Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/bCDR_VakZN9P1SLjLv5dASNlQHQ.roa
File: bCDR_VakZN9P1SLjLv5dASNlQHQ.roa (raw, json)
Hash identifier: 8P6SAAct3v3ggzTHoy70AVMzJ0yoV1oRHXzBMv0Uajk=
Subject key identifier: 6C:20:D1:FD:56:A4:64:DF:4F:D5:22:E3:2E:FE:5D:01:23:65:40:74
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 019426D9BF36F966D1E4BC87C961AB3A22FA
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/bCDR_VakZN9P1SLjLv5dASNlQHQ.roa
Signing time: Thu 02 Jan 2025 11:49:52 +0000
ROA not before: Thu 02 Jan 2025 11:49:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47645
IP address blocks: 94.137.64.0/21 maxlen: 21
94.137.80.0/22 maxlen: 22
94.137.84.0/22 maxlen: 22
94.137.88.0/24 maxlen: 24
2a05:c440::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:bf:36:f9:66:d1:e4:bc:87:c9:61:ab:3a:22:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Jan 2 11:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c20d1fd56a464df4fd522e32efe5d0123654074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b1:fc:a6:b6:a2:9e:4b:41:04:a4:a3:25:b8:
91:0a:48:c3:f7:29:10:ea:bc:52:3d:e4:39:bf:f1:
52:7e:96:fa:07:85:e7:b2:60:1a:08:06:90:a1:d3:
e9:f4:75:8b:9a:d3:a4:71:1e:0d:00:20:ad:ee:57:
65:a1:2e:87:8c:6d:93:2a:f3:2f:6b:09:91:f5:4d:
d1:58:f1:ee:64:7b:5a:3a:e9:40:8f:24:7e:02:06:
d6:bc:6d:ab:b1:f0:5d:a6:fb:ee:14:61:e0:08:35:
bc:b4:a3:2c:5a:a5:65:f3:41:f2:b0:ea:c1:7b:39:
ba:10:cd:18:5a:ff:4a:3c:a5:27:ac:35:9f:93:10:
24:ab:ac:86:3b:b7:17:78:f6:89:6d:b9:b3:8c:17:
e7:81:e5:1a:db:cd:de:b7:58:cd:33:8a:9f:27:21:
1a:6e:f3:b1:92:51:85:37:14:05:ea:59:83:2d:c4:
2e:6f:17:00:a8:5a:3f:a3:df:3a:dc:56:4d:a0:85:
ae:9d:cb:b3:cd:02:d7:61:aa:dc:c0:71:c0:ab:b2:
52:45:35:dc:88:7a:34:84:bd:19:ad:a6:15:0e:cc:
46:d3:56:6c:33:5f:47:47:61:1c:d0:7c:b0:50:05:
15:44:2b:38:71:00:5a:b2:e6:89:eb:81:0a:a4:fa:
03:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:20:D1:FD:56:A4:64:DF:4F:D5:22:E3:2E:FE:5D:01:23:65:40:74
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/bCDR_VakZN9P1SLjLv5dASNlQHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.137.64.0/21
94.137.80.0-94.137.88.255
IPv6:
2a05:c440::/48
Signature Algorithm: sha256WithRSAEncryption
13:c4:df:9c:27:b0:fd:fd:1f:b1:12:c0:b0:44:da:06:b9:a7:
64:43:38:48:a5:b7:e0:7f:42:7f:1f:f9:3d:36:df:81:1f:01:
1a:49:fe:6f:94:77:ef:8e:60:aa:ee:6f:1a:6e:f0:4b:ad:24:
66:ff:26:6d:3f:0e:9c:55:00:e3:da:63:ae:30:19:9f:07:82:
ad:e5:65:8d:8f:18:9b:a7:8a:34:ae:8d:ce:61:76:c4:3c:9f:
62:5b:bf:b7:9a:9e:d3:57:a1:35:c7:d8:b9:11:18:34:c8:0c:
7d:bd:d5:29:0f:3e:42:d0:74:72:cd:79:8e:29:62:e6:3d:aa:
e2:da:22:7b:d3:6e:c5:8c:6a:b7:ac:99:fa:ab:e4:79:01:6f:
01:95:b0:0f:46:13:83:f2:e8:6c:6d:5d:31:a1:85:2a:d4:60:
b5:ea:10:7f:a1:ae:f9:fd:27:47:87:f2:f1:a6:0d:81:aa:a4:
ce:c8:76:41:1e:a8:0b:e6:f9:58:a6:01:18:23:f9:d9:de:66:
c8:e4:5d:0f:65:65:10:34:84:d1:ba:4b:82:0b:b2:25:5c:1a:
e9:8c:40:bb:18:f4:92:c5:6e:64:4f:e9:bf:14:9d:67:ad:8d:
8b:12:00:54:92:82:ee:fd:9a:8c:2a:f1:ff:f2:4f:43:64:3f:
cf:da:0b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:22:52 2025 by rpki-client