Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/bhJyvIXyD5QiaFMljDZdUZiVjpk.roa
File: bhJyvIXyD5QiaFMljDZdUZiVjpk.roa (raw, json)
Hash identifier: KCT2CACSIxB7ob4WZ5FDxXFFtFCF9R+szrTehXT+Oqc=
Subject key identifier: 6E:12:72:BC:85:F2:0F:94:22:68:53:25:8C:36:5D:51:98:95:8E:99
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FBF2040198708101C3E43F56F5F15
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/bhJyvIXyD5QiaFMljDZdUZiVjpk.roa
Signing time: Thu 02 Jan 2025 05:49:25 +0000
ROA not before: Thu 02 Jan 2025 05:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56387
IP address blocks: 93.171.7.0/24 maxlen: 24
93.171.8.0/24 maxlen: 24
93.171.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:bf:20:40:19:87:08:10:1c:3e:43:f5:6f:5f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e1272bc85f20f94226853258c365d5198958e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:00:ab:3d:5e:b0:8c:e9:e5:84:79:74:ab:59:
4a:24:2e:9c:99:56:b8:05:d8:75:3d:9c:2e:8d:61:
84:26:31:d4:3b:81:e0:67:84:59:b9:69:21:5b:7e:
4a:b3:73:62:1b:20:54:da:09:af:fa:11:6b:bf:95:
7a:44:fc:91:ed:c7:31:bd:39:97:39:1b:b7:74:1e:
0d:bc:2d:31:8c:d5:7f:99:c1:e5:05:9b:f8:94:0e:
03:bd:cd:3d:15:4f:8a:78:88:e8:74:88:3f:34:d1:
08:13:88:ca:7e:85:20:4b:20:9d:03:85:23:51:82:
77:9e:94:81:f8:0f:22:47:92:55:cc:a4:64:ba:26:
68:bf:04:73:0b:fc:1b:e9:90:93:34:40:4b:25:ed:
35:8e:b0:44:b4:e4:0e:15:ee:41:50:8c:83:fc:a8:
f6:04:0d:3c:05:f1:48:d0:76:31:d5:a0:d4:7b:6e:
83:17:0e:d5:07:85:0b:e3:df:bb:d1:3c:4c:bc:d8:
cd:74:47:50:2b:db:22:34:58:c0:75:47:b4:85:88:
2a:95:bb:9b:56:06:5f:7b:78:60:d1:a2:e5:f8:a0:
66:6a:80:5b:7c:f6:8c:c8:62:ac:2e:75:31:2c:cb:
80:c2:e4:71:f1:a6:3b:a0:3d:c7:f1:01:12:ae:bd:
ef:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:12:72:BC:85:F2:0F:94:22:68:53:25:8C:36:5D:51:98:95:8E:99
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/bhJyvIXyD5QiaFMljDZdUZiVjpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.7.0-93.171.9.255
Signature Algorithm: sha256WithRSAEncryption
51:a7:d8:05:40:ce:f2:ca:16:98:8a:99:25:0e:5e:6d:a1:70:
39:45:c4:6e:96:23:fa:03:cd:ed:43:2e:76:a3:80:96:bc:84:
55:fd:7b:b6:65:0b:6f:a9:c3:a2:07:60:22:d9:88:2d:5b:e0:
4c:9a:f4:c8:e7:7b:5d:fd:ff:92:b9:0b:20:85:52:b1:26:e4:
7b:ff:16:0f:20:b6:72:5f:00:e5:9a:ed:c3:a9:ce:d3:2e:2d:
77:f4:1b:ba:2e:b8:79:02:c8:7d:c7:39:6b:c8:40:9c:0c:21:
b2:f2:cd:1b:f1:af:8f:d5:8b:aa:fb:27:02:a7:89:15:b2:f5:
89:d4:09:16:f9:96:72:7c:8a:7e:ce:37:85:11:60:33:d6:d5:
9a:88:38:c8:5d:6e:20:d4:b8:4a:35:f8:29:48:c3:2d:5b:eb:
41:d6:2c:81:b4:67:5c:24:87:a6:c8:57:4b:89:87:ea:cf:20:
33:3e:1e:86:77:9f:19:c4:46:aa:bd:eb:e8:66:de:09:2f:08:
28:f6:c5:64:77:c9:b2:bb:a2:70:09:c5:e8:43:5b:ee:8e:86:
ef:cd:03:97:7f:95:f7:5f:0d:84:77:05:3f:fb:3c:cb:a8:3e:
4b:99:f1:fb:d3:5b:47:f1:1a:3e:9f:a0:6a:15:bf:16:09:32:
61:04:42:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:53:29 2025 by rpki-client