Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/9bhpfQDLK302U3knqtNmpJUpoPA.roa
File: 9bhpfQDLK302U3knqtNmpJUpoPA.roa (raw, json)
Hash identifier: bXmps9yNq4FnxJIrnc0Thg5iHt4hnwjCatzHO0SOKMA=
Subject key identifier: F5:B8:69:7D:00:CB:2B:7D:36:53:79:27:AA:D3:66:A4:95:29:A0:F0
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 019424B3ABF5791E33C0ABBF899C0B6E36EE
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/9bhpfQDLK302U3knqtNmpJUpoPA.roa
Signing time: Thu 02 Jan 2025 01:49:02 +0000
ROA not before: Thu 02 Jan 2025 01:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39249
IP address blocks: 95.164.71.0/24 maxlen: 24
195.149.96.0/24 maxlen: 24
195.214.212.0/24 maxlen: 24
2a01:d0:7fff::/48 maxlen: 48
2a01:d0:8000::/33 maxlen: 33
2a01:d0:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 21:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:ab:f5:79:1e:33:c0:ab:bf:89:9c:0b:6e:36:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jan 2 01:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5b8697d00cb2b7d36537927aad366a49529a0f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:7f:63:0d:43:3d:b3:58:7f:61:6b:87:a3:f7:
79:c5:07:7d:4a:20:b9:f1:ef:56:b8:90:75:2c:0d:
48:0b:0e:12:91:a9:9c:ca:f0:69:53:3f:ee:20:50:
06:a4:a1:b7:40:35:1c:5b:72:ce:ab:9e:ff:80:f0:
d3:68:6f:69:03:c8:10:16:5a:2c:ce:2a:e2:93:49:
97:aa:0a:36:4e:35:0e:76:d0:f9:12:c4:19:bc:35:
45:7c:49:63:7c:b3:81:9c:09:78:2e:c8:29:83:db:
f9:4e:06:7d:4d:f5:16:49:75:75:bf:3d:0a:b4:99:
f8:5b:ab:10:4a:70:59:32:3c:1d:6a:19:eb:80:ce:
ec:41:46:7c:74:49:5d:89:e2:7e:07:f0:32:49:24:
26:71:d3:69:c3:73:be:b5:ae:d8:88:86:dc:61:dd:
09:42:cc:07:da:bf:68:51:b3:0e:6c:77:13:0f:59:
33:7b:52:2b:38:0a:bf:d7:83:4c:a0:8e:27:92:95:
5c:af:c1:06:ea:71:8f:6f:22:d9:7b:27:1c:64:f5:
1e:d0:d1:d7:10:3d:c6:a9:9f:9b:62:bd:79:54:76:
64:f9:48:29:d2:52:3a:9d:fa:f6:9b:c7:7f:cf:29:
ca:53:f6:7c:98:d2:5e:c1:26:a9:80:cf:4b:eb:64:
7d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B8:69:7D:00:CB:2B:7D:36:53:79:27:AA:D3:66:A4:95:29:A0:F0
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/9bhpfQDLK302U3knqtNmpJUpoPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.71.0/24
195.149.96.0/24
195.214.212.0/24
IPv6:
2a01:d0:7fff::-2a01:d0:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0d:f9:34:b7:1d:e1:0a:20:81:be:7a:36:bf:4b:8c:03:b5:7c:
b8:64:ed:5f:4d:e8:3c:2d:b6:53:d2:91:e7:0c:29:5d:4c:57:
e5:b5:5c:1a:47:4c:a9:de:6e:c0:b1:a4:8c:01:84:b9:7d:63:
e9:50:b9:7f:54:a5:04:f2:1f:d7:50:c8:ca:60:d3:22:cb:3c:
9b:fd:8e:c1:97:35:4b:68:ef:11:f3:52:56:b1:a6:5e:71:54:
10:9f:4e:6b:c4:97:47:7b:44:da:df:42:2b:cb:63:d8:8e:6d:
1e:ed:ee:4f:9d:54:be:bf:c1:e3:e0:aa:c0:88:0a:59:53:dc:
45:93:57:f3:41:9e:63:3f:54:ed:ba:53:ee:d5:66:0c:53:fc:
43:37:c8:35:21:53:4e:b3:a3:78:e0:f6:a0:9e:45:af:65:a3:
18:c5:35:d4:ed:d5:eb:48:54:46:7e:5d:5c:de:46:1a:c8:a0:
a3:40:34:30:ba:09:18:6e:5f:a9:c5:07:26:2e:5d:41:7a:4f:
71:4e:6d:0f:28:24:c0:b2:98:63:ca:6d:f1:ef:88:c8:3c:6e:
ed:f6:bd:8d:c4:9c:66:79:3a:fc:83:5b:36:2e:73:02:86:c1:
3e:ad:6c:4d:37:00:fc:69:c9:f8:de:3d:1b:c0:d4:38:cd:5b:
2a:9b:81:0a
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAZQks6v1eR4zwKu/iZwLbjbuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNzQzZWQ2M2U4NjhlZjUwZjZkODRjMDAwM2E4MzQ4M2Zj
NjJhMDMwHhcNMjUwMTAyMDE0OTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNWI4Njk3ZDAwY2IyYjdkMzY1Mzc5MjdhYWQzNjZhNDk1MjlhMGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7n9jDUM9s1h/YWuHo/d5xQd9SiC5
8e9WuJB1LA1ICw4SkamcyvBpUz/uIFAGpKG3QDUcW3LOq57/gPDTaG9pA8gQFlos
zirik0mXqgo2TjUOdtD5EsQZvDVFfEljfLOBnAl4Lsgpg9v5TgZ9TfUWSXV1vz0K
tJn4W6sQSnBZMjwdahnrgM7sQUZ8dEldieJ+B/AySSQmcdNpw3O+ta7YiIbcYd0J
QswH2r9oUbMObHcTD1kze1IrOAq/14NMoI4nkpVcr8EG6nGPbyLZeyccZPUe0NHX
ED3GqZ+bYr15VHZk+Ugp0lI6nfr2m8d/zynKU/Z8mNJewSapgM9L62R9cQIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFPW4aX0Ayyt9NlN5J6rTZqSVKaDwMB8GA1UdIwQY
MBaAFG10PtY+ho71D22EwAA6g0g/xioDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQt
ZTk3MjRhN2E2YmM4LzEvOWJocGZRRExLMzAyVTNrbnF0Tm1wSlVwb1BBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQtZTk3MjRhN2E2YmM4
LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAYBAIAATASAwQAX6RHAwQA
w5VgAwQAw9bUMBgEAgACMBIwEAMHACoBANB//wMFACoBANAwDQYJKoZIhvcNAQEL
BQADggEBAA35NLcd4Qoggb56Nr9LjAO1fLhk7V9N6DwttlPSkecMKV1MV+W1XBpH
TKnebsCxpIwBhLl9Y+lQuX9UpQTyH9dQyMpg0yLLPJv9jsGXNUto7xHzUlaxpl5x
VBCfTmvEl0d7RNrfQivLY9iObR7t7k+dVL6/wePgqsCICllT3EWTV/NBnmM/VO26
U+7VZgxT/EM3yDUhU06zo3jg9qCeRa9loxjFNdTt1etIVEZ+XVzeRhrIoKNANDC6
CRhuX6nFByYuXUF6T3FObQ8oJMCymGPKbfHviMg8bu32vY3EnGZ5OvyDWzYucwKG
wT6tbE03APxpyfjePRvA1DjNWyqbgQo=
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:35:18 2025 by rpki-client