Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bZwjzP4gjKnjcT_SMEdSZH0cpus.roa
File: bZwjzP4gjKnjcT_SMEdSZH0cpus.roa (raw, json)
Hash identifier: Ae2HLoEm9GipjYsypJz84+I8/D7aRxBKdkOkxmref+c=
Subject key identifier: 6D:9C:23:CC:FE:20:8C:A9:E3:71:3F:D2:30:47:52:64:7D:1C:A6:EB
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 01941F8C8B7D113CB16A61FC7884947D7269
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bZwjzP4gjKnjcT_SMEdSZH0cpus.roa
Signing time: Wed 01 Jan 2025 01:48:11 +0000
ROA not before: Wed 01 Jan 2025 01:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216054
IP address blocks: 185.239.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:8b:7d:11:3c:b1:6a:61:fc:78:84:94:7d:72:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Jan 1 01:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d9c23ccfe208ca9e3713fd2304752647d1ca6eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1a:12:ef:65:d5:12:67:50:17:9e:64:69:5b:
7c:1e:2b:37:48:e0:f9:7e:07:80:db:23:bf:32:be:
8e:f8:6b:37:fc:cb:fb:7a:b0:58:01:ef:fc:e2:e6:
30:8b:89:00:ec:33:10:de:2f:d4:1f:5e:8e:8c:42:
cb:0e:66:58:56:7e:58:79:e7:e6:59:25:8b:8e:92:
71:9a:e0:28:55:7f:39:c4:00:d6:90:98:f9:15:39:
46:5c:e3:0a:11:c2:88:09:ff:45:98:58:31:d5:c5:
9a:39:c7:88:ec:e5:08:9f:72:57:a2:a6:23:8a:ec:
87:1e:c0:d1:3f:13:92:f2:b2:90:32:13:a8:84:8e:
f5:f1:e7:f5:6f:5e:7e:96:da:af:cc:e9:a0:1a:af:
c7:50:64:ed:6c:b5:45:49:81:64:a6:6f:98:2a:1e:
f0:c1:ed:5a:45:cd:67:f0:c1:b7:3d:2e:65:3a:e0:
73:38:c3:57:ad:9b:8d:a4:52:45:f4:fb:05:b6:84:
d4:2a:7a:81:d9:59:7a:57:7a:12:b0:5b:6b:8e:ae:
e1:5c:89:4c:69:cc:bf:91:45:3f:9f:72:c2:c8:82:
11:d8:26:68:c3:84:ca:cc:58:75:f0:3b:74:20:75:
0e:03:b2:99:be:ee:80:4e:b5:bf:c9:94:40:59:f2:
73:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:9C:23:CC:FE:20:8C:A9:E3:71:3F:D2:30:47:52:64:7D:1C:A6:EB
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bZwjzP4gjKnjcT_SMEdSZH0cpus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.3.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:84:40:80:0c:c1:4a:f1:69:cf:14:df:0f:6c:1e:0f:c5:18:
d2:fa:9f:93:20:a9:48:98:4f:22:05:5a:fd:f2:73:98:59:2e:
ec:0e:89:6b:1a:41:1b:06:26:b9:a4:d2:fb:85:15:9b:02:d2:
af:25:5b:f3:69:0b:3d:ff:0b:32:0d:f6:63:d7:67:cc:be:fd:
a8:11:ca:76:e4:a7:55:6c:a2:c5:77:0d:4b:8e:4e:3c:0a:4e:
06:0c:24:e5:56:50:d1:30:60:c3:36:f6:e6:eb:dc:18:b5:de:
39:7b:30:80:f3:59:7a:79:0a:c0:d7:ff:0c:2d:dc:eb:8d:9c:
cb:03:88:29:a5:8d:f9:d1:31:75:4c:72:b1:d3:9a:fa:8f:1f:
e5:06:21:fa:85:90:fb:fc:02:14:d6:ff:de:27:99:7f:09:7d:
8c:17:a1:e0:df:ee:ee:c5:79:a8:65:e5:08:a1:81:77:5c:eb:
12:fb:9d:45:10:7d:8a:1b:34:93:39:7e:30:34:3f:4f:8b:20:
4a:03:16:71:04:ea:64:87:56:4c:49:7a:7d:61:0f:31:ae:bf:
0b:62:3b:35:7b:bf:db:60:d1:70:2e:67:49:72:e6:0a:a0:4b:
5b:bc:05:fb:bf:66:62:ee:b4:69:1c:f6:0a:58:ee:42:0f:f5:
79:0d:73:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:11:52 2025 by rpki-client