Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/bC15MrNbvaHvc_M6-zAakBbyrww.roa
File: bC15MrNbvaHvc_M6-zAakBbyrww.roa (raw, json)
Hash identifier: w8+yaL/cYfTmT9iePHgIvZ5N3rV9yU+eea+yLs6LsB4=
Subject key identifier: 6C:2D:79:32:B3:5B:BD:A1:EF:73:F3:3A:FB:30:1A:90:16:F2:AF:0C
Certificate issuer: /CN=427a2670508b945123beecbf13145ffbd7bfcde4
Certificate serial: 0194266C069B2827DDFB74FB61EF5AD72873
Authority key identifier: 42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/bC15MrNbvaHvc_M6-zAakBbyrww.roa
Signing time: Thu 02 Jan 2025 09:50:01 +0000
ROA not before: Thu 02 Jan 2025 09:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48199
IP address blocks: 212.42.48.0/22 maxlen: 22
212.42.51.0/24 maxlen: 24
212.42.52.0/22 maxlen: 22
212.42.52.0/24 maxlen: 24
212.42.56.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:06:9b:28:27:dd:fb:74:fb:61:ef:5a:d7:28:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427a2670508b945123beecbf13145ffbd7bfcde4
Validity
Not Before: Jan 2 09:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c2d7932b35bbda1ef73f33afb301a9016f2af0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:50:d4:8c:df:60:8d:47:b3:ef:3f:fb:2a:fe:
3b:f2:2e:16:4c:4a:79:21:24:ab:fe:c6:97:e4:59:
18:5b:0c:0d:02:5c:74:e1:86:0d:02:13:cc:b3:c0:
d1:78:87:8a:4a:32:54:2e:02:d4:c4:8a:71:15:4c:
f8:90:d1:d5:8e:b1:2e:90:ab:99:a1:31:9b:9d:47:
ed:73:fd:cb:5a:ad:4d:45:ac:5f:e7:70:f3:7b:77:
95:3f:06:be:0d:ab:64:64:eb:42:76:c0:34:28:a8:
13:01:27:e5:e2:ce:40:0f:b1:76:a0:3a:71:a5:80:
35:ad:2c:fe:73:66:ae:ad:1b:32:1c:da:6a:b1:31:
cd:29:39:61:c2:41:88:dd:66:c7:97:76:9f:ed:4e:
16:8a:e3:7b:b6:54:93:90:7f:d3:3f:02:a4:0c:0a:
ae:b5:c3:e4:e6:d1:e5:ea:27:de:60:d8:29:a8:5a:
9c:8f:3a:b8:a0:53:ea:e4:6d:4a:a4:cd:9d:1c:9f:
8c:b4:3a:d3:e3:8f:92:da:26:56:c7:c7:fb:47:88:
c5:fe:4e:42:b3:a0:f0:0a:62:37:68:e8:3e:1b:4d:
1d:ee:5e:8b:41:b2:6f:c3:e2:47:74:b3:cf:25:ef:
e1:35:23:e9:32:74:27:a3:86:4c:c3:52:93:62:ba:
0b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:2D:79:32:B3:5B:BD:A1:EF:73:F3:3A:FB:30:1A:90:16:F2:AF:0C
X509v3 Authority Key Identifier:
keyid:42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/bC15MrNbvaHvc_M6-zAakBbyrww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.42.48.0-212.42.59.255
Signature Algorithm: sha256WithRSAEncryption
7f:a7:1e:3a:fd:6e:8e:a1:73:bf:88:ad:c2:ad:b0:fe:2c:3e:
68:f3:c4:a2:b0:25:ea:56:23:d6:90:40:22:d5:99:fb:72:09:
da:06:9c:ea:23:40:54:8a:db:03:c8:03:f4:eb:70:0e:d4:23:
83:d2:d3:fd:5f:c9:3a:31:27:ff:0d:a8:fd:bc:67:41:af:43:
e6:37:a7:80:2b:4f:3c:75:4c:df:74:b7:53:20:91:c6:5b:85:
a8:13:6d:17:17:e7:6b:72:77:e7:8f:16:21:c3:65:35:f3:38:
67:60:b0:2e:3b:f1:cb:93:27:a7:98:bc:4a:91:15:dd:e7:eb:
ee:af:7c:68:d7:4c:05:5e:3a:fa:af:b8:3c:2d:08:51:be:28:
c9:77:63:e5:15:b5:9a:fe:15:d6:e3:90:61:2b:ea:09:1a:75:
2a:2d:4c:ef:86:53:f4:1c:d8:eb:a3:e4:2a:20:5b:d5:62:42:
23:ce:fc:84:a1:a1:0f:c0:49:27:c5:98:bf:f2:9d:02:60:30:
8a:91:d8:87:91:fa:98:15:b8:df:c1:26:1a:03:ed:94:d1:23:
b9:94:76:f0:ab:0e:64:4c:43:7e:ad:fd:82:9d:48:8b:d2:31:
2d:0b:6e:94:7e:b6:4b:fd:ef:3a:14:c6:79:40:f2:d8:b3:a9:
b7:d0:f7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 20:02:56 2025 by rpki-client