Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/bkuVFSmwR5rEQDdMTdBk_JXXGss.roa
File: bkuVFSmwR5rEQDdMTdBk_JXXGss.roa (raw, json)
Hash identifier: 27OhIF6o+zBfja35/NnhhZLHyv4jDAhBThs7wTkygh8=
Subject key identifier: 6E:4B:95:15:29:B0:47:9A:C4:40:37:4C:4D:D0:64:FC:95:D7:1A:CB
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 019428239C5E064BC72B11AF40A464870538
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/bkuVFSmwR5rEQDdMTdBk_JXXGss.roa
Signing time: Thu 02 Jan 2025 17:50:09 +0000
ROA not before: Thu 02 Jan 2025 17:50:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59962
IP address blocks: 87.248.140.0/24 maxlen: 24
87.248.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:9c:5e:06:4b:c7:2b:11:af:40:a4:64:87:05:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jan 2 17:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e4b951529b0479ac440374c4dd064fc95d71acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:aa:c7:6c:dd:a0:d0:a0:bc:5f:18:1c:69:61:
ea:6b:62:b1:75:70:32:5f:20:f1:a8:69:29:09:0c:
2f:2f:41:86:01:4c:62:2b:51:e8:54:c3:6e:74:08:
32:45:41:1d:d4:ca:6d:30:b4:4f:cd:ab:c0:4b:68:
fe:82:f3:c8:29:d9:ff:57:fb:79:85:d6:3d:f1:ee:
6a:3e:c6:f9:b5:8b:fe:9a:25:0c:dc:83:d7:be:39:
30:64:21:68:44:d0:35:08:c4:d4:f2:ff:ed:d6:28:
a3:50:43:2c:f8:e8:ae:98:b5:36:47:66:da:08:4d:
31:5d:2b:f1:2c:5e:ca:72:e9:06:b4:7a:1f:f0:54:
9a:f5:82:06:39:bd:3a:da:dd:9c:9e:31:a2:fc:9a:
67:c0:8b:42:f4:38:5d:4f:94:90:14:ce:0c:3a:af:
4a:99:67:a5:1f:88:7b:a2:d9:5a:eb:34:2b:cc:50:
63:ec:1d:1b:86:f8:ce:7a:c6:3a:c9:13:e4:8e:ca:
0a:78:a6:a7:32:c8:c5:16:81:58:d1:c0:67:9e:22:
e7:cf:3f:c9:f0:2f:d7:a9:98:30:b3:02:52:51:6c:
73:d5:68:d6:95:f5:21:ec:b6:9d:74:41:26:bc:9d:
70:8d:f5:97:d7:be:8f:f2:a0:f2:c5:af:89:67:c7:
94:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:4B:95:15:29:B0:47:9A:C4:40:37:4C:4D:D0:64:FC:95:D7:1A:CB
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/bkuVFSmwR5rEQDdMTdBk_JXXGss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.140.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:d5:31:29:18:51:c7:77:92:e2:08:4a:93:d3:ea:52:5f:94:
a4:b0:81:8e:6d:b6:6c:9a:4c:d9:1a:ab:21:55:29:3b:74:8e:
35:a7:d8:2c:70:2a:16:1e:01:e5:1f:45:d6:8d:1f:5a:0f:30:
72:d7:8f:47:33:49:6b:ca:da:6d:1e:b7:91:89:d0:bf:74:41:
06:d0:2a:5b:b7:bf:5e:79:34:f9:2d:2f:d8:04:79:a8:3d:19:
d2:ff:84:26:ff:15:25:90:65:8c:a9:17:8e:9b:cd:2f:05:2e:
ae:1f:bd:4a:e0:fc:5b:b8:8e:6a:32:3b:de:9d:6c:7c:3a:d4:
65:c7:a5:6b:8b:50:02:8b:99:d7:6c:7e:a1:5f:7f:55:8e:f7:
fb:bd:7c:d4:08:8b:af:8c:84:95:b1:57:81:09:6e:c5:a3:8e:
c4:7f:6a:35:e8:cf:b1:73:f3:bd:39:7c:44:be:c5:5c:67:f1:
c6:69:9f:b9:8b:61:cb:26:8c:30:53:42:b9:3c:73:c2:7e:99:
8d:ed:6c:88:df:7f:4e:cd:cf:e7:95:97:12:0f:23:94:48:a3:
0a:0a:6b:c0:d6:60:ca:a5:52:fd:76:36:9f:61:cf:c1:b9:d2:
4b:ab:0b:a0:5c:8d:0f:c9:06:f6:99:ca:d7:72:ff:49:90:51:
c7:7d:aa:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:41:42 2025 by rpki-client