Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/BcRPTK_3hryUAxkbL4L1J_d_hDw.roa
File: BcRPTK_3hryUAxkbL4L1J_d_hDw.roa (raw, json)
Hash identifier: VoMkO2j5GkeHgdoW1ivKKadjYJI5hgSSGAx9GCe5cFk=
Subject key identifier: 05:C4:4F:4C:AF:F7:86:BC:94:03:19:1B:2F:82:F5:27:F7:7F:84:3C
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01942747C88E3EB77AAFED9C3E872DF50B9E
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/BcRPTK_3hryUAxkbL4L1J_d_hDw.roa
Signing time: Thu 02 Jan 2025 13:50:03 +0000
ROA not before: Thu 02 Jan 2025 13:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56701
IP address blocks: 46.8.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 03:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:c8:8e:3e:b7:7a:af:ed:9c:3e:87:2d:f5:0b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 13:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05c44f4caff786bc9403191b2f82f527f77f843c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:df:4f:26:1f:f2:4a:45:29:4d:0b:94:cb:c5:
a4:71:1a:cd:e9:81:1b:97:a7:b6:03:c3:1f:7d:f5:
b6:36:c8:7d:cc:1b:a4:f0:20:8d:cd:a1:21:c9:68:
e5:e1:95:05:ac:5e:08:ce:c6:d2:3f:56:c7:00:4d:
57:a8:7e:9f:7c:9c:fa:66:4b:f5:29:9e:a5:4f:71:
8b:ea:0d:4c:fc:0f:24:80:e3:f9:4e:17:e9:e1:ab:
2a:18:0e:57:20:75:d6:9e:b3:3e:bb:fd:25:a9:f8:
50:f6:3a:5b:2d:42:c1:e8:f6:4a:1d:f0:c2:0f:2a:
65:4a:7c:c8:a7:1d:6d:46:e3:8c:a3:46:ba:01:c2:
60:ee:0f:33:48:b0:8e:46:d7:08:2b:5d:69:2e:a3:
05:b7:e4:01:14:85:9e:c9:a7:d2:cf:cc:00:d6:5f:
0b:01:5b:c1:52:d5:55:cd:fe:40:99:cb:c0:e0:57:
fa:63:44:c8:d7:6c:9b:ab:ac:8e:54:ed:46:09:2d:
f3:ba:d9:7d:19:3e:bf:9e:00:4a:82:b2:1e:54:2a:
5b:7d:4c:06:a9:74:48:f8:af:e2:9e:f1:8c:c0:8c:
b1:75:24:92:c4:01:bc:e5:8a:1e:3c:8b:99:98:a9:
ea:2f:3b:e1:21:74:77:07:e7:6d:da:ee:8b:81:a3:
06:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C4:4F:4C:AF:F7:86:BC:94:03:19:1B:2F:82:F5:27:F7:7F:84:3C
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/BcRPTK_3hryUAxkbL4L1J_d_hDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.60.0/24
Signature Algorithm: sha256WithRSAEncryption
68:f0:15:cb:3a:9f:18:69:d4:3a:14:7f:9d:65:90:28:f2:84:
96:5d:e8:6a:d8:71:44:11:13:f5:b2:0a:21:01:8d:b8:49:e1:
59:3b:b4:f3:b8:a4:2f:57:b8:1e:8d:87:55:38:59:98:5b:a5:
22:e4:a6:8d:f8:b4:6d:a4:2f:37:28:12:79:3f:50:6f:4b:cf:
ac:a4:e1:2e:20:d8:01:08:97:06:43:c4:29:62:bb:57:6d:50:
21:95:8b:fb:d9:05:94:0a:db:f8:99:b8:7f:1b:1d:71:34:f6:
eb:8b:cc:4d:dd:d2:6a:34:b0:45:55:f8:1e:25:87:48:54:59:
13:65:7e:45:ba:e7:97:72:5c:55:e7:0d:af:89:f6:49:89:99:
ae:7c:35:12:06:77:9a:ec:4a:47:bc:93:58:15:59:95:c8:07:
0e:31:83:ee:e2:ea:a3:ed:fe:16:96:09:c0:8c:34:99:35:1c:
33:9c:52:7f:68:ef:25:fe:84:39:19:71:c5:e7:c1:3d:d2:1b:
b8:3f:71:fc:72:91:f5:e3:27:26:ae:6d:63:61:06:36:f5:40:
43:c4:b1:ee:46:08:21:9a:f0:59:a3:44:3a:a0:e9:50:8d:8e:
72:e6:59:53:0e:39:b3:b6:83:15:f7:12:94:49:f2:6c:fa:2e:
09:60:76:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:55:40 2025 by rpki-client