Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/B2IMeTT_3aTfHDkJlGE0ghQbFDk.roa
File: B2IMeTT_3aTfHDkJlGE0ghQbFDk.roa (raw, json)
Hash identifier: 9QqvH1LHSxTx6M/amoR6Uht8hCig8jnepvjGfXmWyhk=
Subject key identifier: 07:62:0C:79:34:FF:DD:A4:DF:1C:39:09:94:61:34:82:14:1B:14:39
Certificate issuer: /CN=77eda8f726a69b504de994943b0a5f2308c2a96b
Certificate serial: 0194228D793A48482533CB63858F0DCE3313
Authority key identifier: 77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/B2IMeTT_3aTfHDkJlGE0ghQbFDk.roa
Signing time: Wed 01 Jan 2025 15:48:04 +0000
ROA not before: Wed 01 Jan 2025 15:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3257
IP address blocks: 185.84.217.0/24 maxlen: 24
185.84.219.0/24 maxlen: 24
2a05:a882:de10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 19:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:79:3a:48:48:25:33:cb:63:85:8f:0d:ce:33:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77eda8f726a69b504de994943b0a5f2308c2a96b
Validity
Not Before: Jan 1 15:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07620c7934ffdda4df1c390994613482141b1439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:81:c3:91:9f:f9:d3:bf:0d:9b:2c:cc:e5:3d:
8a:00:9e:5c:37:48:32:83:cc:af:84:76:a4:6a:c5:
4c:b6:df:0b:3c:4b:00:a4:c6:71:37:b4:88:65:15:
0d:0f:ed:f0:d5:d5:c8:b2:bf:0b:fb:d2:88:54:cb:
81:ba:2e:07:83:ca:3c:5e:96:d4:44:4f:78:de:38:
94:80:81:89:c6:c4:43:97:dd:07:30:98:95:51:6c:
44:98:c1:30:ba:25:30:50:db:00:f1:5f:f5:62:aa:
fe:02:0e:6d:df:49:d8:f3:5d:e4:d1:19:f8:85:3e:
bf:66:77:7b:63:37:2f:86:43:47:4c:37:72:37:a8:
e9:e2:d4:fb:1d:0f:d6:8e:3f:a4:98:7a:70:0e:30:
35:2a:6a:45:d4:f7:74:3f:b6:98:2f:b0:4a:07:16:
f3:a3:c9:ac:16:29:d7:34:88:90:63:e7:c5:2b:60:
5c:62:00:64:dc:66:4f:9e:0e:71:fe:ed:6d:5f:fa:
8e:cf:e0:13:92:a3:ac:55:fd:57:7b:00:7b:d8:c9:
7e:41:2d:d3:28:3a:9f:37:1e:93:fd:04:5f:b5:c9:
88:4b:70:39:0a:48:3b:3b:a9:28:7d:dd:9e:96:80:
03:4a:07:80:98:fb:9a:49:22:32:db:1c:4e:48:43:
13:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:62:0C:79:34:FF:DD:A4:DF:1C:39:09:94:61:34:82:14:1B:14:39
X509v3 Authority Key Identifier:
keyid:77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/B2IMeTT_3aTfHDkJlGE0ghQbFDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.217.0/24
185.84.219.0/24
IPv6:
2a05:a882:de10::/48
Signature Algorithm: sha256WithRSAEncryption
12:63:ba:21:b8:52:c0:b6:fa:d1:ba:15:a7:00:50:cb:4a:54:
c3:93:80:fd:c8:c8:f0:15:33:a6:06:bd:9c:ef:94:18:c4:40:
ab:d0:85:c5:e0:ad:79:8c:f2:f1:38:f0:52:d5:c9:37:31:03:
54:6f:40:b7:89:0e:ab:52:b2:9b:13:77:16:f4:5c:47:00:6a:
7b:a1:32:70:88:74:96:38:0e:6d:4b:51:58:d4:05:8f:c8:a3:
58:82:3a:ef:c8:35:39:87:91:58:56:12:dd:5c:20:e4:44:21:
a4:3d:be:2d:2b:71:4e:dc:da:ab:b3:4b:be:89:dc:b2:4d:d1:
a4:11:4d:98:35:51:e6:f3:b4:c9:24:27:ae:9a:cc:dc:af:28:
d2:bc:ae:cc:8b:8f:cf:71:f8:d0:4c:69:e0:09:36:4b:d7:d8:
60:44:d4:aa:58:87:98:af:14:c8:b2:c7:fb:09:f4:c6:f4:dd:
73:ae:d1:87:72:04:a4:b2:61:77:dd:84:8d:ba:f7:81:1a:ef:
b9:05:ac:03:5e:c3:25:52:31:39:23:67:fe:58:1a:85:77:6c:
40:28:f3:eb:3a:b8:bb:bb:c6:3a:24:0e:98:8d:0b:c5:16:af:
63:77:ff:5d:21:51:01:53:79:5c:e0:5f:f7:8a:be:65:77:10:
a4:ed:15:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:19:28 2025 by rpki-client