Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/BKaKCrIWJLW3Q862BmZ-Z-FQI78.roa
File: BKaKCrIWJLW3Q862BmZ-Z-FQI78.roa (raw, json)
Hash identifier: zGv7kfCx9AyBiy/Vt4g16r88DKiDMl7S2RsrkRbPYxA=
Subject key identifier: 04:A6:8A:0A:B2:16:24:B5:B7:43:CE:B6:06:66:7E:67:E1:50:23:BF
Certificate issuer: /CN=f4a5b042fe48eeb123be56dbf9e8dda20c1ea11d
Certificate serial: 019424B3D8F5CA48DD024E4E28E03319FD71
Authority key identifier: F4:A5:B0:42:FE:48:EE:B1:23:BE:56:DB:F9:E8:DD:A2:0C:1E:A1:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/BKaKCrIWJLW3Q862BmZ-Z-FQI78.roa
Signing time: Thu 02 Jan 2025 01:49:13 +0000
ROA not before: Thu 02 Jan 2025 01:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197914
IP address blocks: 130.0.192.0/21 maxlen: 24
194.50.60.0/24 maxlen: 24
195.66.112.0/24 maxlen: 24
2a03:a580::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:d8:f5:ca:48:dd:02:4e:4e:28:e0:33:19:fd:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4a5b042fe48eeb123be56dbf9e8dda20c1ea11d
Validity
Not Before: Jan 2 01:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04a68a0ab21624b5b743ceb606667e67e15023bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:36:9e:c5:cf:1c:3a:dd:0b:96:9f:a9:1c:84:
28:d1:c5:49:c9:0f:01:18:d3:31:8f:31:1e:65:4e:
4d:b5:a2:e0:c4:d1:97:ec:1f:e2:2d:38:fd:02:71:
2e:ca:15:d3:bb:6c:7d:85:2b:13:1f:1d:00:6e:93:
e1:4f:4d:6b:82:81:8c:44:75:2c:ec:92:56:b9:35:
19:52:6a:f9:1d:c0:14:db:9b:45:3b:d8:79:5e:5c:
c8:4d:c6:2d:e5:d3:57:e0:8b:c1:41:d1:df:ea:86:
f8:57:1c:45:89:85:7f:6a:71:66:76:68:d8:c6:59:
a5:63:d6:d2:04:c8:38:e1:fb:85:01:b8:92:1c:c0:
41:00:14:a6:ab:9f:48:c9:34:96:4f:ff:06:19:5f:
bb:c7:e0:2c:f3:d6:2d:ca:a8:c3:7c:87:b1:3a:2b:
20:aa:d4:8f:45:2d:1c:54:5a:2f:d8:dd:51:08:8a:
5f:26:ec:1e:88:a6:ea:a8:1f:ef:33:bd:9b:a5:ad:
e8:9e:46:f4:3b:ce:7d:e7:45:91:ca:0e:dd:03:a5:
a8:35:86:ac:13:4d:f2:00:a1:f7:8b:fd:f8:62:79:
3a:80:51:d1:0d:69:70:17:7c:41:c2:1c:ec:67:1a:
ff:05:2a:42:d4:62:a5:68:6d:43:3e:f3:44:96:94:
c7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A6:8A:0A:B2:16:24:B5:B7:43:CE:B6:06:66:7E:67:E1:50:23:BF
X509v3 Authority Key Identifier:
keyid:F4:A5:B0:42:FE:48:EE:B1:23:BE:56:DB:F9:E8:DD:A2:0C:1E:A1:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/BKaKCrIWJLW3Q862BmZ-Z-FQI78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.0.192.0/21
194.50.60.0/24
195.66.112.0/24
IPv6:
2a03:a580::/32
Signature Algorithm: sha256WithRSAEncryption
83:f9:18:ce:10:3c:23:1e:e3:30:0e:2f:e0:b2:18:d9:95:34:
ba:e5:07:49:b2:f6:cd:fb:e6:37:d2:78:87:e7:64:7d:28:6e:
fd:da:3a:50:27:9b:84:cc:d6:d4:89:4b:fe:e0:e1:17:cd:c6:
8d:64:53:79:2e:f3:57:7e:0f:d6:b4:1f:69:12:83:db:87:02:
f0:38:31:fa:12:68:6d:f6:1c:40:e8:a8:e6:be:3a:5a:c3:2a:
71:76:c4:95:fa:83:34:63:0d:2d:94:87:27:ee:2a:c3:de:59:
d3:69:11:8a:d0:16:d1:e0:61:fe:d9:f9:69:6f:c7:73:bc:77:
61:4c:40:85:d6:40:3b:bd:aa:c8:da:39:ca:bd:80:40:b8:78:
c2:b3:96:20:5e:ba:a7:66:a9:fb:fc:e3:fc:a6:16:8b:d6:d3:
65:4f:37:cf:99:16:3b:85:93:22:17:35:8b:03:e4:76:d2:5b:
50:01:e0:af:e2:05:18:c0:12:a8:c8:93:e0:33:08:3f:4d:0b:
2b:97:a1:5b:a1:8b:4a:ef:33:43:e4:89:55:14:ce:83:ff:b9:
78:7a:23:3d:40:44:3e:af:0a:fa:79:34:c8:0c:5f:a8:c0:94:
94:45:1a:12:50:f1:ea:a9:9b:9b:d0:33:1a:1b:78:1b:d0:6b:
63:3f:af:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:07 2025 by rpki-client