Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/Bmmw5vXixRsY3kANpQuOK4eIA78.roa
File: Bmmw5vXixRsY3kANpQuOK4eIA78.roa (raw, json)
Hash identifier: rzJ9hjFHlMOHuxRaa+oQvNHPU2YWN8Uaq97BKxyXzCg=
Subject key identifier: 06:69:B0:E6:F5:E2:C5:1B:18:DE:40:0D:A5:0B:8E:2B:87:88:03:BF
Certificate issuer: /CN=1994bf84de36ffb9d94b257f3278134194133498
Certificate serial: 0194406B43BBF4A3252FE504E482649EF4A1
Authority key identifier: 19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/Bmmw5vXixRsY3kANpQuOK4eIA78.roa
Signing time: Tue 07 Jan 2025 10:59:18 +0000
ROA not before: Tue 07 Jan 2025 10:59:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197991
IP address blocks: 89.150.60.0/24 maxlen: 24
89.150.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:40:6b:43:bb:f4:a3:25:2f:e5:04:e4:82:64:9e:f4:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1994bf84de36ffb9d94b257f3278134194133498
Validity
Not Before: Jan 7 10:59:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0669b0e6f5e2c51b18de400da50b8e2b878803bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:81:4d:15:37:b8:26:c6:00:7d:95:27:25:e6:
6c:b7:38:79:f3:47:4a:da:1e:64:aa:4f:e0:17:42:
2b:da:1e:f2:f3:f9:87:49:3b:cc:7c:aa:3c:68:dc:
2d:dc:61:44:47:73:1d:f7:2e:3e:6f:b4:d7:e3:6a:
97:76:8d:6d:f6:46:d0:a6:32:a9:cb:12:d1:21:a4:
c6:8e:af:d2:ac:22:05:4a:54:b8:1d:e9:ed:ac:7b:
05:94:97:98:0b:3e:25:04:f3:01:0e:fe:cf:f9:7c:
f7:7d:15:19:14:e1:0e:67:28:e5:82:55:1f:c4:41:
ee:b3:f5:d2:0a:e6:09:4a:1d:b1:1c:78:44:30:eb:
cf:92:bc:d8:d9:02:b9:55:67:df:e8:ee:7a:ee:3e:
8a:bd:78:e7:0d:2e:90:a5:c3:8f:2a:c5:51:72:2f:
c5:15:f9:a4:1c:32:94:7b:75:34:07:0a:4a:c8:40:
fc:c6:83:26:75:ef:f0:e9:f0:74:f3:22:0c:23:9e:
ed:5f:f3:2b:b5:6f:5c:ce:2e:4b:e6:a5:9a:d7:95:
e7:a0:4a:92:39:fc:b1:e9:18:d4:af:b5:b0:8f:0c:
fc:55:7b:9c:ee:e3:8d:90:05:d6:b7:16:e0:c5:81:
9f:1f:08:a8:e9:7d:b8:d8:e4:64:00:0c:76:d0:a2:
85:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:69:B0:E6:F5:E2:C5:1B:18:DE:40:0D:A5:0B:8E:2B:87:88:03:BF
X509v3 Authority Key Identifier:
keyid:19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/Bmmw5vXixRsY3kANpQuOK4eIA78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.150.60.0/23
Signature Algorithm: sha256WithRSAEncryption
85:b7:6a:c1:c4:84:91:5f:72:18:f9:29:23:51:4a:96:3a:08:
f9:1c:c6:14:9a:85:79:ce:28:d1:f4:44:e8:cc:18:c2:13:a7:
dd:8a:43:e4:ab:cb:9e:0c:60:c0:f1:92:36:c5:87:6a:bc:93:
64:8c:84:b1:0a:17:7c:e3:64:ad:a5:29:af:c5:d6:30:15:77:
f3:7c:8b:ea:f6:7d:b5:a2:09:bd:89:2f:35:d7:89:cf:c6:e0:
42:da:cf:30:70:88:df:a1:da:0d:bb:79:f0:ea:4b:8f:d5:3f:
b3:e0:09:0d:85:3e:3c:45:f3:a7:ee:00:01:87:d0:7f:bf:bd:
03:7d:c9:fa:f1:74:52:00:e6:94:5e:1a:03:01:f9:29:79:f2:
3b:36:8b:33:21:d2:58:34:c8:6d:5b:52:b4:0c:bd:de:22:bb:
25:27:10:f8:ba:b6:f5:cc:42:59:2f:8f:e3:2c:5a:f2:fd:30:
45:92:11:39:a2:4b:fb:a2:50:f6:c5:20:bc:91:4d:a8:39:d7:
8a:87:13:22:90:3a:a8:ad:db:ff:4c:43:a1:37:b7:c8:13:a1:
a8:01:96:d6:27:5a:8a:bf:01:d4:3e:72:e1:7c:4f:9b:ec:01:
ca:a0:28:7c:c2:5f:23:7c:f0:b6:c7:db:08:4f:76:bc:d7:62:
21:79:69:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:54:54 2025 by rpki-client