Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/BeUnSf_adtXh-VhkfDRE394-45E.roa
File: BeUnSf_adtXh-VhkfDRE394-45E.roa (raw, json)
Hash identifier: CdlVH/YFG+Vq/xiitJdeNkAtG1jQLI1t5iM8bMrVFIY=
Subject key identifier: 05:E5:27:49:FF:DA:76:D5:E1:F9:58:64:7C:34:44:DF:DE:3E:E3:91
Certificate issuer: /CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Certificate serial: 01941F8C642B0FB02C93FBEAED33FF6467CA
Authority key identifier: 7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/BeUnSf_adtXh-VhkfDRE394-45E.roa
Signing time: Wed 01 Jan 2025 01:48:01 +0000
ROA not before: Wed 01 Jan 2025 01:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201634
IP address blocks: 193.228.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:64:2b:0f:b0:2c:93:fb:ea:ed:33:ff:64:67:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Validity
Not Before: Jan 1 01:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05e52749ffda76d5e1f958647c3444dfde3ee391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:12:5d:1d:c3:ec:2d:ad:a4:22:80:24:41:06:
65:bb:4f:a3:4e:48:af:0a:a2:00:6a:3b:00:58:be:
e5:92:ce:b0:ec:18:75:78:73:ce:d8:e6:1c:fe:44:
29:6b:45:84:f8:ad:eb:15:1a:d9:fa:75:c0:a9:92:
f1:cb:51:58:83:a5:b5:c5:42:33:81:a1:3b:9b:94:
41:6d:36:6b:40:bc:03:87:c5:6f:87:26:a2:c7:04:
c3:6a:8c:e7:80:5f:90:02:e6:47:5f:89:4f:0e:e6:
08:1a:dd:bd:51:47:3a:41:ef:f3:b8:72:1e:8c:8c:
8c:82:ad:bb:08:ea:20:c0:ad:21:8c:7d:43:c0:98:
35:a4:76:41:36:c2:f4:0d:42:6a:f8:5f:b0:53:25:
87:da:6a:b0:1e:30:cf:09:5a:23:7d:a8:11:ca:1f:
05:69:6b:6c:fc:65:50:7f:77:6f:71:d2:7b:03:d8:
8d:b3:d2:c0:cc:40:df:c2:54:98:dc:7f:f2:88:35:
d1:94:db:ec:59:72:50:2a:1d:b3:13:a5:27:d5:c6:
a4:ff:86:54:1b:73:a7:35:79:e7:84:61:6c:54:2e:
70:9f:20:cd:05:11:fa:a7:3c:d2:ed:73:bb:d4:08:
cd:bd:c8:5e:fd:93:a1:a5:ac:ab:94:47:05:09:64:
7b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E5:27:49:FF:DA:76:D5:E1:F9:58:64:7C:34:44:DF:DE:3E:E3:91
X509v3 Authority Key Identifier:
keyid:7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/BeUnSf_adtXh-VhkfDRE394-45E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.90.0/24
Signature Algorithm: sha256WithRSAEncryption
47:7c:f7:b1:ec:ce:54:26:79:c0:2f:18:04:a5:5a:ad:f6:93:
e5:c2:25:02:ef:ff:10:71:50:9c:bc:9b:ec:81:89:3f:3e:7a:
9e:15:42:4c:ee:2b:37:b7:ca:c9:64:d2:1d:95:aa:62:3f:f1:
7f:4b:cc:eb:ff:0d:70:57:bd:54:51:00:6c:8b:39:41:ca:08:
9f:3d:81:10:f6:db:d8:30:b2:cc:31:83:92:e8:c9:85:cb:7e:
b2:6e:86:d4:8e:36:63:c5:3e:31:a6:d7:4b:5d:47:19:f7:c0:
02:2a:33:76:17:80:13:99:b3:ef:00:b3:e3:8e:3b:6e:9b:32:
35:34:24:93:e3:56:36:7c:3d:4e:50:01:e3:af:34:00:3e:74:
d4:80:68:d6:a8:22:dd:7a:e8:59:c4:5a:99:c5:dd:45:97:69:
ea:6d:1b:aa:9f:09:50:05:7e:b2:d4:52:00:a2:a8:79:c1:f0:
f8:73:92:f3:39:9d:b1:1a:43:4b:99:3f:83:b9:77:5f:90:03:
91:e8:25:4c:80:34:b1:db:c0:a2:dd:0f:76:53:7c:e1:49:22:
6b:60:05:7f:d4:d6:f6:9e:dd:75:78:59:24:12:b5:60:b5:09:
29:1b:1c:8d:66:e6:1f:1e:9e:c3:b1:66:1d:4b:45:61:b7:52:
fb:fa:21:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:25:51 2025 by rpki-client