Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Bihg8-sQrNZORL7TepMKBTYGCEM.roa
File: Bihg8-sQrNZORL7TepMKBTYGCEM.roa (raw, json)
Hash identifier: HmOKvus3kfIeFZPTXdhdSxitw945J16PIqtPo6sewz4=
Subject key identifier: 06:28:60:F3:EB:10:AC:D6:4E:44:BE:D3:7A:93:0A:05:36:06:08:43
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 0196E9D063E1B2C0C1E15B686ABD2D0DA1DB
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Bihg8-sQrNZORL7TepMKBTYGCEM.roa
Signing time: Mon 19 May 2025 18:31:10 +0000
ROA not before: Mon 19 May 2025 18:31:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208427
IP address blocks: 46.8.21.0/24 maxlen: 24
46.8.29.0/24 maxlen: 24
46.8.158.0/24 maxlen: 24
95.182.120.0/22 maxlen: 22
109.248.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e9:d0:63:e1:b2:c0:c1:e1:5b:68:6a:bd:2d:0d:a1:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: May 19 18:31:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=062860f3eb10acd64e44bed37a930a0536060843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:99:40:26:e7:db:b5:c3:55:bf:52:fb:c8:d8:
0c:13:4a:4a:40:8a:95:f4:ef:50:1b:a5:be:3a:d0:
1d:f6:3f:80:3d:c4:3d:65:1e:4a:84:b0:74:08:5b:
a5:af:66:cc:1b:0f:b4:79:de:65:45:0b:ac:b3:17:
72:a2:5c:c8:93:bd:c6:4a:f8:5a:d4:40:19:fc:86:
77:92:a6:97:1f:74:69:15:5a:5c:91:06:17:5f:6c:
c3:9a:fa:ac:04:e0:fa:f9:c5:63:ac:a8:a6:f9:1a:
e8:ea:74:f9:2e:d2:f3:8a:54:2c:32:d3:c7:b8:42:
5f:e4:a5:25:94:9c:d6:3e:43:af:7c:00:8e:c9:85:
af:69:03:96:f0:0f:aa:41:18:1a:b0:34:8b:d9:51:
5e:a5:05:18:b1:ff:e8:b8:af:5b:87:91:76:3d:99:
af:b7:24:e3:84:7f:0d:08:27:f1:7e:4c:4c:68:9c:
b5:64:5b:9b:1e:c6:66:56:1d:91:0b:7d:b3:ca:cc:
c7:3b:3a:aa:b7:a4:49:e3:6a:6c:70:fd:ae:ed:2e:
1b:43:93:d0:36:8e:39:c9:8a:86:b1:2d:a7:d4:fd:
fd:96:33:9c:43:00:de:4a:a0:68:0a:27:c9:f1:28:
f9:cc:48:56:4b:ee:db:59:9e:ae:64:4d:34:37:47:
7d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:28:60:F3:EB:10:AC:D6:4E:44:BE:D3:7A:93:0A:05:36:06:08:43
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Bihg8-sQrNZORL7TepMKBTYGCEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.21.0/24
46.8.29.0/24
46.8.158.0/24
95.182.120.0/22
109.248.59.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:48:1f:e6:4d:0c:02:64:6a:df:ee:58:59:50:9f:e9:32:3f:
1e:a5:7d:1a:9a:55:f1:b7:e5:50:79:3b:ac:13:90:35:8b:1e:
31:64:bc:d6:d6:e2:e8:f9:53:50:0d:a5:54:ae:6e:49:4c:6d:
bd:f6:93:2c:bb:d8:b5:f7:f9:46:fe:02:90:b2:2a:0b:e8:f8:
59:12:5d:29:5e:3b:4f:03:4f:4b:84:92:17:64:0c:81:0c:be:
75:fa:2f:6f:46:d8:6f:3d:1f:48:1a:d7:b2:4d:d5:88:e2:c0:
6f:87:86:40:06:b7:f6:1e:e8:07:59:aa:6a:e9:c8:1e:2d:c4:
e0:18:ab:2d:79:b2:76:b2:30:c9:d8:60:f5:1f:3d:9e:f7:0a:
8e:cb:80:8e:d6:fa:4b:49:24:88:fc:05:c3:39:6a:cb:49:40:
1a:e3:b0:7b:2a:15:eb:7f:dd:b6:e9:71:32:32:ab:b2:6e:fb:
45:14:29:b1:64:33:b4:1d:16:01:38:fd:dc:26:a7:7b:c8:6e:
ea:18:84:7c:9d:e5:9a:0f:ad:ba:79:32:bf:bb:6f:9d:ac:fc:
0a:07:f8:50:35:74:22:de:ce:5e:d0:e2:6b:4f:23:58:2f:ef:
ab:26:de:27:fc:c9:04:29:f6:9d:57:20:f7:77:16:fa:df:d1:
4b:62:80:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:42:26 2025 by rpki-client