Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BzHQfPidKy3DINJ-NPMBD-frses.roa
File: BzHQfPidKy3DINJ-NPMBD-frses.roa (raw, json)
Hash identifier: ODa7TZOfiSPJuCn1Ypujhq3enfYh+zkbZ4whhhEUMLA=
Subject key identifier: 07:31:D0:7C:F8:9D:2B:2D:C3:20:D2:7E:34:F3:01:0F:E7:EB:B1:EB
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 01942828249E621B582EFA9FFA5A9E267764
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BzHQfPidKy3DINJ-NPMBD-frses.roa
Signing time: Thu 02 Jan 2025 17:55:06 +0000
ROA not before: Thu 02 Jan 2025 17:55:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198868
IP address blocks: 84.242.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:24:9e:62:1b:58:2e:fa:9f:fa:5a:9e:26:77:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 17:55:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0731d07cf89d2b2dc320d27e34f3010fe7ebb1eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:13:a2:06:a5:31:d2:dd:bf:76:08:6c:6c:df:
d8:1f:78:99:75:f1:11:49:70:a6:2c:ea:91:28:70:
f0:ce:51:66:8e:6a:f8:95:e4:65:bd:7c:88:ff:f0:
84:ee:1f:33:dd:6f:98:2a:28:6a:f6:c2:cd:f8:b0:
77:41:2c:75:95:16:14:83:3a:6b:bd:3d:45:22:b5:
45:0f:7a:ac:af:c2:55:51:f4:29:8a:1a:f3:cd:11:
73:d8:86:6a:81:08:ec:c3:56:5b:06:bc:a4:8d:f4:
36:2a:c9:33:03:ba:88:4b:5f:bf:d5:49:04:32:2c:
c3:ce:66:be:86:64:be:b9:0c:27:0a:25:a7:78:61:
64:13:d6:13:98:06:6c:f4:fe:84:96:44:ad:01:a2:
40:90:e5:ee:7f:34:ad:19:8a:cb:cf:4a:e0:f2:e6:
a6:f0:05:2c:6b:d0:91:41:07:22:ae:18:2b:b3:f1:
f9:64:e8:cb:27:0d:71:f8:2f:4d:0e:7f:f4:db:89:
74:8c:fd:ea:2c:6d:cb:43:3d:24:b2:17:9c:4c:c9:
af:1b:e4:71:22:22:95:f9:bf:0b:f8:99:9a:48:55:
e3:bf:ce:b0:6f:97:d4:ea:16:82:59:86:22:a9:d2:
03:4a:f4:c9:4d:ac:89:d9:94:40:ff:eb:e9:1a:7a:
1a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:31:D0:7C:F8:9D:2B:2D:C3:20:D2:7E:34:F3:01:0F:E7:EB:B1:EB
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BzHQfPidKy3DINJ-NPMBD-frses.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.242.130.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:f6:99:ea:2b:f9:72:97:f0:63:d3:a9:47:5a:d4:04:17:ce:
13:59:da:d5:4e:9d:81:a3:9c:63:ea:b1:90:85:6e:56:e0:8c:
c3:74:ae:88:25:7a:1b:36:99:71:a1:9d:4f:a6:51:29:ab:45:
4e:89:14:57:48:fc:dc:22:09:bc:3c:a8:32:9c:73:97:e1:f3:
29:b2:41:c7:4d:0b:db:a3:eb:54:cd:ca:8f:c9:9a:a8:4c:44:
df:cf:7d:44:40:31:8c:79:62:84:27:94:84:02:8a:c3:8e:e6:
89:73:73:cc:ff:f2:55:c3:8b:9b:4c:4d:b3:99:7f:1b:29:92:
a1:8e:d1:e0:80:76:78:ae:1a:63:9b:69:f2:47:45:dc:38:41:
bb:2b:74:4b:a3:db:1f:8b:54:e7:f8:d9:43:47:94:d5:4a:5c:
03:5c:b1:d4:ac:50:24:33:bb:7c:e5:9a:ff:ec:ee:44:fa:3e:
3a:ba:d8:d0:65:5a:80:d9:e6:8a:04:1d:ac:78:64:59:9e:bf:
cc:7b:19:88:2b:ba:7b:b1:9d:db:b8:c1:3a:92:cc:62:22:0e:
b0:a3:38:ef:62:02:ec:6b:9d:f5:84:84:26:18:11:cc:7c:c4:
6b:05:92:59:17:59:7c:4f:64:1c:e6:5e:36:53:a8:5c:87:6e:
99:96:05:cd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoKCSeYhtYLvqf+lqeJndkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj
ZDgyZWMwHhcNMjUwMTAyMTc1NTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzMxZDA3Y2Y4OWQyYjJkYzMyMGQyN2UzNGYzMDEwZmU3ZWJiMWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshOiBqUx0t2/dghsbN/YH3iZdfER
SXCmLOqRKHDwzlFmjmr4leRlvXyI//CE7h8z3W+YKihq9sLN+LB3QSx1lRYUgzpr
vT1FIrVFD3qsr8JVUfQpihrzzRFz2IZqgQjsw1ZbBrykjfQ2KskzA7qIS1+/1UkE
MizDzma+hmS+uQwnCiWneGFkE9YTmAZs9P6ElkStAaJAkOXufzStGYrLz0rg8uam
8AUsa9CRQQcirhgrs/H5ZOjLJw1x+C9NDn/024l0jP3qLG3LQz0kshecTMmvG+Rx
IiKV+b8L+JmaSFXjv86wb5fU6haCWYYiqdIDSvTJTayJ2ZRA/+vpGnoagwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAcx0Hz4nSstwyDSfjTzAQ/n67HrMB8GA1UdIwQY
MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt
N2ZiYmFlNmY5NDM3LzEvQnpIUWZQaWRLeTNESU5KLU5QTUJELWZyc2VzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3
LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVPKCMA0G
CSqGSIb3DQEBCwUAA4IBAQBt9pnqK/lyl/Bj06lHWtQEF84TWdrVTp2Bo5xj6rGQ
hW5W4IzDdK6IJXobNplxoZ1PplEpq0VOiRRXSPzcIgm8PKgynHOX4fMpskHHTQvb
o+tUzcqPyZqoTETfz31EQDGMeWKEJ5SEAorDjuaJc3PM//JVw4ubTE2zmX8bKZKh
jtHggHZ4rhpjm2nyR0XcOEG7K3RLo9sfi1Tn+NlDR5TVSlwDXLHUrFAkM7t85Zr/
7O5E+j46utjQZVqA2eaKBB2seGRZnr/MexmIK7p7sZ3buME6ksxiIg6wozjvYgLs
a531hIQmGBHMfMRrBZJZF1l8T2Qc5l42U6hch26ZlgXN
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:58:33 2025 by rpki-client