Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/aJ0uGpexjSkAa27B-n72oqb3t3I.roa
File: aJ0uGpexjSkAa27B-n72oqb3t3I.roa (raw, json)
Hash identifier: H6fzloTmxNo2mJK6Qd1BL+h1srxz+hjXl3IHpHqT1Kw=
Subject key identifier: 68:9D:2E:1A:97:B1:8D:29:00:6B:6E:C1:FA:7E:F6:A2:A6:F7:B7:72
Certificate issuer: /CN=bfa5f0e76547575957bc92c6dddd084d3ea7f863
Certificate serial: 019421442D6930FF01A64FEEBCBFA03BDDBE
Authority key identifier: BF:A5:F0:E7:65:47:57:59:57:BC:92:C6:DD:DD:08:4D:3E:A7:F8:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6Xw52VHV1lXvJLG3d0ITT6n-GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/aJ0uGpexjSkAa27B-n72oqb3t3I.roa
Signing time: Wed 01 Jan 2025 09:48:23 +0000
ROA not before: Wed 01 Jan 2025 09:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60064
IP address blocks: 91.239.55.0/24 maxlen: 24
185.63.252.0/24 maxlen: 24
185.63.253.0/24 maxlen: 24
185.63.254.0/24 maxlen: 24
185.63.255.0/24 maxlen: 24
2a04:f780::/32 maxlen: 32
2a04:f781::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/v6Xw52VHV1lXvJLG3d0ITT6n-GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/v6Xw52VHV1lXvJLG3d0ITT6n-GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/v6Xw52VHV1lXvJLG3d0ITT6n-GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:2d:69:30:ff:01:a6:4f:ee:bc:bf:a0:3b:dd:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfa5f0e76547575957bc92c6dddd084d3ea7f863
Validity
Not Before: Jan 1 09:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=689d2e1a97b18d29006b6ec1fa7ef6a2a6f7b772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e5:ff:d7:56:be:77:08:0d:35:a0:40:96:e6:
33:49:61:23:54:56:13:cc:0b:2e:e6:29:d7:90:03:
61:6b:9d:26:52:ce:64:b9:ca:53:a9:2f:81:37:01:
5b:4d:03:ea:3f:27:bc:cd:b0:cd:2e:b1:37:ea:be:
cf:43:85:a4:9a:e0:a9:f2:40:32:84:0c:47:3b:76:
c4:7e:ba:a9:85:96:af:f4:8d:64:38:1b:57:0e:22:
07:b9:4c:33:e2:13:e9:ff:e2:44:54:7c:a6:7f:55:
5c:2d:91:88:92:b5:48:90:91:18:4b:51:12:74:be:
ab:d7:ca:cb:2e:99:40:d8:e0:04:b0:7b:d2:23:7d:
b5:93:b6:72:f9:ec:97:d0:61:a5:67:c3:d8:52:66:
7f:73:a8:e9:e0:3d:81:51:85:c0:a2:23:19:ee:01:
a3:ac:a5:2c:35:ce:ca:bb:2c:93:21:1a:62:da:20:
bb:95:5a:47:5d:1d:b6:4d:0e:6c:12:ab:62:ee:35:
a4:91:d1:d0:b0:c6:75:af:13:f8:bb:d2:40:f6:31:
0e:f1:60:a0:91:9b:bf:04:96:24:d2:c2:b7:e1:fe:
2c:14:be:61:51:dc:c8:73:28:8a:7e:9c:2d:7b:58:
dc:b5:59:55:2b:e0:30:7a:b0:dd:18:1c:0c:a7:26:
a8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9D:2E:1A:97:B1:8D:29:00:6B:6E:C1:FA:7E:F6:A2:A6:F7:B7:72
X509v3 Authority Key Identifier:
keyid:BF:A5:F0:E7:65:47:57:59:57:BC:92:C6:DD:DD:08:4D:3E:A7:F8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6Xw52VHV1lXvJLG3d0ITT6n-GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/aJ0uGpexjSkAa27B-n72oqb3t3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/v6Xw52VHV1lXvJLG3d0ITT6n-GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.55.0/24
185.63.252.0/22
IPv6:
2a04:f780::-2a04:f781:ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
60:17:ae:80:0c:ad:b2:12:cd:14:40:79:60:18:ec:b7:72:20:
2d:66:76:1d:65:74:04:c0:38:7f:74:04:e4:a8:12:da:45:32:
77:f8:33:bf:3a:d0:e3:4d:a0:46:31:60:d5:63:c4:03:97:ef:
74:fc:b6:f8:fb:5f:77:00:c9:4a:49:ea:40:85:cd:22:dd:76:
0f:f7:8f:93:d0:d2:87:76:9d:f4:76:63:1a:ca:f0:92:26:ad:
c7:9c:ca:61:f3:b0:26:91:c3:f9:a9:0e:0e:9f:63:e2:d3:31:
d0:97:7b:7f:a5:37:2c:c8:b3:8d:6f:86:53:6b:af:61:fb:05:
27:c0:79:22:36:45:b3:bc:fb:d9:9d:7d:cc:db:ff:26:e3:1a:
c7:6c:6f:ae:bf:fa:75:4f:1a:a9:c6:11:e5:cf:af:a0:70:38:
e3:8e:ef:59:41:49:34:f9:c2:00:8e:40:dc:4e:a6:a4:77:4f:
8a:30:e4:d2:8d:17:0b:dd:46:0b:5a:16:d7:5d:a4:fc:a4:49:
76:3d:4d:b0:99:34:04:db:5c:81:3d:d3:a4:bb:05:2c:e4:f5:
35:10:57:8f:57:cc:e9:99:d0:30:c5:ad:73:b5:b8:52:64:ae:
36:f5:eb:b1:17:58:fc:0a:ff:07:44:37:84:0b:e2:b3:ac:e4:
6c:43:88:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:00:40 2025 by rpki-client