fRdXc7aZMBABgAbTZnC4s2WJZfs=
Subject key identifier: 04:44:94:43:FC:64:53:4E:67:4F:38:F5:D8:A0:00:65:41:A1:98:AA
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01951A082606DCB0E13A832BD3477A5AF3AC
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/BESUQ_xkU05nTzj12KAAZUGhmKo.roa
Signing time: Tue 18 Feb 2025 17:08:16 +0000
ROA not before: Tue 18 Feb 2025 17:08:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213407
IP address blocks: 213.218.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1a:08:26:06:dc:b0:e1:3a:83:2b:d3:47:7a:5a:f3:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Feb 18 17:08:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04449443fc64534e674f38f5d8a0006541a198aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:df:35:52:57:c8:d1:11:17:6c:b7:8a:cb:dc:
82:ea:f2:5b:60:c1:35:6d:52:96:79:22:60:3a:61:
97:5f:5b:95:b4:d4:9d:2b:26:c4:22:8e:ff:fb:ec:
2a:43:48:24:88:72:59:13:6f:d6:81:fe:7d:23:18:
ed:e6:f3:03:1d:af:ac:2c:ba:d0:6f:3a:ba:03:a8:
9e:28:1f:16:41:4a:eb:6c:39:1d:3d:35:35:ea:b1:
8c:23:e7:2b:cd:2d:98:b1:12:8a:32:d8:ab:7c:de:
1c:5c:92:83:9f:84:9f:38:53:bb:34:6a:c0:1c:08:
ff:d7:31:e0:32:ad:fa:cc:19:7f:6e:19:9a:96:be:
d5:2d:fe:97:c8:b3:75:90:20:10:07:0f:d8:00:1a:
5b:0d:2d:74:75:05:54:80:b6:66:1e:c7:31:66:83:
70:ba:02:b9:4f:2a:d3:d9:98:cb:ae:e5:f5:95:f6:
04:f9:3d:97:a1:67:94:51:74:46:c6:61:f1:18:e1:
83:a5:22:99:58:ee:bd:8f:58:75:db:c2:d3:ea:4d:
b8:67:e9:60:d6:90:ad:c4:e8:ad:f9:1d:27:1d:2f:
15:c1:dc:ac:60:88:1b:8f:75:68:84:38:4c:4e:48:
d7:73:07:97:16:29:53:c0:00:e2:2c:82:8c:1f:f3:
96:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:44:94:43:FC:64:53:4E:67:4F:38:F5:D8:A0:00:65:41:A1:98:AA
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/BESUQ_xkU05nTzj12KAAZUGhmKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.218.251.0/24
Signature Algorithm: sha256WithRSAEncryption
39:4d:f8:04:a2:85:e2:4d:57:0c:27:ea:e9:ff:8a:6f:ae:8e:
24:6b:b7:6f:d1:de:60:de:c8:bb:a0:f9:70:83:6d:bf:b4:4e:
ec:6f:de:1a:d4:4e:d1:df:a3:f2:2b:8f:a7:bf:74:a6:5b:c7:
fa:68:d1:f9:ba:d4:ed:f4:15:44:51:fa:68:fc:85:f8:6a:59:
17:b6:83:d5:8f:ce:6f:76:a7:fb:c6:f9:e5:ae:9a:c9:6c:fc:
01:40:3f:50:d5:0f:a9:e3:f3:0a:25:f4:98:02:61:5a:ce:ec:
dc:22:e6:00:78:11:65:48:85:e2:52:cf:6b:89:6c:ef:47:f8:
64:35:c1:d3:b5:48:a6:66:3a:53:5c:3e:7a:1e:d0:47:e1:d1:
c1:ea:55:c1:25:dd:1f:87:e4:71:c6:b2:eb:55:07:f1:bc:39:
84:4b:05:82:f0:67:43:21:14:ec:39:da:1a:0e:51:65:2a:b2:
fe:c5:68:27:dd:bf:22:68:05:3b:40:6d:bc:f3:6c:81:3d:a8:
fd:9c:02:d6:10:0a:67:c7:04:e9:b2:ef:50:13:51:9b:49:52:
be:61:9a:67:0c:28:de:5e:87:7a:db:83:78:36:34:27:7b:82:
1e:d0:7b:7f:31:fc:e2:a3:5b:c0:d1:8a:d8:f3:c9:ee:e5:af:
a9:ea:a5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:50:58 2025 by rpki-client