Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/BXrNsKy3EqW_KRnSB8mxTry-lJo.roa
File: BXrNsKy3EqW_KRnSB8mxTry-lJo.roa (raw, json)
Hash identifier: D9eepCRd9/1MYpPnzyZCsgD6DAPrlz1ed8PCmZyEBtY=
Subject key identifier: 05:7A:CD:B0:AC:B7:12:A5:BF:29:19:D2:07:C9:B1:4E:BC:BE:94:9A
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 0197215122E87FC64C3F8D1E2D14C1FCF325
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/BXrNsKy3EqW_KRnSB8mxTry-lJo.roa
Signing time: Fri 30 May 2025 13:10:54 +0000
ROA not before: Fri 30 May 2025 13:10:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43330
IP address blocks: 46.8.239.0/24 maxlen: 24
188.130.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 20:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:21:51:22:e8:7f:c6:4c:3f:8d:1e:2d:14:c1:fc:f3:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: May 30 13:10:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=057acdb0acb712a5bf2919d207c9b14ebcbe949a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:15:e3:b2:cc:05:4e:07:8e:ce:a0:ad:69:22:
b3:60:8b:d7:6b:8f:56:09:52:9c:35:67:49:df:fe:
2f:e4:20:ad:36:2a:00:3f:68:ad:fd:fd:94:80:31:
8d:43:f9:37:f0:df:45:6e:29:52:b7:c3:8f:9b:8f:
ee:b2:f8:9a:1d:11:56:18:d3:4e:80:1d:4a:de:b5:
15:93:37:7a:01:33:e3:7f:b1:e0:70:80:90:2f:36:
7a:d9:70:46:cc:51:7e:f4:ae:93:49:8e:3b:d5:47:
d6:ff:1e:f1:e5:de:93:fb:2a:87:32:2b:14:d9:9c:
30:e4:c7:99:59:2f:c2:f6:06:c7:05:e3:04:7c:67:
3c:43:c5:23:2b:b1:ef:42:5a:df:5b:eb:b3:a9:b5:
fb:4c:a9:3b:c5:89:4a:e5:9f:85:c1:71:a7:e6:58:
ab:c6:c5:17:ec:6b:5c:0b:af:1b:e5:32:90:3b:87:
bf:99:cc:08:1a:ec:5b:d6:4f:bb:77:94:d7:e5:ff:
71:c1:55:44:90:be:d6:21:36:f8:03:38:07:9c:b1:
0b:c9:a3:97:52:b4:dd:5e:45:55:d4:f0:33:bd:48:
9d:74:1b:d6:c2:e2:33:55:f8:7d:b8:91:5c:41:e9:
ef:ae:e6:b6:a2:b2:da:b9:d1:3b:3b:13:4d:ba:d0:
bd:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:7A:CD:B0:AC:B7:12:A5:BF:29:19:D2:07:C9:B1:4E:BC:BE:94:9A
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/BXrNsKy3EqW_KRnSB8mxTry-lJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.239.0/24
188.130.149.0/24
Signature Algorithm: sha256WithRSAEncryption
50:6c:68:57:7d:48:7e:1a:76:b6:3d:7b:7f:62:6d:96:e8:0f:
04:10:c2:db:38:90:db:e9:ff:8a:54:d2:81:e5:b4:76:4b:44:
78:ae:fa:9b:76:94:66:f5:f8:04:8b:82:e8:9a:4d:02:29:37:
53:ac:7c:9e:9f:4f:30:21:7e:40:83:4a:b0:72:11:97:e7:f5:
27:7f:bc:8a:82:55:48:3b:05:33:8d:1d:59:a9:91:4d:6d:d9:
11:23:0e:c3:5f:f5:86:16:3e:d1:1d:69:e0:39:88:10:3e:5b:
7d:2f:d9:82:02:29:80:07:79:54:68:de:13:5e:e8:bd:2e:07:
3e:2b:f6:36:8d:06:6f:be:9b:bb:ec:3b:c1:bb:bf:6e:ed:4a:
4e:9f:76:a7:4f:60:30:5a:9c:00:a2:95:b3:ad:4a:62:26:da:
02:83:6e:ca:5b:01:4d:0a:5c:32:e9:c0:ea:51:34:97:84:f1:
9f:f7:dd:7c:34:fd:22:74:5f:56:f2:73:c6:e2:b1:35:94:01:
12:e0:8c:17:32:f8:3c:be:55:80:bd:96:c5:1a:e6:57:b7:bc:
35:7a:77:d2:20:9c:ae:5a:58:4f:7e:47:d8:69:82:1d:21:c8:
32:b0:3f:f1:f6:74:eb:fe:81:b9:30:83:f3:d4:65:a3:04:34:
84:32:5b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:43:06 2025 by rpki-client