Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/Bn1M99Q5tBtvDTvfZYaWs9lGXls.roa
File: Bn1M99Q5tBtvDTvfZYaWs9lGXls.roa (raw, json)
Hash identifier: UYAuM2HQAJGmsbB/aQecotRTuL+/vxYhXSj3RQuXtrM=
Subject key identifier: 06:7D:4C:F7:D4:39:B4:1B:6F:0D:3B:DF:65:86:96:B3:D9:46:5E:5B
Certificate issuer: /CN=223087b337f7476c8d6304aeb08cee057f4bf691
Certificate serial: 0196EDDCC471F695765EB198F4CE8605705D
Authority key identifier: 22:30:87:B3:37:F7:47:6C:8D:63:04:AE:B0:8C:EE:05:7F:4B:F6:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjCHszf3R2yNYwSusIzuBX9L9pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/Bn1M99Q5tBtvDTvfZYaWs9lGXls.roa
Signing time: Tue 20 May 2025 13:23:10 +0000
ROA not before: Tue 20 May 2025 13:23:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20633
IP address blocks: 185.193.228.0/22 maxlen: 22
2001:a38::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IjCHszf3R2yNYwSusIzuBX9L9pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ed:dc:c4:71:f6:95:76:5e:b1:98:f4:ce:86:05:70:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=223087b337f7476c8d6304aeb08cee057f4bf691
Validity
Not Before: May 20 13:23:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=067d4cf7d439b41b6f0d3bdf658696b3d9465e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fb:36:b1:e5:7b:eb:31:e2:0b:2a:ce:b7:6a:
f5:2e:83:e6:02:32:1e:6b:d7:f2:96:7d:e2:a8:c8:
97:a7:ec:ef:99:2f:34:32:41:16:fe:52:d8:f3:1e:
4f:0d:60:b2:33:5c:bf:12:1a:42:c4:f9:0d:cc:17:
c1:11:44:92:98:ac:a3:7f:73:49:28:50:68:d5:d4:
52:59:d2:3e:54:b6:92:55:0f:11:65:23:b5:ca:78:
00:db:0f:59:53:c7:76:6b:3e:c0:0e:7d:9c:95:cd:
a1:9a:bf:7d:ba:0f:a5:97:90:ee:86:3c:cd:ed:40:
95:6f:5a:1a:53:4a:4f:e7:b7:75:be:ba:70:c3:c3:
a9:b6:d7:69:d4:85:96:9d:c3:43:1d:1b:90:d5:2f:
4e:e0:73:46:a3:81:44:24:5f:b7:5a:45:c8:56:8e:
1e:df:eb:f8:1f:84:76:e6:50:ef:69:30:a0:5b:54:
13:cb:c4:e1:02:d9:90:b8:03:9a:13:ed:bd:69:2c:
6f:1c:dc:3b:9f:53:63:f2:6f:c6:76:67:32:42:0b:
08:5d:07:1b:cd:20:50:ee:c3:3e:a5:1f:b8:1a:6d:
4b:1a:95:6c:a7:19:3f:9e:7d:6e:f1:5b:3c:66:81:
7c:9d:84:38:ba:f8:00:4d:c0:02:83:7b:d5:9d:24:
92:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:7D:4C:F7:D4:39:B4:1B:6F:0D:3B:DF:65:86:96:B3:D9:46:5E:5B
X509v3 Authority Key Identifier:
keyid:22:30:87:B3:37:F7:47:6C:8D:63:04:AE:B0:8C:EE:05:7F:4B:F6:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjCHszf3R2yNYwSusIzuBX9L9pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/Bn1M99Q5tBtvDTvfZYaWs9lGXls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.228.0/22
IPv6:
2001:a38::/32
Signature Algorithm: sha256WithRSAEncryption
25:18:9b:b3:c5:73:60:8d:aa:f3:4f:ff:29:0b:d3:ce:3b:5b:
c3:a9:70:f8:20:79:5c:d3:f6:8f:34:3d:e5:0b:de:d3:f9:49:
09:0b:c2:15:02:11:dc:a3:89:8b:b5:18:1e:0d:ef:b8:75:f4:
e5:11:93:23:b4:ce:42:e5:90:22:5d:b0:0a:68:33:b0:74:4f:
b3:6b:59:6b:b3:3f:3e:44:80:3c:4d:a2:80:64:35:d2:38:96:
43:3f:e2:bd:27:7c:2b:9c:7d:4f:35:e6:eb:6b:96:29:8b:e5:
90:19:db:ec:a5:83:02:c1:e7:3d:73:2f:fa:8b:71:00:c7:1a:
34:1d:a3:14:ab:d5:ff:b3:7d:45:f6:73:40:bd:38:8c:8c:08:
97:bd:a3:7f:56:8b:ce:0d:e8:aa:ac:fb:91:79:ba:da:a0:df:
68:be:d2:b3:a8:51:de:f3:37:8f:e4:dd:12:32:ae:a4:e8:b6:
b3:b6:19:44:45:7c:ca:a8:a7:ed:2b:97:5d:90:f2:bd:36:de:
5f:b3:e6:91:d1:45:4d:3d:ed:41:73:3f:b7:75:8b:5f:99:af:
ce:51:65:87:bd:95:06:56:65:ae:f9:b8:73:d4:25:af:5c:ec:
7a:0f:01:56:26:f0:d2:95:7a:f3:55:6f:d8:f7:eb:a5:d5:58:
46:fb:9a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:00:37 2025 by rpki-client