Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/bXG0GOoD81HOxWPjM9UhIty_ee0.roa
File: bXG0GOoD81HOxWPjM9UhIty_ee0.roa (raw, json)
Hash identifier: mmMBtet64hPrKMhcTVqesrRFLaGci6KJ3hFnS33cvrI=
Subject key identifier: 6D:71:B4:18:EA:03:F3:51:CE:C5:63:E3:33:D5:21:22:DC:BF:79:ED
Certificate issuer: /CN=6638515f32944969ae0031bde02d1f4cbd0d2b98
Certificate serial: 0195A9E015E9C4783838AF66B1F7237B4695
Authority key identifier: 66:38:51:5F:32:94:49:69:AE:00:31:BD:E0:2D:1F:4C:BD:0D:2B:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/bXG0GOoD81HOxWPjM9UhIty_ee0.roa
Signing time: Tue 18 Mar 2025 15:29:49 +0000
ROA not before: Tue 18 Mar 2025 15:29:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 22351
IP address blocks: 83.170.128.0/19 maxlen: 19
83.170.160.0/21 maxlen: 21
83.170.176.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a9:e0:15:e9:c4:78:38:38:af:66:b1:f7:23:7b:46:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6638515f32944969ae0031bde02d1f4cbd0d2b98
Validity
Not Before: Mar 18 15:29:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d71b418ea03f351cec563e333d52122dcbf79ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5b:94:e6:da:fd:a7:d9:89:d1:ef:63:07:5e:
61:b4:dc:73:a7:6f:a5:39:dd:41:48:a5:cc:57:7b:
5a:cb:ae:fb:0b:0d:4e:9a:d1:ec:19:92:88:e0:8b:
f2:ab:f2:56:50:0f:6c:00:dc:4a:6d:a1:7d:a4:20:
0c:47:3a:00:19:35:22:bf:2a:ef:43:c8:f0:87:ab:
9f:62:70:60:97:5c:43:a1:2f:13:8d:07:35:a6:1e:
65:2a:78:1d:8b:f2:9b:25:fa:ee:e6:c9:05:ba:b1:
09:2f:d6:6c:fb:67:a0:cc:75:81:ca:81:6c:75:3b:
74:7a:4d:03:ca:81:5f:23:98:dd:a4:47:ce:e6:5f:
4e:d1:2b:ee:22:a7:af:78:d7:7e:af:ce:b0:2d:d8:
4e:84:2f:86:f1:24:21:51:68:4f:50:4f:5d:11:26:
1b:74:cf:b6:33:13:21:af:77:b5:52:98:bd:05:1e:
ea:1f:be:24:18:06:c1:f3:03:c7:4b:fc:55:a4:41:
93:f3:6e:69:c7:85:f5:93:5d:d5:60:ae:d4:a3:e7:
bf:1e:00:1e:49:08:89:f8:37:fa:51:87:7c:ef:f8:
e8:55:78:20:9f:16:ef:04:99:f0:36:3f:cd:41:4f:
4a:7f:51:43:c3:45:46:31:b7:c2:89:0b:62:a6:50:
f8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:71:B4:18:EA:03:F3:51:CE:C5:63:E3:33:D5:21:22:DC:BF:79:ED
X509v3 Authority Key Identifier:
keyid:66:38:51:5F:32:94:49:69:AE:00:31:BD:E0:2D:1F:4C:BD:0D:2B:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/bXG0GOoD81HOxWPjM9UhIty_ee0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.170.128.0-83.170.167.255
83.170.176.0/20
Signature Algorithm: sha256WithRSAEncryption
00:3d:66:ea:80:f9:58:77:e2:fe:f4:4d:c2:53:83:c4:a2:95:
2a:8b:be:d8:f1:04:0f:67:5c:08:5c:14:9c:a1:c0:e7:f6:97:
c5:99:7f:2f:74:4c:e6:d0:9a:81:8c:21:6c:e1:5d:3b:f2:5c:
72:92:66:89:51:86:bb:fc:1c:5c:81:1c:ff:7c:44:b3:97:a7:
3f:25:08:dc:1f:92:33:35:21:3a:0a:23:ee:17:37:4b:25:71:
2d:76:cc:cf:9d:db:65:52:35:eb:23:5c:6d:4b:69:96:36:3e:
1a:21:df:4d:8a:b0:30:de:8c:4a:50:7a:f3:4e:ae:74:d6:e7:
34:db:48:8e:5f:ad:46:0b:d3:83:96:90:62:3d:75:2a:a9:9a:
7b:bf:2f:ca:63:13:6a:94:8d:61:a0:5d:fa:f7:da:81:39:7b:
9f:24:8c:20:4b:52:f5:9d:21:f1:f4:f2:e8:93:bf:e3:4c:53:
f8:7e:7e:ac:0e:e2:6b:93:95:e2:a1:80:ff:4d:0d:ed:38:ab:
5b:5b:24:fa:d2:2a:b8:2f:c9:29:28:a7:66:2e:1d:56:7f:d0:
44:8b:b4:37:05:37:70:9f:30:8a:63:3a:d9:e0:e1:34:04:15:
33:62:5d:87:c0:20:53:3f:f9:ae:3e:66:ef:26:a8:2b:ad:d0:
50:ed:14:c2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 12 05:01:44 2025 by rpki-client