Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/Bsfme9lR0Aqk-MzMTzsIFR9Nk-w.roa
File: Bsfme9lR0Aqk-MzMTzsIFR9Nk-w.roa (raw, json)
Hash identifier: zKd/skTxKlvTPvFh0ifMkaguOQnO05Ys88KWivYuLNY=
Subject key identifier: 06:C7:E6:7B:D9:51:D0:0A:A4:F8:CC:CC:4F:3B:08:15:1F:4D:93:EC
Certificate issuer: /CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Certificate serial: 01952E33838C0AE0C92A53CA4006EA4716DD
Authority key identifier: F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/Bsfme9lR0Aqk-MzMTzsIFR9Nk-w.roa
Signing time: Sat 22 Feb 2025 15:08:02 +0000
ROA not before: Sat 22 Feb 2025 15:08:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41911
IP address blocks: 46.250.96.0/19 maxlen: 20
91.241.120.0/21 maxlen: 22
91.243.0.0/19 maxlen: 20
176.39.40.0/21 maxlen: 22
176.110.0.0/19 maxlen: 19
176.110.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:2e:33:83:8c:0a:e0:c9:2a:53:ca:40:06:ea:47:16:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Validity
Not Before: Feb 22 15:08:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06c7e67bd951d00aa4f8cccc4f3b08151f4d93ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a3:bb:e6:41:bb:37:2f:f7:ad:10:20:7e:79:
31:4e:91:f0:24:4a:bd:02:4e:0a:17:b3:af:60:90:
13:0a:64:05:ae:9f:a9:4f:a5:40:af:e0:9f:67:f3:
f1:bb:85:ac:ab:d0:a1:8f:49:99:bf:30:8a:16:01:
fa:e8:ec:f3:e7:2f:f9:37:8e:d6:07:14:b8:f3:74:
91:aa:94:dd:15:a6:90:06:b8:c2:fa:97:9b:a0:fd:
12:d5:de:0b:10:ac:16:a0:12:15:68:ed:b7:ae:6d:
34:69:07:e7:0e:7e:ac:fa:70:05:b5:9b:84:f0:f7:
31:3f:2d:21:65:93:6a:05:64:1d:a0:c6:4f:95:dd:
73:e0:9f:00:4d:c5:54:d2:6f:da:e2:de:42:fc:3b:
48:d5:8b:44:26:ad:ff:82:00:a5:33:5b:3a:a6:c3:
70:43:a1:83:48:24:81:48:c8:72:98:8b:70:82:c3:
5c:02:1b:09:b4:df:0d:2e:a7:91:7a:a0:c3:dd:3c:
75:bd:29:7d:8e:59:b5:55:d5:ea:d7:b0:5e:33:fc:
7a:11:de:aa:41:63:06:81:b5:a3:5d:4c:51:de:17:
ea:e6:0f:0b:52:e5:1b:81:64:22:ee:a6:b8:7e:50:
77:7e:e3:bb:af:ad:ee:1d:3a:05:10:c9:c6:35:ff:
64:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C7:E6:7B:D9:51:D0:0A:A4:F8:CC:CC:4F:3B:08:15:1F:4D:93:EC
X509v3 Authority Key Identifier:
keyid:F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/Bsfme9lR0Aqk-MzMTzsIFR9Nk-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.250.96.0/19
91.241.120.0/21
91.243.0.0/19
176.39.40.0/21
176.110.0.0/18
Signature Algorithm: sha256WithRSAEncryption
7e:8a:25:be:95:55:90:13:1b:87:06:2b:29:1e:a7:bb:90:e1:
ed:73:57:aa:4a:35:7b:68:4f:2a:2e:29:be:9f:6d:39:d4:81:
86:cc:c6:0e:14:2c:e2:6c:23:13:c6:4f:ad:ab:ed:60:b0:76:
54:ea:29:d6:8a:06:fe:85:da:69:da:7d:ab:2b:c9:2c:7b:80:
b8:b0:13:47:e3:53:ff:99:4d:1e:f1:70:9f:34:a5:9b:e3:2c:
d1:c4:bd:ba:03:be:50:bd:d6:e1:09:c7:10:c3:26:a5:4d:41:
6f:c9:dc:f0:17:2f:05:69:2b:b3:24:3a:1c:98:cd:20:de:63:
c0:e5:38:bb:8b:13:d0:18:08:e4:61:a1:d1:c2:f5:57:98:07:
fe:29:a5:f4:f9:61:fe:b7:32:65:bc:9e:b8:e5:86:a4:20:a8:
20:c3:3c:9b:0f:ec:0a:1b:fc:81:21:60:d6:c1:96:c4:4c:fd:
3c:37:af:f8:64:df:4f:ed:ef:68:ed:3d:53:6e:a4:93:9c:86:
f1:9d:ae:31:1f:09:0a:d5:72:ad:90:a5:3b:04:73:45:98:3e:
96:b1:39:00:4e:11:d6:99:2f:ff:e3:d9:1f:2d:b6:16:a9:02:
8c:96:32:4b:4b:b1:3c:95:60:0d:2d:76:be:27:6f:d3:84:26:
2f:3f:39:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 00:45:45 2025 by rpki-client