Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/BaLzSZWG2BO5Cofj2FxaxN89DLg.roa
File: BaLzSZWG2BO5Cofj2FxaxN89DLg.roa (raw, json)
Hash identifier: hcBEaq7oUhBHm/uvro1ftRHpNEcXo+2JQ10CTRCZd9w=
Subject key identifier: 05:A2:F3:49:95:86:D8:13:B9:0A:87:E3:D8:5C:5A:C4:DF:3D:0C:B8
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 0194938445D8D5D33E2BC79B7A7BDA4882D9
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/BaLzSZWG2BO5Cofj2FxaxN89DLg.roa
Signing time: Thu 23 Jan 2025 14:15:06 +0000
ROA not before: Thu 23 Jan 2025 14:15:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56971
IP address blocks: 46.8.64.0/24 maxlen: 24
46.8.224.0/24 maxlen: 24
46.8.225.0/24 maxlen: 24
46.8.226.0/24 maxlen: 24
46.8.227.0/24 maxlen: 24
46.8.228.0/24 maxlen: 24
46.8.229.0/24 maxlen: 24
46.8.230.0/24 maxlen: 24
46.8.231.0/24 maxlen: 24
46.8.236.0/24 maxlen: 24
46.8.237.0/24 maxlen: 24
46.8.238.0/24 maxlen: 32
95.182.101.0/24 maxlen: 24
95.182.114.0/24 maxlen: 24
95.182.115.0/24 maxlen: 24
95.182.116.0/24 maxlen: 24
109.248.160.0/22 maxlen: 24
188.130.154.0/24 maxlen: 24
188.130.206.0/24 maxlen: 32
188.130.207.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:93:84:45:d8:d5:d3:3e:2b:c7:9b:7a:7b:da:48:82:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 23 14:15:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05a2f3499586d813b90a87e3d85c5ac4df3d0cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:45:6d:78:ad:9f:00:90:36:af:d5:97:fa:8d:
cb:23:09:c1:ad:11:4b:bf:ce:e2:43:1d:e7:e1:5b:
6e:5d:29:27:b8:63:6e:57:88:c0:a7:74:fc:d9:ce:
c7:fa:0b:ce:0c:f4:d2:1f:9c:e7:dc:12:b4:ed:da:
27:9f:ca:b0:2f:0e:61:87:cf:a9:a3:10:b6:47:04:
92:7e:e9:f0:a3:1b:3e:a3:d6:3b:53:84:cb:d3:a9:
50:c9:ee:dd:a6:96:da:85:3f:eb:c8:ec:5f:fd:3c:
5a:4a:37:54:b6:7c:7d:2f:9a:60:05:a7:16:4c:a9:
8b:2e:5e:c8:d3:95:89:bc:18:ee:6e:20:ea:d5:aa:
1e:77:e2:9c:5e:a0:f3:d7:6e:5c:72:bd:3b:04:9b:
0e:98:52:32:e1:d8:bb:b6:af:0c:e2:a3:3a:24:33:
27:a5:48:79:0b:37:fb:09:64:79:7d:9b:c0:c2:ba:
e0:2c:ce:19:a4:b4:9b:26:17:41:8e:f1:49:81:f1:
82:44:08:01:58:1d:ac:96:43:84:3c:33:c9:a1:6d:
78:01:22:60:cd:cf:03:f5:73:d4:28:89:d6:45:ae:
35:33:4d:9f:03:bc:7b:fa:e8:90:5e:4b:96:cb:a3:
28:eb:18:1c:3b:eb:13:ec:22:44:54:a0:0f:28:6c:
01:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A2:F3:49:95:86:D8:13:B9:0A:87:E3:D8:5C:5A:C4:DF:3D:0C:B8
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/BaLzSZWG2BO5Cofj2FxaxN89DLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.64.0/24
46.8.224.0/21
46.8.236.0-46.8.238.255
95.182.101.0/24
95.182.114.0-95.182.116.255
109.248.160.0/22
188.130.154.0/24
188.130.206.0/23
Signature Algorithm: sha256WithRSAEncryption
54:5e:a7:0a:fc:21:b5:a4:58:93:0e:cf:4c:c1:fb:5f:b1:ea:
79:91:dd:08:67:42:ad:5e:b5:1d:14:32:25:fb:72:67:da:3e:
d7:42:d3:89:45:60:4d:af:13:5a:a4:cd:0c:e5:e5:8c:db:0a:
4d:a7:c5:3a:4d:22:cb:3c:2a:67:2b:80:f5:ff:bd:63:d4:20:
cd:71:7e:fd:bb:c7:a7:7c:91:93:76:1f:d2:a1:a5:9a:97:45:
a5:8f:6b:cd:81:22:28:97:28:a9:99:80:00:9c:e3:08:00:47:
42:4e:e3:47:f5:0d:df:a4:70:43:8e:56:66:d0:75:1f:5a:5c:
cd:15:f5:02:bc:41:16:9d:ae:cd:6f:04:f7:67:bf:15:69:91:
67:51:74:f6:b2:b9:d3:2c:76:9c:1a:f4:87:d0:59:08:46:3d:
c8:7a:0c:76:05:68:64:55:b1:dc:90:cd:55:67:18:6b:66:ee:
9e:a5:61:10:42:b5:27:bf:e7:c8:0d:e9:b5:c3:74:81:8f:76:
59:51:98:c2:69:5e:9f:5c:ab:30:b0:a9:5c:68:62:ba:d7:9c:
40:e2:01:7c:ea:95:ab:41:25:d6:ae:c4:e4:db:bc:09:ea:2b:
2a:74:b9:8d:a9:c3:3f:d6:07:83:82:fe:92:b6:9b:eb:91:50:
aa:18:e5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:13:06 2025 by rpki-client