Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BhGbmFAxSFLU7NSPkZNB1qDtqRo.roa
File: BhGbmFAxSFLU7NSPkZNB1qDtqRo.roa (raw, json)
Hash identifier: eXJoo94zuGXBUflMMfH96J1Ka0tqG9W57+UWV9WLhw0=
Subject key identifier: 06:11:9B:98:50:31:48:52:D4:EC:D4:8F:91:93:41:D6:A0:ED:A9:1A
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019701FBD55BC4F73CC8D25282FDA1E1FAE7
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BhGbmFAxSFLU7NSPkZNB1qDtqRo.roa
Signing time: Sat 24 May 2025 11:09:30 +0000
ROA not before: Sat 24 May 2025 11:09:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 273171
IP address blocks: 45.81.127.0/24 maxlen: 24
201.77.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:01:fb:d5:5b:c4:f7:3c:c8:d2:52:82:fd:a1:e1:fa:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: May 24 11:09:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06119b9850314852d4ecd48f919341d6a0eda91a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:44:59:31:91:1c:a0:30:13:af:bd:c5:eb:d3:
9f:dc:8b:fa:eb:7a:12:c7:30:35:9e:0a:6f:50:28:
ad:b7:55:b8:a4:78:99:ad:31:6a:48:6d:dc:ad:8e:
f9:34:4c:79:f5:e2:19:1a:5e:33:8c:0a:c7:91:2d:
8c:31:79:f4:f0:da:be:85:34:19:20:ff:93:86:ba:
8d:0d:f6:2a:8c:12:5b:58:23:f0:6f:c8:64:04:dc:
f4:fa:4e:b7:61:33:80:ca:bb:21:98:21:45:d6:bb:
c8:ab:17:9a:08:63:81:a0:44:49:5e:2d:26:51:06:
ca:8c:6b:4f:5c:ba:4f:fe:7a:67:fe:6d:f7:41:03:
a2:b2:c0:3d:52:ca:a2:07:3a:6f:7c:e3:4a:eb:61:
0b:b5:52:ea:ee:4a:64:75:f3:c5:a8:4e:cd:4b:86:
27:bc:9c:a2:75:3d:be:59:c4:c0:0f:a6:49:96:6b:
cd:fc:49:2a:7e:44:5b:19:86:70:ab:a2:2b:15:4e:
9c:96:34:db:ed:00:67:ed:0d:8f:bf:3c:df:53:a1:
ac:77:0d:1d:5b:5d:56:55:1e:8d:c6:76:ec:60:09:
8e:46:54:55:a6:85:3a:24:d4:8a:bf:59:65:c8:60:
40:2d:5c:61:1b:bb:a9:f5:19:63:9e:8d:d7:b6:a9:
3c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:11:9B:98:50:31:48:52:D4:EC:D4:8F:91:93:41:D6:A0:ED:A9:1A
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BhGbmFAxSFLU7NSPkZNB1qDtqRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.127.0/24
201.77.63.0/24
Signature Algorithm: sha256WithRSAEncryption
43:52:51:17:6a:4d:18:45:e4:16:a9:cd:d3:5b:dc:ca:19:3b:
c4:12:74:9c:a7:bb:50:2e:38:3e:01:8e:d7:bd:a4:e6:8e:1b:
41:ab:c7:fa:39:40:10:5e:46:ce:4b:41:23:11:af:02:7d:a6:
e5:bb:e1:1a:1c:0d:06:84:85:13:ff:74:94:f7:bc:a2:48:15:
35:c9:6d:d0:45:ba:3a:38:a7:5f:d7:98:1e:94:e0:62:16:a1:
3b:e9:89:9f:7b:06:2e:46:40:04:59:fe:ab:2c:17:11:33:12:
01:d7:20:32:8e:7f:d0:3c:da:7c:d4:af:e1:32:ec:31:57:a6:
41:ad:bf:4c:7d:c2:69:12:66:1e:19:48:15:d2:35:da:4e:eb:
b0:94:d8:59:82:80:21:bc:7e:24:3c:2b:c5:9b:45:68:a1:24:
f0:fb:bf:4a:d3:79:3b:cb:af:a7:b8:df:d9:2c:c5:34:c4:7b:
1a:77:37:02:24:19:a8:a7:af:8e:0f:89:9b:2f:4c:45:0f:2f:
e3:2e:80:de:80:0a:c7:9e:43:d5:f7:50:a8:ef:a8:29:e8:c5:
ff:0f:3c:3f:0b:91:b7:ad:6e:e7:34:33:d6:1d:ca:8f:9d:8a:
f1:79:1a:d9:37:1c:98:f4:38:28:25:62:58:5e:44:e7:f2:f2:
36:bd:24:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:35:23 2025 by rpki-client