Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Bt_BJ_rJvQ-dhFs_SCmV1G3Ogsk.roa
File: Bt_BJ_rJvQ-dhFs_SCmV1G3Ogsk.roa (raw, json)
Hash identifier: MRBJocdcxttyraiCxJuRCmX4CgQbJJdUodQ85Hkwc4U=
Subject key identifier: 06:DF:C1:27:FA:C9:BD:0F:9D:84:5B:3F:48:29:95:D4:6D:CE:82:C9
Certificate issuer: /CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Certificate serial: 019427B3DA013E12FE2B6E782CC23F61A541
Authority key identifier: 43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Bt_BJ_rJvQ-dhFs_SCmV1G3Ogsk.roa
Signing time: Thu 02 Jan 2025 15:48:05 +0000
ROA not before: Thu 02 Jan 2025 15:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 17819
IP address blocks: 57.250.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:da:01:3e:12:fe:2b:6e:78:2c:c2:3f:61:a5:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Validity
Not Before: Jan 2 15:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06dfc127fac9bd0f9d845b3f482995d46dce82c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c5:ba:54:38:04:48:07:61:db:42:03:cb:6f:
ef:0f:29:3d:e2:a7:21:d4:a0:1b:1a:ee:76:30:63:
1d:1b:8a:c2:10:5a:35:17:53:84:73:d6:9a:42:60:
39:a2:37:8d:7a:fe:21:4a:17:30:5e:04:57:d2:c8:
4a:e2:fe:dc:18:44:cd:12:b9:76:f0:1c:62:37:b9:
af:64:92:aa:af:8e:4b:8c:ce:ef:fc:91:30:7d:8e:
29:d2:17:91:0f:a0:4d:25:45:59:4d:60:ef:23:e0:
0b:d6:03:7f:f9:57:2d:c4:e3:ce:0f:a4:dd:1a:12:
1a:0e:01:c0:b4:6f:7b:fe:13:44:08:5e:ee:fc:2f:
f3:70:fc:b5:de:14:a5:12:7e:c5:50:5a:fc:84:35:
73:02:f5:be:00:9c:72:e2:42:36:b4:42:c5:b6:6d:
a2:0d:39:ff:0c:08:55:c2:87:b4:0e:7d:0c:96:47:
40:81:3f:86:86:8a:b5:a7:e4:16:2e:9f:e1:22:7a:
ea:3b:6a:eb:75:39:bc:bc:cc:27:63:14:82:71:a8:
ce:be:87:c0:55:25:0f:14:77:3c:ad:c7:de:0b:4b:
4b:0c:27:57:01:12:ce:48:2b:32:af:95:c4:55:eb:
a5:88:ed:d0:f8:b4:79:41:56:ed:dc:f8:e8:fb:9a:
dc:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:DF:C1:27:FA:C9:BD:0F:9D:84:5B:3F:48:29:95:D4:6D:CE:82:C9
X509v3 Authority Key Identifier:
keyid:43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Bt_BJ_rJvQ-dhFs_SCmV1G3Ogsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.250.50.0/24
Signature Algorithm: sha256WithRSAEncryption
91:be:d8:35:4c:51:0e:c9:68:3d:9f:da:57:68:1d:1e:56:fd:
20:79:78:61:6d:d9:f2:84:2c:27:0d:f7:65:e7:c3:0c:3c:f0:
cd:63:8f:c0:e6:f4:66:29:a0:81:cd:92:83:38:af:a1:33:95:
d3:e2:f5:d0:53:7a:95:14:ec:9e:bf:b3:ca:bd:79:39:86:24:
6f:09:9b:19:c0:c3:2c:34:d2:94:c8:39:36:a3:5a:f9:5c:c5:
f4:15:e8:4e:3d:1f:e5:d9:fb:b7:db:17:b0:be:90:07:65:66:
37:97:4f:c1:f0:ff:16:23:27:e7:49:5b:31:b1:91:af:aa:ab:
44:68:9c:7e:39:c6:f0:7d:b7:02:40:2f:d4:ed:63:c4:e7:a9:
2f:fb:ff:f1:4d:8b:ff:8b:a8:8e:82:ce:c4:58:51:f5:d4:25:
d8:8f:88:b8:f4:67:db:a6:d9:69:9f:9f:75:ba:0a:0d:9c:2f:
f3:36:19:af:63:cc:ad:44:aa:f8:db:05:b5:b9:4a:25:9a:02:
89:15:cc:f1:e8:9f:e3:49:b3:54:54:4b:ab:e0:2e:08:25:f7:
90:62:c8:9e:5f:2a:46:8f:a6:db:fa:dd:3a:5d:5c:cc:d5:8d:
2f:bf:12:b6:75:27:9d:45:a7:f9:73:a0:c0:33:f1:9b:32:f3:
da:76:5d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:12:15 2025 by rpki-client