Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/BhZvXc2lnsh5uqYjh3zsVqW7yLs.roa
File: BhZvXc2lnsh5uqYjh3zsVqW7yLs.roa (raw, json)
Hash identifier: mydo0BfsTsL08Otk+t8zOQ+cbdabxk/K36L8MDg8etE=
Subject key identifier: 06:16:6F:5D:CD:A5:9E:C8:79:BA:A6:23:87:7C:EC:56:A5:BB:C8:BB
Certificate issuer: /CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Certificate serial: 01970CFA87C717DAEB5B7DEDC68D2232B12F
Authority key identifier: 57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/BhZvXc2lnsh5uqYjh3zsVqW7yLs.roa
Signing time: Mon 26 May 2025 14:23:54 +0000
ROA not before: Mon 26 May 2025 14:23:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8220
IP address blocks: 193.30.84.0/24 maxlen: 24
2a02:11f8:192::/48 maxlen: 48
2a02:11f8:193::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0c:fa:87:c7:17:da:eb:5b:7d:ed:c6:8d:22:32:b1:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Validity
Not Before: May 26 14:23:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06166f5dcda59ec879baa623877cec56a5bbc8bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:45:58:04:9a:ab:8e:15:24:57:35:09:44:6b:
e0:9f:e9:6f:e4:3b:25:57:d7:91:71:33:46:82:d2:
cb:70:4c:da:bd:95:23:6f:69:d0:91:6d:f6:34:b0:
53:be:cf:98:d0:c9:79:c8:86:19:5b:1d:2a:f3:9d:
db:66:11:8f:ea:13:21:19:7d:dd:71:dc:5e:10:a6:
3e:de:3e:d2:70:50:33:b7:c5:58:f7:c2:13:01:a5:
83:e3:38:96:9b:a4:29:9e:86:8e:59:16:c2:69:5b:
36:58:01:20:b4:88:ee:da:6e:03:25:09:19:47:43:
b8:10:2f:4b:9a:f4:c0:9f:88:f0:69:f9:69:41:18:
da:ec:5a:c4:2c:e6:78:74:f5:62:83:9b:a6:17:40:
8b:78:a2:f4:e3:18:48:8f:5d:7b:f4:df:94:a5:76:
04:cd:bc:ae:2e:4f:54:57:f2:94:b2:8d:ff:4d:6a:
00:b2:dc:48:7b:16:6c:60:08:be:57:d5:58:23:0d:
1c:dd:f3:66:a8:9e:64:a5:ab:26:a6:ad:0d:93:a1:
c1:67:d9:e4:ad:63:5a:0f:64:19:78:ed:c5:97:53:
f2:d1:d6:72:28:2e:35:09:36:01:b6:5a:08:e4:2a:
1c:9d:e9:3a:fa:85:4c:b8:ce:f0:e1:e8:e4:e4:0e:
be:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:16:6F:5D:CD:A5:9E:C8:79:BA:A6:23:87:7C:EC:56:A5:BB:C8:BB
X509v3 Authority Key Identifier:
keyid:57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/BhZvXc2lnsh5uqYjh3zsVqW7yLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.84.0/24
IPv6:
2a02:11f8:192::/47
Signature Algorithm: sha256WithRSAEncryption
c9:c5:1d:8c:34:26:ce:0d:4a:64:a1:7d:46:5d:03:cf:64:42:
ce:77:86:76:49:77:f7:9d:d5:e2:a1:80:3f:b0:48:3c:c7:bd:
27:13:75:34:1d:a3:f6:07:e6:37:9c:1f:9d:49:cf:77:fe:da:
5f:4b:99:d8:c4:f9:7e:cb:2d:a2:87:86:2e:8a:2c:7f:57:f6:
81:1b:0d:77:fe:6e:ca:0f:79:29:d5:c7:c5:7e:78:2e:11:f9:
35:ea:9e:fd:be:71:2e:cc:6d:5d:f8:e5:cf:ef:15:f8:f9:e2:
10:8b:4e:3d:fd:20:61:d2:c2:8a:ab:ef:39:f1:a1:8d:cd:f0:
fd:66:7f:c1:34:e4:ff:05:3d:ec:d1:26:c0:6f:79:38:26:f6:
19:4b:44:36:9e:d1:fc:2f:8f:10:af:d6:ea:23:3f:08:71:a5:
fe:8b:f2:c4:1e:7c:f2:3b:8e:34:74:b0:4e:f7:54:f9:9b:0a:
8f:d4:a8:79:93:94:be:b5:4a:2e:32:0b:e2:12:ab:69:22:c6:
a2:10:f3:f7:e4:7b:d8:17:fa:2d:42:ba:5d:6b:06:4a:7e:c4:
ce:b6:53:f3:30:07:43:1f:5c:ea:8a:c0:3b:1b:f2:9b:81:0e:
aa:63:b1:e1:69:e1:2e:ba:f5:88:54:96:23:68:84:52:31:58:
cc:94:bf:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:29:48 2025 by rpki-client