Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/v4bbx4Tyrv4mjtMYql77jSIvfEA.roa
File: v4bbx4Tyrv4mjtMYql77jSIvfEA.roa (raw, json)
Hash identifier: A4gl29evMU8HAtsdqZFfkRY14UgWdfJ98W4DA9n97zk=
Subject key identifier: BF:86:DB:C7:84:F2:AE:FE:26:8E:D3:18:AA:5E:FB:8D:22:2F:7C:40
Certificate issuer: /CN=605522e37de26b0d56895ac18ab07d7c784ab93c
Certificate serial: 019424B3D7DAA0826A577390B7710AF6CF15
Authority key identifier: 60:55:22:E3:7D:E2:6B:0D:56:89:5A:C1:8A:B0:7D:7C:78:4A:B9:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFUi433iaw1WiVrBirB9fHhKuTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/v4bbx4Tyrv4mjtMYql77jSIvfEA.roa
Signing time: Thu 02 Jan 2025 01:49:13 +0000
ROA not before: Thu 02 Jan 2025 01:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210462
IP address blocks: 188.68.64.0/20 maxlen: 24
2a12:df00::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFUi433iaw1WiVrBirB9fHhKuTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:d7:da:a0:82:6a:57:73:90:b7:71:0a:f6:cf:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605522e37de26b0d56895ac18ab07d7c784ab93c
Validity
Not Before: Jan 2 01:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf86dbc784f2aefe268ed318aa5efb8d222f7c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8a:f8:b7:4e:00:df:32:c9:4e:b7:81:2f:bf:
53:bc:81:47:1d:b9:25:f8:82:e6:e2:36:78:c0:27:
d7:01:c5:2b:51:ae:2b:8d:c6:f4:35:0c:64:ed:3c:
1f:c7:5f:8a:58:d1:c6:15:e8:7e:f7:99:aa:27:52:
62:2a:8c:0b:a3:76:2d:10:1b:b4:4f:53:64:6d:f3:
69:6b:f4:10:c7:cd:04:c7:c3:91:fb:41:1e:75:b2:
66:ad:fa:0c:aa:21:77:83:5d:0b:08:a0:92:d7:86:
aa:c3:c5:ee:73:15:e1:19:a3:69:fa:82:05:44:32:
48:db:91:30:b2:76:24:5b:3d:4c:44:5b:b3:67:f3:
78:cb:29:4f:ac:91:35:04:0c:4d:8f:3e:77:46:cb:
a3:d4:3f:03:59:04:6d:3c:a7:b2:3a:4f:1d:73:94:
16:2d:67:63:8c:b1:f5:ae:0b:90:56:b6:c3:3f:f5:
98:c1:e1:8e:e8:2f:dd:7c:a0:ad:39:7e:28:60:92:
db:81:68:f1:ff:52:32:98:11:ca:3c:87:a0:5c:4c:
2c:65:df:b4:1a:70:36:b8:2d:56:c3:ba:ec:be:ee:
a9:77:b7:3d:82:f6:c6:90:51:fd:dc:5c:43:44:ae:
40:37:30:30:5e:17:ed:b2:8b:fd:86:ea:82:ce:8f:
99:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:86:DB:C7:84:F2:AE:FE:26:8E:D3:18:AA:5E:FB:8D:22:2F:7C:40
X509v3 Authority Key Identifier:
keyid:60:55:22:E3:7D:E2:6B:0D:56:89:5A:C1:8A:B0:7D:7C:78:4A:B9:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFUi433iaw1WiVrBirB9fHhKuTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/v4bbx4Tyrv4mjtMYql77jSIvfEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.68.64.0/20
IPv6:
2a12:df00::/32
Signature Algorithm: sha256WithRSAEncryption
31:59:7e:ca:a8:75:4a:b6:57:fb:d3:51:22:7e:ad:84:4f:3c:
b8:4b:2c:91:dd:1e:30:b8:1d:30:07:34:f8:aa:b0:31:d2:b2:
43:ed:ef:c1:25:98:c6:f1:57:36:8f:3f:22:9a:48:0f:a1:9c:
85:58:a0:1e:d0:8d:a8:8d:69:02:b7:4e:6d:ca:54:bb:aa:48:
b4:8e:a6:ab:c6:81:b9:85:e5:66:ca:d6:c0:ed:7f:62:96:a4:
12:40:0e:f3:c9:86:a9:a2:0c:74:c4:f1:a6:6d:6a:0c:be:bc:
25:18:b6:5f:3f:b0:a0:14:25:ad:9f:8a:6c:0c:9e:de:19:40:
83:5a:d7:28:3c:04:4b:5a:c2:08:ba:80:2c:08:19:bd:e1:e7:
ac:d9:ca:d5:8e:45:ba:40:d2:0c:46:0b:e6:2a:fd:75:b5:8b:
e5:97:52:6c:93:dd:9c:4b:42:88:d2:2a:31:1b:a3:e2:67:f8:
2b:0f:9e:2b:16:f7:b0:78:1f:d4:38:6c:71:b9:e8:ac:9b:8d:
0e:04:c6:7c:c1:57:90:25:09:75:11:19:2e:6b:e2:d0:08:1b:
ec:67:71:6a:1b:44:9f:90:21:63:8b:61:e5:0c:92:a7:f2:f0:
0a:77:1e:c2:c2:6a:2d:6f:f6:71:71:53:c9:4c:b2:5d:47:c6:
bf:24:47:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:54:51 2025 by rpki-client