Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/BFaJClF3p4qT7dCc22lWmwjl7l0.roa
File: BFaJClF3p4qT7dCc22lWmwjl7l0.roa (raw, json)
Hash identifier: 8kW6E4fmgwFFVui51mNwFwgDzJW114zoN23nienu6x8=
Subject key identifier: 04:56:89:0A:51:77:A7:8A:93:ED:D0:9C:DB:69:56:9B:08:E5:EE:5D
Certificate issuer: /CN=a600fc96404289ac58b61047ddf862187f5ab27e
Certificate serial: 0194258F0C25459E6BE817163951679CB69A
Authority key identifier: A6:00:FC:96:40:42:89:AC:58:B6:10:47:DD:F8:62:18:7F:5A:B2:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgD8lkBCiaxYthBH3fhiGH9asn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/BFaJClF3p4qT7dCc22lWmwjl7l0.roa
Signing time: Thu 02 Jan 2025 05:48:39 +0000
ROA not before: Thu 02 Jan 2025 05:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198024
IP address blocks: 31.172.152.0/21 maxlen: 21
37.44.48.0/21 maxlen: 21
185.59.116.0/22 maxlen: 22
185.127.60.0/22 maxlen: 22
185.127.84.0/22 maxlen: 22
185.227.44.0/22 maxlen: 22
2a03:7b80::/32 maxlen: 32
2a06:c780::/29 maxlen: 29
2a06:c840::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgD8lkBCiaxYthBH3fhiGH9asn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:0c:25:45:9e:6b:e8:17:16:39:51:67:9c:b6:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a600fc96404289ac58b61047ddf862187f5ab27e
Validity
Not Before: Jan 2 05:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0456890a5177a78a93edd09cdb69569b08e5ee5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d6:fe:af:85:c6:0e:40:1a:2b:e7:c7:01:88:
76:77:34:c3:4d:16:95:47:79:5c:bd:10:f3:af:ff:
cb:7d:c1:1f:bd:a3:ea:64:de:b5:fa:1f:a2:71:ad:
55:99:8f:81:6d:10:3c:b4:5a:7d:fb:fa:40:5b:b9:
83:11:16:25:af:36:56:c3:e2:38:a3:b4:f3:20:02:
41:44:6b:0b:ff:f6:70:64:d9:b3:2e:f1:97:17:87:
86:43:51:6c:97:34:57:25:0c:fa:f9:a6:c9:19:0d:
5f:39:4f:e0:ac:b2:13:6d:7d:9d:2f:43:9f:48:27:
10:61:56:b6:fb:bf:75:41:30:fa:9a:d1:19:d0:e6:
19:9c:17:81:11:34:d6:69:e9:ba:18:6e:ed:63:26:
d9:98:06:0f:1e:29:31:2d:fb:cc:1a:5b:88:80:f3:
be:0b:83:36:43:15:b3:1d:2d:ca:88:30:bb:e9:44:
01:b9:87:d9:89:f0:98:5e:a0:dd:12:27:9f:b4:04:
34:14:ea:aa:fc:b3:b9:11:c9:85:46:33:d9:37:4b:
80:81:40:70:29:27:9b:a4:66:02:ed:67:33:61:b8:
b7:7a:77:44:18:40:0d:75:bc:ed:6b:e5:ce:42:01:
00:b5:46:cb:77:7a:3e:53:33:fc:af:d4:71:8a:ee:
f8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:56:89:0A:51:77:A7:8A:93:ED:D0:9C:DB:69:56:9B:08:E5:EE:5D
X509v3 Authority Key Identifier:
keyid:A6:00:FC:96:40:42:89:AC:58:B6:10:47:DD:F8:62:18:7F:5A:B2:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgD8lkBCiaxYthBH3fhiGH9asn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/BFaJClF3p4qT7dCc22lWmwjl7l0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.152.0/21
37.44.48.0/21
185.59.116.0/22
185.127.60.0/22
185.127.84.0/22
185.227.44.0/22
IPv6:
2a03:7b80::/32
2a06:c780::/29
2a06:c840::/29
Signature Algorithm: sha256WithRSAEncryption
7d:31:b5:96:9d:fa:bc:90:61:63:8e:70:94:82:c9:a5:ba:02:
80:5d:bb:0d:ee:d5:f5:4a:4b:1e:3d:68:61:36:e6:3c:fd:a2:
3e:56:30:86:9b:65:a8:4e:24:5f:e3:54:f2:60:a9:8b:3f:ad:
de:73:8b:95:bc:a8:f0:9f:4f:bb:85:7f:48:cf:cf:dc:04:e5:
ce:20:28:ef:e0:bb:5f:f3:32:cf:bb:8a:92:de:c2:d5:51:7f:
d6:59:9a:5d:59:e6:e9:98:0c:2a:27:37:bc:50:9f:32:74:1a:
ad:4c:68:3a:2b:0a:d1:61:19:19:c2:3e:e5:43:34:42:ae:96:
3a:45:4a:0c:92:d4:c0:32:03:73:3a:0c:49:5b:b0:9f:8f:82:
1f:68:52:a4:cd:cc:d0:f1:65:91:44:e6:8c:b1:d5:20:48:1b:
34:a2:57:55:57:c6:d3:22:1d:e1:c4:79:34:52:f7:6a:98:09:
17:87:5d:94:ad:04:6d:07:49:a8:fc:2c:96:bf:a5:fa:cf:60:
28:db:78:ef:4f:f1:09:c7:6f:db:6b:e3:3c:8e:31:29:c1:4b:
8e:df:f8:1f:54:86:f7:46:38:62:ed:dc:09:ba:4a:18:ab:dc:
bb:1e:d4:d0:2f:2a:ea:10:d2:91:b4:4e:43:8f:33:92:aa:83:
24:15:31:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 09:48:37 2025 by rpki-client