Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/b0J0c_ZizsWJXGQhF_FGEfvGzao.roa
File: b0J0c_ZizsWJXGQhF_FGEfvGzao.roa (raw, json)
Hash identifier: jfFhGXkLEowQAzL9DyBlxzpt/B48fM6EKUjYYKXrjWg=
Subject key identifier: 6F:42:74:73:F6:62:CE:C5:89:5C:64:21:17:F1:46:11:FB:C6:CD:AA
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0194274843F67828ED4D9E5E1FB0884C12DA
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/b0J0c_ZizsWJXGQhF_FGEfvGzao.roa
Signing time: Thu 02 Jan 2025 13:50:34 +0000
ROA not before: Thu 02 Jan 2025 13:50:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203068
IP address blocks: 185.71.29.0/24 maxlen: 24
185.71.30.0/24 maxlen: 24
185.241.120.0/23 maxlen: 23
185.242.173.0/24 maxlen: 24
185.242.174.0/24 maxlen: 24
185.244.232.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:43:f6:78:28:ed:4d:9e:5e:1f:b0:88:4c:12:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 2 13:50:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f427473f662cec5895c642117f14611fbc6cdaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7b:96:e6:34:4f:69:d4:28:dc:a1:16:c3:40:
e9:9d:6a:1d:51:35:48:fd:64:b5:17:ad:a4:d5:72:
9e:b0:8c:dd:b5:9d:96:47:b1:51:60:ff:01:1f:b4:
ba:a1:d6:b9:bc:b6:16:2d:a3:41:95:82:7f:04:03:
da:7f:5d:e1:ee:57:ce:32:88:92:fc:50:6b:82:57:
b8:68:32:b2:8c:6d:b0:72:af:2c:e7:c6:48:fe:0b:
6c:04:b4:3e:f6:2e:81:15:06:0a:2c:de:e3:aa:6b:
b8:2e:b2:42:69:7e:d7:ea:21:d1:be:7d:3d:79:fb:
61:de:6f:af:f4:4e:af:b4:ba:c2:d9:76:97:88:4a:
a1:3a:10:3a:94:b3:e8:6c:47:1e:3e:12:8e:8b:27:
1d:1b:f3:fa:c8:3d:ca:04:e0:d4:9d:62:f1:a9:f3:
1c:74:5c:7e:d7:9f:e9:6c:17:39:1d:23:cb:28:41:
84:4c:c9:1c:65:d6:ea:7f:b0:07:d8:43:e2:ea:10:
9a:ff:b4:3d:cc:8c:9a:44:d8:8c:8e:10:1b:70:4c:
d2:91:2b:2f:74:02:be:98:7d:37:6a:7f:6f:75:5e:
4e:18:51:06:2a:eb:41:67:a3:6d:16:ad:05:9d:24:
10:66:c2:ad:ba:9d:ee:7a:03:e3:89:48:8e:e6:66:
33:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:42:74:73:F6:62:CE:C5:89:5C:64:21:17:F1:46:11:FB:C6:CD:AA
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/b0J0c_ZizsWJXGQhF_FGEfvGzao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.29.0-185.71.30.255
185.241.120.0/23
185.242.173.0-185.242.174.255
185.244.232.0/23
Signature Algorithm: sha256WithRSAEncryption
39:19:e5:bc:a4:56:f4:b9:2f:c9:82:88:9b:30:e3:37:ce:ae:
57:42:e7:13:1d:3a:f5:d1:78:72:65:b0:81:cb:8e:81:b1:af:
1d:2b:f3:ec:ba:4f:26:bf:54:5a:b2:e5:f4:25:ec:78:85:42:
f3:df:a2:ff:e4:94:a6:e5:65:10:59:d5:a6:12:0e:5f:ee:4d:
4b:e6:8b:59:c3:a2:c8:97:f4:83:f3:d0:ad:25:6c:6f:f1:e8:
d8:ff:28:3d:f0:33:9f:7f:b8:5a:67:53:e6:c7:fb:57:a8:14:
b5:35:08:0f:20:da:e4:78:ef:7c:d8:3e:ef:c4:39:7c:9d:d4:
cb:6f:18:15:23:75:81:34:7c:50:34:f1:b7:19:46:35:cc:50:
0f:8d:0b:f7:d7:50:59:62:34:ae:75:0f:ba:a6:65:cc:1b:e7:
78:e6:a6:1f:92:6e:29:91:a3:43:35:58:8c:f9:e3:50:54:b2:
4f:b9:f9:f0:15:bb:89:4e:94:73:c4:27:95:57:9e:28:1a:22:
99:28:34:54:c6:eb:79:89:25:0e:73:70:5e:4e:10:24:6c:dc:
90:a5:ae:7b:9f:e1:2c:43:b1:af:e5:e0:01:16:9b:15:61:b4:
cf:5b:5f:c7:d7:2a:37:2b:6b:97:b0:a6:aa:7b:46:0c:89:57:
f5:65:05:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 09:23:51 2025 by rpki-client