Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/BSzGMTPMq-wN-qGAx5X2D1S9LyA.roa
File: BSzGMTPMq-wN-qGAx5X2D1S9LyA.roa (raw, json)
Hash identifier: BvSVSe8mZx3zsVFBrO0OJZXXGEEERCM53ZjLPIwFvwo=
Subject key identifier: 05:2C:C6:31:33:CC:AB:EC:0D:FA:A1:80:C7:95:F6:0F:54:BD:2F:20
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 01941FFA6C67D34B2E8CD658C3C0ED912EA7
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/BSzGMTPMq-wN-qGAx5X2D1S9LyA.roa
Signing time: Wed 01 Jan 2025 03:48:12 +0000
ROA not before: Wed 01 Jan 2025 03:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212396
IP address blocks: 193.110.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:6c:67:d3:4b:2e:8c:d6:58:c3:c0:ed:91:2e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: Jan 1 03:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=052cc63133ccabec0dfaa180c795f60f54bd2f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fe:44:9c:63:d3:b8:75:45:20:1a:57:2e:d0:
0c:68:7b:3c:1b:87:59:56:27:c7:a6:3d:6b:b8:e7:
33:42:6a:d0:4b:5f:b5:d6:37:1f:b7:57:3d:28:6f:
c6:0f:0c:3a:e3:23:1b:34:8d:9f:d7:e6:26:64:b3:
71:e7:6a:4d:f8:ac:f3:01:92:90:6a:64:1b:64:83:
50:13:44:86:62:ec:99:e1:37:27:88:4a:f3:a4:f1:
cf:d6:1c:1d:93:bd:78:41:18:a4:d6:c5:bf:34:82:
46:60:50:0f:74:4e:d6:e2:6d:73:50:4b:bc:1e:0b:
57:24:3e:f9:22:63:c1:d4:f2:13:f5:e5:54:e7:6c:
96:44:2d:d3:d5:01:9d:de:81:35:06:a5:5b:8d:f1:
18:b4:43:24:2d:55:c0:73:26:0e:a1:8b:f5:71:ca:
65:96:cd:d5:23:ba:3c:ce:0d:c4:62:f2:8b:99:4b:
58:c2:82:28:d6:d8:58:4b:a4:92:91:0a:c0:1b:e6:
98:82:a4:3c:86:fc:ef:1f:84:e8:af:e1:18:ef:3a:
3e:8b:4e:5b:b4:86:0c:f4:67:67:1a:cd:c5:df:ea:
cb:14:f3:a8:f5:74:77:cd:d4:19:a2:37:cc:dd:08:
bf:fd:4b:a7:eb:aa:1f:80:9e:82:2b:46:53:a8:b7:
a9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:2C:C6:31:33:CC:AB:EC:0D:FA:A1:80:C7:95:F6:0F:54:BD:2F:20
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/BSzGMTPMq-wN-qGAx5X2D1S9LyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.160.0/24
Signature Algorithm: sha256WithRSAEncryption
20:e3:5d:71:61:86:cf:d2:a8:08:41:66:2f:19:5d:9f:ad:4f:
06:de:b4:15:08:28:b4:3c:26:db:74:63:7d:74:e7:69:39:f6:
3e:8c:e5:a9:91:b4:f7:c9:7e:42:64:f7:23:e5:4e:8f:1f:8e:
8f:a1:12:3a:79:24:a1:82:69:25:18:fa:e4:15:e3:46:1b:33:
2f:66:bc:b1:30:b2:af:55:03:49:39:72:ee:a1:18:b4:be:5f:
a4:05:f7:df:5e:cb:56:61:3b:1d:b9:5f:bc:3f:7e:18:11:14:
75:7f:f2:06:e4:a3:73:f6:77:24:71:29:d9:69:24:9e:ce:89:
77:b1:fa:f0:43:d7:f9:4d:14:11:96:22:21:a4:91:a5:37:92:
e8:4f:02:fd:44:c3:19:c6:54:5f:75:32:21:a0:b9:07:5f:2d:
99:3a:4b:71:0a:c7:4e:e2:05:7b:97:fa:a2:83:38:ba:00:72:
08:45:60:b9:c4:4f:3d:c1:98:4d:1f:04:a7:ef:40:36:44:b9:
a0:bb:f5:2d:e7:dd:e1:a2:71:3a:50:27:05:6a:23:79:d0:0f:
60:32:42:90:09:1d:98:05:6b:47:ff:cb:1c:fb:dc:18:63:fc:
35:a5:ea:2a:2e:ab:6b:aa:a2:c0:bd:dd:c4:db:80:da:9c:4e:
1c:32:e4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:28:43 2025 by rpki-client