Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/Bu2qohV5DT207In6bmDkzPkl22w.roa
File: Bu2qohV5DT207In6bmDkzPkl22w.roa (raw, json)
Hash identifier: yQgjgxJo0jD6Zb5Cbl39m04H6+9TPpDsNpPjtFWzK98=
Subject key identifier: 06:ED:AA:A2:15:79:0D:3D:B4:EC:89:FA:6E:60:E4:CC:F9:25:DB:6C
Certificate issuer: /CN=5e803b66b306008fb172c2dfd522b5655057360d
Certificate serial: 0194221FAF4982FE96EB16DA55FEBE349F97
Authority key identifier: 5E:80:3B:66:B3:06:00:8F:B1:72:C2:DF:D5:22:B5:65:50:57:36:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/Bu2qohV5DT207In6bmDkzPkl22w.roa
Signing time: Wed 01 Jan 2025 13:48:09 +0000
ROA not before: Wed 01 Jan 2025 13:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200851
IP address blocks: 185.243.76.0/22 maxlen: 24
2a0d:a80::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:af:49:82:fe:96:eb:16:da:55:fe:be:34:9f:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e803b66b306008fb172c2dfd522b5655057360d
Validity
Not Before: Jan 1 13:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06edaaa215790d3db4ec89fa6e60e4ccf925db6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4b:4e:94:92:90:91:b7:78:56:d0:1e:58:69:
cf:fa:4b:61:7f:65:ce:ad:12:90:dd:d1:67:9b:1a:
d4:fc:bf:65:5a:43:47:c9:76:85:03:d5:c8:88:97:
67:0c:00:95:38:4b:48:6b:c4:bb:bf:3c:37:2e:a6:
cd:40:99:24:8d:4e:ad:05:7f:7a:7e:11:da:00:37:
80:23:4a:f3:49:f1:d7:04:13:dd:d0:4f:e0:ed:af:
e9:db:41:9b:6d:fe:50:21:3b:47:75:d0:4e:d8:5c:
f6:82:01:dd:46:8c:18:45:da:14:e3:ce:01:25:d9:
2c:de:99:e0:44:be:62:b6:96:68:ff:9c:b6:a5:e9:
cc:01:0d:83:81:b8:d8:eb:d6:84:c6:83:9e:55:0d:
92:51:d8:ee:0a:8d:c7:69:56:3a:6f:d8:6f:ac:e9:
0f:de:a1:ae:7e:7d:10:23:3b:cd:72:3a:f5:a5:1f:
f0:be:8b:e9:9a:8d:54:13:23:79:13:66:81:15:8d:
76:f2:48:ad:04:9b:3f:35:b8:b2:26:d9:35:d6:18:
cd:60:6f:ee:5d:d1:75:d7:db:91:be:83:a7:20:22:
1e:73:bf:ab:04:95:d8:7d:a6:0e:d0:0c:19:bb:4f:
39:3d:12:14:3a:00:08:5c:12:bd:6c:0c:1b:f1:bf:
b7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:ED:AA:A2:15:79:0D:3D:B4:EC:89:FA:6E:60:E4:CC:F9:25:DB:6C
X509v3 Authority Key Identifier:
keyid:5E:80:3B:66:B3:06:00:8F:B1:72:C2:DF:D5:22:B5:65:50:57:36:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/Bu2qohV5DT207In6bmDkzPkl22w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.76.0/22
IPv6:
2a0d:a80::/29
Signature Algorithm: sha256WithRSAEncryption
71:20:2b:0d:b3:69:42:b3:d4:69:37:7b:8c:c2:19:ad:8c:06:
fb:7c:7d:3d:a4:8c:67:0c:8f:84:8d:db:53:8b:2a:c9:74:1e:
7f:36:64:70:31:f1:d9:53:37:84:7b:05:b4:ec:da:41:c0:28:
d3:92:35:50:2d:77:85:1f:ab:dc:04:88:c8:82:d6:f7:2f:98:
a6:b5:9e:56:76:3c:86:85:ba:e2:3a:88:a4:c2:b8:16:e2:e6:
7c:db:f5:80:74:9f:aa:88:b4:e7:c0:76:98:48:01:a2:43:d6:
4f:d9:85:10:8f:94:d5:14:a8:a2:68:ea:e1:8e:3b:63:57:b7:
80:b5:65:60:cf:4d:52:76:ad:36:db:1d:e8:65:bf:74:5c:eb:
cf:63:03:9e:7f:09:ca:c4:a8:e5:ec:ee:c2:aa:75:c6:7a:dc:
80:f8:3c:a3:35:92:b8:d9:3d:5c:e9:20:88:01:ca:94:3a:4b:
6d:2a:2e:a2:a9:9f:91:f9:bc:ce:ec:a2:2b:34:2f:e0:b8:6d:
38:d4:6e:e6:d6:81:c8:28:c9:0e:dd:55:f1:4c:67:32:da:84:
57:04:94:d2:26:42:8c:62:2b:44:19:04:8a:6c:1a:80:c9:ee:
33:47:9f:0e:cc:36:ba:dd:b8:3f:b0:33:88:d7:fa:a1:87:29:
a1:61:0e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:57 2025 by rpki-client