Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/BK2oy-LxBhgovOnllBpcn7RGJbI.roa
File: BK2oy-LxBhgovOnllBpcn7RGJbI.roa (raw, json)
Hash identifier: c6d5aEPt2JTkBo6Z9s0Bu2jpjjTgNGDRVkWsVn5r5Rg=
Subject key identifier: 04:AD:A8:CB:E2:F1:06:18:28:BC:E9:E5:94:1A:5C:9F:B4:46:25:B2
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 01978220D044E76D832A58EB79EC1C05FD88
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/BK2oy-LxBhgovOnllBpcn7RGJbI.roa
Signing time: Wed 18 Jun 2025 08:21:17 +0000
ROA not before: Wed 18 Jun 2025 08:21:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50340
IP address blocks: 45.89.70.0/24 maxlen: 24
92.119.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 02:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:20:d0:44:e7:6d:83:2a:58:eb:79:ec:1c:05:fd:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jun 18 08:21:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04ada8cbe2f1061828bce9e5941a5c9fb44625b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a1:8e:7b:74:90:99:d7:d6:ab:3f:81:e1:63:
9c:22:26:42:5c:4c:af:c9:10:6c:e5:82:13:56:2f:
63:c4:9c:11:f1:4e:7a:c8:fe:1e:e0:c6:1f:d7:9a:
71:62:e7:29:9d:26:9d:73:d7:18:1c:b5:bd:31:f8:
d6:d3:10:9c:be:d6:95:23:47:25:79:6f:08:04:e9:
4b:3a:50:83:51:b6:73:8b:ac:f2:c3:f3:f4:33:13:
fe:0e:70:4b:b2:60:0a:f7:84:f1:aa:de:43:d9:4b:
8b:cf:a0:50:04:a2:44:ec:33:a4:e3:97:8c:a8:cd:
62:d2:22:de:7d:91:56:e8:b0:d2:ad:0f:34:1f:54:
93:03:09:6b:81:af:62:58:49:ea:a7:86:61:1e:2d:
b5:24:83:82:60:84:0e:f9:10:b1:5f:c5:82:ec:21:
b9:d8:b6:8e:25:b3:b6:ae:54:f2:4b:53:9a:f6:e3:
91:3c:53:f9:6e:76:55:37:09:e1:c2:3f:5c:26:4f:
81:78:1b:e1:61:bc:9f:0e:7d:38:3a:9a:99:e4:d8:
4d:32:25:5f:47:04:e7:ae:3b:6a:59:e1:b8:4b:65:
b4:63:10:90:bb:ea:7c:6c:11:f8:4b:e9:45:b9:0a:
11:24:dd:36:16:16:45:aa:4a:71:dc:84:f8:8b:bd:
3b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:AD:A8:CB:E2:F1:06:18:28:BC:E9:E5:94:1A:5C:9F:B4:46:25:B2
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/BK2oy-LxBhgovOnllBpcn7RGJbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.70.0/24
92.119.162.0/24
Signature Algorithm: sha256WithRSAEncryption
81:49:80:5d:bc:71:eb:f4:cd:98:bb:4d:74:43:63:74:d4:02:
a6:63:4c:cd:ce:aa:16:ae:80:b7:0d:7f:75:e3:04:8a:75:37:
24:e9:1b:cc:80:ba:b2:60:53:d3:e6:e1:e3:87:5a:0f:01:b0:
55:dc:ac:34:1b:b5:c8:b4:71:e3:8d:37:90:2e:52:11:ca:1a:
71:87:32:9f:7f:be:d5:b1:82:c1:da:49:e5:09:5f:d2:fd:6a:
1a:ad:bb:6c:c4:ff:8c:68:86:30:ca:11:b5:0a:5c:3d:07:0e:
d4:35:d6:74:b1:79:da:23:9c:ec:b1:42:13:f0:c5:11:10:3d:
ab:9d:63:36:18:f5:81:a8:db:65:6d:eb:0a:62:1f:fc:44:7b:
cd:4d:68:32:9f:9c:fb:86:53:21:96:3e:9a:2e:03:46:ca:43:
5f:70:80:dc:7a:f6:25:7f:12:22:3f:53:72:57:21:72:32:2f:
ca:42:b5:5e:1a:b6:a8:9d:98:3b:e4:72:62:e1:bc:f5:42:88:
27:da:f7:72:b1:1a:c3:5c:99:b0:68:bf:9b:3d:d3:71:1f:b7:
3c:34:b5:56:25:34:75:04:15:0d:b9:2d:bd:32:1e:1f:98:5e:
92:64:99:bb:ed:24:b6:3a:d5:20:68:eb:5c:6c:98:f9:22:cb:
db:c9:81:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 09:53:30 2025 by rpki-client