Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/BoUvBrx0IDoCV7igXomSTVrwZ3Q.roa
File: BoUvBrx0IDoCV7igXomSTVrwZ3Q.roa (raw, json)
Hash identifier: 5K8lWEVpRFDHKqwVNUy3zxyWI8cCApiqoJH/Oj4tZxc=
Subject key identifier: 06:85:2F:06:BC:74:20:3A:02:57:B8:A0:5E:89:92:4D:5A:F0:67:74
Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial: 019427B61852053D505CF676BD7E11051B21
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/BoUvBrx0IDoCV7igXomSTVrwZ3Q.roa
Signing time: Thu 02 Jan 2025 15:50:32 +0000
ROA not before: Thu 02 Jan 2025 15:50:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56804
IP address blocks: 62.0.4.0/24 maxlen: 24
147.234.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 09:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:18:52:05:3d:50:5c:f6:76:bd:7e:11:05:1b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Validity
Not Before: Jan 2 15:50:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06852f06bc74203a0257b8a05e89924d5af06774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d8:fb:9b:6d:4a:35:39:32:8a:38:41:4e:75:
cc:64:b5:6b:a7:6d:a0:b9:72:a5:a3:11:ce:72:6d:
f4:29:1d:7c:f6:39:9a:57:fa:2e:c2:31:42:67:c0:
75:6c:50:85:8c:e9:72:7f:8e:e8:85:12:97:67:06:
2d:33:24:46:18:11:46:1d:ef:57:02:23:b4:72:ae:
dd:15:c4:f4:d4:3f:1d:3f:1d:82:65:d6:2e:9c:b5:
3d:79:e8:ce:6e:e5:66:5c:39:58:df:18:e9:fa:29:
5c:68:ec:66:4c:1b:87:f1:ed:81:0c:80:80:f4:33:
77:f8:8b:4b:4b:bb:c0:68:27:0e:da:16:d0:f0:d6:
43:49:01:1c:df:12:62:c2:6f:83:c3:81:a5:43:46:
7f:f8:00:47:ef:11:d9:ab:d1:a4:3f:9f:a6:80:cf:
73:e1:6e:cd:23:c3:2e:1c:9f:0e:76:09:f7:e4:1c:
2f:ae:80:94:ee:9b:9b:ae:14:24:68:6e:ae:92:cb:
da:8d:b2:8b:a3:d7:09:4f:be:74:72:ff:09:c3:fc:
c2:c1:24:09:f3:30:9a:3b:23:8a:a9:aa:70:92:aa:
47:53:a2:62:32:49:ea:87:4e:52:ef:34:cc:96:72:
43:02:89:67:65:77:ee:74:77:72:7d:a3:dc:83:24:
99:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:85:2F:06:BC:74:20:3A:02:57:B8:A0:5E:89:92:4D:5A:F0:67:74
X509v3 Authority Key Identifier:
keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/BoUvBrx0IDoCV7igXomSTVrwZ3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.0.4.0/24
147.234.42.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:e2:9f:f8:79:0e:42:75:df:b1:c0:5d:19:78:63:9b:16:f6:
00:4d:05:a9:c5:49:dc:93:65:83:6a:71:d7:a6:bf:12:5b:65:
58:0b:b5:88:fd:ca:74:b3:4b:bb:c4:ec:af:9c:7d:5a:35:c5:
9b:30:e4:5e:90:4e:e8:53:18:95:24:b3:b2:e0:0b:ce:b8:8e:
a2:c5:bb:82:ac:89:d8:ff:c0:39:0d:4a:f5:e4:41:9e:e3:60:
e6:17:b7:ec:d0:9a:3a:d9:7b:9e:3e:17:de:6c:b6:c9:d3:e3:
bd:5c:04:a4:b1:58:9f:59:56:50:a0:80:a4:14:95:28:50:a3:
18:1d:35:3b:af:b5:5f:e1:07:a0:06:13:8d:43:60:e9:51:4a:
35:b3:54:65:26:e0:70:ee:5a:6e:1e:a2:f9:8e:81:c6:fb:09:
b2:8d:b4:29:6f:6d:aa:1d:98:26:62:54:5e:4b:8f:f6:e8:e2:
b5:c0:4c:13:d4:2c:dd:c7:4b:b3:22:d2:28:22:06:48:46:6d:
b5:6a:12:b6:91:e0:b4:4d:86:b6:78:39:b6:6c:fc:55:81:d9:
4c:51:ad:a4:fd:0c:37:e1:d8:0e:f0:3f:d4:5d:d3:e9:87:de:
57:4d:9a:4d:27:97:bf:57:e7:8b:dc:d5:7b:37:4c:6a:27:ab:
de:4e:f8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:05:59 2025 by rpki-client