Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BliaGrjDAqHKNEj9Mx9veOEBPEw.roa
File: BliaGrjDAqHKNEj9Mx9veOEBPEw.roa (raw, json)
Hash identifier: Zp3YmeNzMTw4uQ2BI2h1hZyUbxrVTAnKdQaDtTTNRXE=
Subject key identifier: 06:58:9A:1A:B8:C3:02:A1:CA:34:48:FD:33:1F:6F:78:E1:01:3C:4C
Certificate issuer: /CN=04747b565844e3e2fc712fab5be85924aac58643
Certificate serial: 01942067E9B564610C8B11CC731C9B08986F
Authority key identifier: 04:74:7B:56:58:44:E3:E2:FC:71:2F:AB:5B:E8:59:24:AA:C5:86:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BliaGrjDAqHKNEj9Mx9veOEBPEw.roa
Signing time: Wed 01 Jan 2025 05:47:48 +0000
ROA not before: Wed 01 Jan 2025 05:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50392
IP address blocks: 91.237.244.0/22 maxlen: 24
176.121.13.0/24 maxlen: 24
176.121.15.0/24 maxlen: 24
193.106.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:e9:b5:64:61:0c:8b:11:cc:73:1c:9b:08:98:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04747b565844e3e2fc712fab5be85924aac58643
Validity
Not Before: Jan 1 05:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06589a1ab8c302a1ca3448fd331f6f78e1013c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ee:1f:94:2b:c5:83:f7:88:f5:eb:64:f2:17:
ad:c2:11:e4:7e:d5:c7:8e:ac:bb:2e:75:af:90:55:
e9:40:fa:ac:8d:13:7a:c0:50:f8:b5:71:90:c2:1e:
31:1a:ea:a9:ee:cc:66:2c:9a:95:fb:1e:2e:e3:13:
87:49:46:52:26:07:a3:2e:64:48:d5:4b:b7:10:99:
8c:18:07:db:a6:f3:b3:15:5d:77:a6:9d:86:ed:09:
96:a6:4c:5e:0f:a9:a0:f8:7f:0b:b2:91:30:9b:4b:
de:2c:8a:f0:6b:6e:2c:d3:22:0f:0f:63:93:45:30:
5b:e4:96:9e:d4:4b:83:d2:24:8d:4c:02:1c:1b:cb:
5f:6d:1c:91:eb:00:64:33:06:cc:39:88:3d:34:85:
ce:d6:cf:9e:97:03:a7:92:5d:23:9c:f1:6e:aa:6b:
f2:31:c5:34:33:6c:21:bc:85:72:56:e2:7a:f5:51:
f6:d8:38:eb:28:d2:fe:0f:80:89:c8:eb:76:f7:38:
35:18:10:5a:a4:da:ac:dc:d0:8b:cc:26:93:13:d0:
02:f6:5a:bb:89:fe:f0:c1:7c:bd:77:c7:b4:ac:29:
36:d6:75:f2:66:58:8c:53:89:0f:a0:17:b7:a4:12:
2a:58:5c:6d:3a:9d:08:09:64:47:d1:06:b5:62:cb:
c8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:58:9A:1A:B8:C3:02:A1:CA:34:48:FD:33:1F:6F:78:E1:01:3C:4C
X509v3 Authority Key Identifier:
keyid:04:74:7B:56:58:44:E3:E2:FC:71:2F:AB:5B:E8:59:24:AA:C5:86:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BliaGrjDAqHKNEj9Mx9veOEBPEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.244.0/22
176.121.13.0/24
176.121.15.0/24
193.106.144.0/22
Signature Algorithm: sha256WithRSAEncryption
68:c9:59:27:d2:d7:e4:f0:1d:a2:73:ed:07:57:35:7b:be:44:
24:05:76:5d:23:cf:23:c2:03:11:c6:e9:4b:7b:3c:e4:b5:94:
b2:4d:1f:5f:1e:0c:56:c9:8d:9b:14:5e:fc:e0:c1:cf:e3:06:
0e:0e:61:f0:74:1a:69:35:99:d3:0c:ca:33:04:45:b8:8e:17:
90:d2:5b:8b:e8:40:01:9c:ce:6a:24:0f:66:8a:90:78:cd:a5:
7e:bd:1c:97:c5:e7:b0:c5:0e:68:7a:01:fa:0a:63:68:f8:84:
fd:78:ef:0a:23:61:61:f8:58:ca:e0:e9:33:a4:b7:f6:12:b1:
c7:99:cb:ea:e4:91:9a:1d:f8:3c:76:8b:f7:71:04:9c:d1:7d:
6c:fe:24:44:0f:98:d9:10:29:58:e5:d7:e2:c5:02:9f:94:f3:
8d:58:7d:b0:18:34:af:08:0d:13:cb:b0:79:22:8b:20:aa:e0:
75:4a:ba:82:cd:52:1c:9a:cb:3e:13:11:a8:9b:32:76:25:fc:
3c:6a:b6:f3:98:94:4a:4d:d9:a0:01:61:2d:80:6b:51:d4:23:
4a:06:b4:74:d5:69:46:b0:b9:6a:00:d4:44:df:e5:c6:8e:10:
dd:0e:be:65:a5:e6:bd:9f:b2:c4:70:84:21:ac:f4:5f:51:a3:
ab:a2:70:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:09:50 2025 by rpki-client