Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/bBlKC54OHXhbJTLkoeCOC_iXi58.roa
File: bBlKC54OHXhbJTLkoeCOC_iXi58.roa (raw, json)
Hash identifier: rydEwe9Oj75Yurpk+mfXpfq5E39u03A4S1WXDwVr8so=
Subject key identifier: 6C:19:4A:0B:9E:0E:1D:78:5B:25:32:E4:A1:E0:8E:0B:F8:97:8B:9F
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 01942747F0B70201E247187DB2CDAB2B0EA3
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/bBlKC54OHXhbJTLkoeCOC_iXi58.roa
Signing time: Thu 02 Jan 2025 13:50:13 +0000
ROA not before: Thu 02 Jan 2025 13:50:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5089
IP address blocks: 86.110.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 12:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:f0:b7:02:01:e2:47:18:7d:b2:cd:ab:2b:0e:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Jan 2 13:50:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c194a0b9e0e1d785b2532e4a1e08e0bf8978b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7e:c1:7e:ba:77:09:81:04:08:ac:3f:73:20:
7a:25:a0:8c:e3:e8:c3:5a:0d:9c:1c:9a:4c:25:de:
45:20:0f:de:4c:5a:ca:47:bd:cd:de:96:c7:b8:9a:
73:a3:23:df:fb:ac:67:e0:b0:60:00:4a:b2:44:63:
98:75:c2:1f:18:d8:5e:f1:10:3d:28:6f:3f:2d:4b:
03:80:62:fd:fb:27:7d:1f:1e:7c:49:20:fe:47:a4:
63:e8:07:ac:6f:0d:66:76:e2:ef:13:93:b7:0c:80:
3e:d2:b8:2e:74:d9:9d:5a:76:84:94:54:30:72:9c:
b6:ce:71:de:6c:b5:8c:d0:c1:b8:b8:c3:91:91:18:
97:80:b1:6d:31:96:38:d9:3b:1a:fb:8a:f7:7f:72:
cf:b4:cd:bb:15:38:f9:ac:f4:7b:f4:3d:af:3d:36:
ca:c4:b1:52:37:54:29:c0:2b:63:e0:ad:07:ac:7a:
08:77:c4:51:43:18:fd:91:61:d0:a5:43:2e:86:a4:
a0:1d:e7:1a:3c:5b:47:e6:35:44:43:87:99:1a:46:
1a:9f:66:29:89:68:6e:5c:a7:0e:c7:92:8c:b1:e5:
83:c2:92:d3:a5:b5:b8:43:43:92:07:22:82:3c:3f:
19:17:d1:f8:38:92:b8:96:9a:21:99:ac:b0:8d:6b:
b2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:19:4A:0B:9E:0E:1D:78:5B:25:32:E4:A1:E0:8E:0B:F8:97:8B:9F
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/bBlKC54OHXhbJTLkoeCOC_iXi58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.57.0/24
Signature Algorithm: sha256WithRSAEncryption
94:ef:1c:61:a1:4e:75:a9:7f:fe:0c:56:2a:7a:08:b2:c9:c0:
67:80:3c:98:f6:6c:c7:db:e3:4f:14:2e:a1:77:d0:f6:06:a6:
ae:50:3f:6a:d7:69:ce:21:f1:96:05:88:8a:c7:77:fb:76:8c:
0e:65:12:d5:e7:b8:72:a4:48:0a:f7:8e:c1:3c:b3:2c:28:5a:
fe:1d:05:eb:5e:77:09:f9:1a:14:d5:79:7a:c2:a2:35:aa:6e:
ca:cc:5d:3f:b3:4d:41:ad:89:88:ad:af:a6:ad:57:d6:bb:76:
4d:6c:b9:80:41:3d:7c:8a:21:0f:8e:24:5c:44:3a:ac:88:92:
6c:91:d2:c6:25:c4:9b:e6:dc:5b:d1:4d:d4:d4:1a:02:53:7a:
3c:75:fa:ad:79:2e:4f:0d:41:13:be:0a:a7:c8:26:bf:8d:c1:
fb:1f:da:f7:d8:a7:2e:88:90:32:cb:e1:71:84:1b:d2:18:0f:
91:91:f1:f3:ba:fd:54:b0:1c:7f:25:c5:a2:1a:b3:69:2d:da:
f4:c2:72:20:5b:30:64:74:a0:3f:b3:66:b2:88:35:90:a7:21:
43:48:3d:00:36:1f:6a:5a:77:6d:b7:47:3e:77:e7:c9:6f:86:
b1:26:6a:38:0e:de:bf:e1:1a:a5:17:9d:ab:01:15:8a:a3:a9:
de:0e:05:1b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnR/C3AgHiRxh9ss2rKw6jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MDY3OTc3ZWZkMTRiYzg5ZmIwZGFiYTAzYmIwZjYwMGZi
YjAxODQwHhcNMjUwMTAyMTM1MDEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzE5NGEwYjllMGUxZDc4NWIyNTMyZTRhMWUwOGUwYmY4OTc4YjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArn7Bfrp3CYEECKw/cyB6JaCM4+jD
Wg2cHJpMJd5FIA/eTFrKR73N3pbHuJpzoyPf+6xn4LBgAEqyRGOYdcIfGNhe8RA9
KG8/LUsDgGL9+yd9Hx58SSD+R6Rj6Aesbw1mduLvE5O3DIA+0rgudNmdWnaElFQw
cpy2znHebLWM0MG4uMORkRiXgLFtMZY42Tsa+4r3f3LPtM27FTj5rPR79D2vPTbK
xLFSN1QpwCtj4K0HrHoId8RRQxj9kWHQpUMuhqSgHecaPFtH5jVEQ4eZGkYan2Yp
iWhuXKcOx5KMseWDwpLTpbW4Q0OSByKCPD8ZF9H4OJK4lpohmaywjWuywQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGwZSgueDh14WyUy5KHgjgv4l4ufMB8GA1UdIwQY
MBaAFBcGeXfv0UvIn7DaugO7D2APuwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt
ZDFhNzc3MmRiMDc2LzEvYkJsS0M1NE9IWGhiSlRMa29lQ09DX2lYaTU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2
LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVm45MA0G
CSqGSIb3DQEBCwUAA4IBAQCU7xxhoU51qX/+DFYqegiyycBngDyY9mzH2+NPFC6h
d9D2BqauUD9q12nOIfGWBYiKx3f7dowOZRLV57hypEgK947BPLMsKFr+HQXrXncJ
+RoU1Xl6wqI1qm7KzF0/s01BrYmIra+mrVfWu3ZNbLmAQT18iiEPjiRcRDqsiJJs
kdLGJcSb5txb0U3U1BoCU3o8dfqteS5PDUETvgqnyCa/jcH7H9r32KcuiJAyy+Fx
hBvSGA+RkfHzuv1UsBx/JcWiGrNpLdr0wnIgWzBkdKA/s2ayiDWQpyFDSD0ANh9q
Wndtt0c+d+fJb4axJmo4Dt6/4RqlF52rARWKo6neDgUb
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:30:38 2025 by rpki-client