Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/BS790JJGQ7DZlNZUL_em5Su64B4.roa
File: BS790JJGQ7DZlNZUL_em5Su64B4.roa (raw, json)
Hash identifier: VVqWBTRMk3+7j4zbJrp8La5lSHjcZGiKvxZueV8Sl7A=
Subject key identifier: 05:2E:FD:D0:92:46:43:B0:D9:94:D6:54:2F:F7:A6:E5:2B:BA:E0:1E
Certificate issuer: /CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841
Certificate serial: 019426D9D936955F6AB8928F8EB7BC0F5F58
Authority key identifier: E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/BS790JJGQ7DZlNZUL_em5Su64B4.roa
Signing time: Thu 02 Jan 2025 11:49:58 +0000
ROA not before: Thu 02 Jan 2025 11:49:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3303
IP address blocks: 185.31.180.0/22 maxlen: 23
2a00:bf60::/32 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:d9:36:95:5f:6a:b8:92:8f:8e:b7:bc:0f:5f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841
Validity
Not Before: Jan 2 11:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=052efdd0924643b0d994d6542ff7a6e52bbae01e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:93:a9:ee:b2:37:2c:5e:94:f5:8d:6a:89:98:
40:d1:fc:fa:f7:42:05:6a:28:86:ed:ca:af:9f:d5:
2e:27:9d:81:2a:5c:eb:48:52:80:65:22:e7:8f:51:
26:a0:3d:63:cf:f5:e1:6a:17:e4:32:0c:3f:3e:eb:
64:f0:97:eb:a2:7d:5d:ca:8f:ec:da:5e:8d:81:60:
d8:8a:fb:7e:b0:80:cf:a8:f9:e7:7e:17:de:ee:17:
25:23:7a:80:89:c9:0e:bc:a9:56:90:71:c9:33:8f:
0b:51:5e:f1:5e:3b:70:d1:3e:f7:5b:38:40:65:ee:
8e:d3:4e:f0:15:82:40:f0:29:7c:fc:52:b3:d8:3e:
15:fe:e2:e1:a1:ca:d6:8d:b0:8a:60:f9:0e:27:c2:
ae:f0:76:fb:39:ef:f3:9d:59:4d:04:9a:e8:77:0e:
f9:76:20:40:77:99:6a:89:f1:2d:5a:ee:3b:b9:fb:
2c:e2:dc:1d:75:1b:7a:a1:54:8f:81:2d:b3:9b:f1:
7e:61:34:57:23:b3:c2:00:56:2c:40:ce:e2:9d:51:
7e:67:1b:d3:e7:22:62:b8:67:00:ca:d0:03:d5:15:
b3:6c:b3:3e:16:13:2e:69:b0:fd:49:b9:b7:93:08:
f7:d1:ee:45:65:f1:b4:a6:00:09:c4:63:11:56:b9:
8f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:2E:FD:D0:92:46:43:B0:D9:94:D6:54:2F:F7:A6:E5:2B:BA:E0:1E
X509v3 Authority Key Identifier:
keyid:E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/BS790JJGQ7DZlNZUL_em5Su64B4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.31.180.0/22
IPv6:
2a00:bf60::/32
Signature Algorithm: sha256WithRSAEncryption
78:21:01:e1:d3:50:70:fe:df:fd:fc:14:36:d4:e6:99:9d:09:
fe:ef:f1:e8:f6:9d:9c:c8:77:70:4a:e3:10:c6:32:37:93:ba:
2b:0e:f9:be:1d:1b:13:1c:b1:56:66:19:6f:6a:6a:e8:bc:a5:
98:19:72:8f:f8:3f:e3:b6:4e:92:ee:6e:fd:a7:28:f4:11:a3:
61:26:08:12:04:9a:03:3b:e9:d1:59:c7:61:fc:fe:1e:ca:6c:
d2:27:2f:f4:d9:e3:a1:fe:de:a2:6a:9b:b9:81:fa:ea:fe:1d:
38:ae:30:05:04:08:1b:2e:39:c0:13:62:cf:ab:bf:05:b3:97:
3f:9a:e1:fe:28:b0:d1:88:8d:8a:43:23:6a:28:dd:e2:a6:26:
85:e7:70:92:3c:9a:56:5a:89:2f:ef:eb:31:da:f4:78:25:8f:
fd:cd:b1:16:69:a3:85:32:2f:20:d9:c9:0f:cd:05:a6:bf:4e:
e6:39:da:17:de:92:5c:34:ef:04:8e:d5:b8:92:bb:e8:ae:a4:
ef:12:6f:c0:6e:84:fd:ef:ad:8c:95:f3:a4:5e:3f:6a:4d:ca:
1f:b5:a1:ab:01:9d:cb:6a:84:8d:30:c0:b3:68:72:81:22:29:
f5:91:b9:15:ef:c0:90:3a:35:1f:c9:8b:2b:22:74:fd:31:23:
11:12:5f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:36:48 2025 by rpki-client