Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/bihY0yHjtwCm_gQeUBAGIAxWN6Y.roa
File: bihY0yHjtwCm_gQeUBAGIAxWN6Y.roa (raw, json)
Hash identifier: 4vkEnOC1Ie0IKO1uc9kG2YAHc5/TAvr3C6t+Eewyd+s=
Subject key identifier: 6E:28:58:D3:21:E3:B7:00:A6:FE:04:1E:50:10:06:20:0C:56:37:A6
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0194274848B001D0BE58F8F921B59D50C905
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/bihY0yHjtwCm_gQeUBAGIAxWN6Y.roa
Signing time: Thu 02 Jan 2025 13:50:36 +0000
ROA not before: Thu 02 Jan 2025 13:50:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206077
IP address blocks: 45.80.81.0/24 maxlen: 24
185.226.192.0/23 maxlen: 24
201.49.191.0/24 maxlen: 24
217.26.188.0/22 maxlen: 22
217.26.188.0/23 maxlen: 23
217.26.188.0/24 maxlen: 24
217.26.189.0/24 maxlen: 24
217.76.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:48:b0:01:d0:be:58:f8:f9:21:b5:9d:50:c9:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 2 13:50:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e2858d321e3b700a6fe041e501006200c5637a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:70:90:2f:ac:81:fd:2c:a8:1f:f8:3c:02:ec:
2f:36:5c:ff:25:95:18:36:e4:a2:b7:f2:8b:a1:1b:
68:ce:79:1b:3c:13:b4:f5:de:57:c5:fe:7d:7b:c8:
1b:c9:1b:7d:12:fc:99:77:cc:bd:72:8e:95:a7:2d:
17:29:8b:35:4b:ef:4a:e8:b5:53:a8:43:69:3b:b7:
8d:53:4e:63:b9:bf:97:d6:83:64:e0:c9:92:0e:05:
29:fe:49:74:99:e0:1c:6f:ab:3b:76:26:34:63:ab:
01:03:42:d0:de:28:b1:ef:82:b3:ed:b5:ae:8e:98:
01:cd:ec:c0:b6:67:6c:0d:76:16:1f:1f:c0:4c:1e:
e6:a5:6e:8a:8d:a4:ea:65:e2:36:e8:65:05:55:6d:
37:c7:e1:4e:e1:ea:e2:49:38:2f:89:40:a7:36:2c:
32:07:b2:9b:4f:f3:96:ea:27:33:bf:f0:3e:b8:d2:
04:aa:fa:c7:94:3c:1f:86:9f:8a:d6:54:4a:4a:1e:
b3:39:75:34:13:58:90:95:f1:5d:f9:d9:41:4d:1c:
b1:2d:be:0c:40:45:60:d2:0a:2f:88:d7:9f:2c:42:
83:93:78:6b:72:6a:e0:fc:1c:12:99:7c:0e:1d:c5:
81:ff:2f:d7:e7:44:16:96:c0:eb:c8:16:b0:ea:b8:
f0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:28:58:D3:21:E3:B7:00:A6:FE:04:1E:50:10:06:20:0C:56:37:A6
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/bihY0yHjtwCm_gQeUBAGIAxWN6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.81.0/24
185.226.192.0/23
201.49.191.0/24
217.26.188.0/22
217.76.252.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:4f:19:73:de:8c:b8:ac:13:ef:62:49:19:ef:a7:c9:37:bc:
8a:80:b8:65:fb:a6:61:05:15:27:63:a8:62:9f:d1:28:bc:63:
e7:49:39:db:a3:e5:6a:b8:23:f2:d2:8e:d8:3d:c8:39:4f:65:
2f:0f:a5:43:fd:92:40:1c:0f:a3:3b:2b:26:2c:b4:8e:30:de:
5e:78:5e:46:43:bd:83:12:c5:ec:19:6e:16:70:7d:63:93:a0:
d7:d3:98:ef:70:7e:55:5f:de:a7:e7:3a:f6:0b:86:cb:c6:a0:
b3:d3:b9:69:1b:e3:ad:5e:02:22:12:67:61:f3:19:ba:b6:0a:
ed:4e:de:bf:94:6c:7b:9c:8a:8b:6b:cd:df:ee:cf:e6:65:94:
4a:14:25:b8:c3:96:38:f5:87:6f:31:f6:04:16:d0:b5:bc:ca:
df:db:8b:1d:2d:00:dd:07:36:53:ff:e7:c8:0b:eb:36:ae:5c:
84:59:b2:79:6c:df:bf:b2:b2:8c:7d:70:e2:5b:ad:9b:ac:56:
8b:da:1b:59:76:18:22:e1:5d:14:77:07:8a:31:33:b0:b6:7e:
0d:8b:43:c7:7c:78:8e:24:d0:12:e4:0d:54:4c:0e:ef:c8:a2:
87:b1:b7:39:f7:28:66:fd:f5:ba:6c:3f:40:86:82:2c:bb:f4:
59:a8:cf:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:37:20 2025 by rpki-client