Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/bXAo7mVEmX8iLg6GBEHUZO92vHY.roa
File: bXAo7mVEmX8iLg6GBEHUZO92vHY.roa (raw, json)
Hash identifier: VzCJRz8Ej6xsupU4wBQwIcnAcaQ/S8QtaCA4CMwW82M=
Subject key identifier: 6D:70:28:EE:65:44:99:7F:22:2E:0E:86:04:41:D4:64:EF:76:BC:76
Certificate issuer: /CN=e52d8b5cba7c2d2b8af046eb7f310105ac0c09ac
Certificate serial: 0194DF004EA97ED61FC6ADFD58BC6DE331A3
Authority key identifier: E5:2D:8B:5C:BA:7C:2D:2B:8A:F0:46:EB:7F:31:01:05:AC:0C:09:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5S2LXLp8LSuK8EbrfzEBBawMCaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/bXAo7mVEmX8iLg6GBEHUZO92vHY.roa
Signing time: Fri 07 Feb 2025 06:02:06 +0000
ROA not before: Fri 07 Feb 2025 06:02:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44152
IP address blocks: 185.19.172.0/22 maxlen: 32
185.59.248.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5S2LXLp8LSuK8EbrfzEBBawMCaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:df:00:4e:a9:7e:d6:1f:c6:ad:fd:58:bc:6d:e3:31:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e52d8b5cba7c2d2b8af046eb7f310105ac0c09ac
Validity
Not Before: Feb 7 06:02:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d7028ee6544997f222e0e860441d464ef76bc76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:97:6f:29:85:fb:27:92:b9:d4:48:5d:07:c4:
36:e5:16:ae:5a:d1:51:bb:15:c8:b4:75:4c:77:3f:
f2:0d:7a:3a:a0:b0:fb:3a:d2:9a:98:c9:40:c1:07:
22:76:e6:33:97:00:2e:fc:4a:72:c2:21:22:2f:b6:
6c:ba:4f:8a:01:66:5d:2f:bb:ae:2f:a3:c4:53:77:
87:6b:74:c6:83:5a:5f:7c:bc:88:61:a7:33:1c:64:
37:96:e1:69:59:36:bc:7b:12:0e:95:ec:8b:af:bf:
69:55:e5:b9:4f:97:28:30:31:19:a7:a6:5d:e4:cc:
e4:6e:de:31:4a:f5:86:46:99:17:1a:5f:b2:36:84:
08:40:fc:d0:9b:83:2f:93:df:3a:f0:db:17:06:3b:
51:9e:7c:b9:7e:34:9b:01:eb:50:ef:57:ac:87:18:
7c:49:05:eb:ef:f7:15:b1:05:b6:66:d1:e0:5b:60:
dc:fa:71:13:11:d4:8e:b9:b8:69:21:1b:e6:82:13:
dd:01:aa:5f:50:af:ed:fb:2c:7c:21:65:55:dc:2d:
08:17:8e:f4:11:3d:1c:d4:b0:52:f2:2c:b1:e8:c2:
ed:a6:64:01:7f:37:fd:fd:de:35:b2:d0:27:7c:83:
fa:5f:b1:9a:84:cc:92:25:fd:bc:03:e5:a8:3c:2d:
16:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:70:28:EE:65:44:99:7F:22:2E:0E:86:04:41:D4:64:EF:76:BC:76
X509v3 Authority Key Identifier:
keyid:E5:2D:8B:5C:BA:7C:2D:2B:8A:F0:46:EB:7F:31:01:05:AC:0C:09:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5S2LXLp8LSuK8EbrfzEBBawMCaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/bXAo7mVEmX8iLg6GBEHUZO92vHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.19.172.0/22
185.59.248.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:23:9e:be:99:c8:39:02:d4:12:36:e1:1b:47:e7:1d:be:a2:
62:e9:48:72:9a:c3:35:d2:7f:1b:f3:0d:22:63:31:ac:a7:5b:
f0:18:bf:5e:c0:03:4f:94:c4:6a:aa:1e:85:5f:e1:8a:6f:cf:
f1:5b:65:e5:da:5d:04:e5:6b:3b:54:74:b5:70:24:be:e2:2b:
61:36:16:63:d3:46:d4:90:e8:44:b5:0e:52:b8:73:a4:79:a5:
12:d5:d9:ce:63:17:c9:9d:d3:b2:5a:a9:b7:9f:6c:1a:13:56:
ae:ca:84:95:4b:f4:79:01:63:83:de:81:45:92:47:f7:1a:75:
8d:11:fb:65:7a:67:fc:ac:b8:7f:4a:b7:b2:33:89:12:7e:c8:
7e:f8:d1:b5:33:98:ef:d1:f3:8d:11:bc:be:24:7c:99:81:95:
f8:01:cb:c0:01:da:db:e9:9b:49:b4:e2:48:2d:f8:f6:be:41:
8e:a0:47:3e:d7:89:b6:48:dd:bb:4e:c2:ea:3b:93:26:03:54:
38:27:7c:e6:ed:9a:01:8f:74:49:5f:44:e1:72:60:78:5d:08:
72:e9:9d:06:67:33:18:de:15:f0:a4:c1:b5:b6:4a:52:fd:1b:
28:38:39:f8:4a:3e:b2:73:6e:95:0b:dc:14:13:8f:2f:0c:da:
20:cb:59:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:13:58 2025 by rpki-client