Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/bm1tpfYHU1eAAe47EFPTNLAGrnc.roa
File: bm1tpfYHU1eAAe47EFPTNLAGrnc.roa (raw, json)
Hash identifier: YaE2voIb5Ot/kjAV0Cj7DLZQblGYOL/aAQ3Ex+a66/Q=
Subject key identifier: 6E:6D:6D:A5:F6:07:53:57:80:01:EE:3B:10:53:D3:34:B0:06:AE:77
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 0196002F6C3021B41907471C5EAFA89BD286
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/bm1tpfYHU1eAAe47EFPTNLAGrnc.roa
Signing time: Fri 04 Apr 2025 09:43:50 +0000
ROA not before: Fri 04 Apr 2025 09:43:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204735
IP address blocks: 188.130.144.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:00:2f:6c:30:21:b4:19:07:47:1c:5e:af:a8:9b:d2:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Apr 4 09:43:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e6d6da5f60753578001ee3b1053d334b006ae77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:52:e9:9a:50:ce:f8:84:a8:d5:4e:e9:ed:39:
58:b3:3a:cc:2a:11:b5:94:f6:00:57:d5:20:8c:39:
06:ff:70:c0:a6:ba:c8:70:fe:92:65:ea:35:ec:ca:
bc:95:eb:99:bb:43:16:90:22:2e:36:2a:da:1f:a5:
81:58:35:97:2c:9c:37:bd:21:78:3a:50:76:7c:7d:
6a:45:8b:29:94:bc:0c:c9:05:e5:ad:e8:09:01:12:
61:d8:45:f6:bc:37:95:fb:26:54:05:56:86:fd:a1:
e6:c5:92:a0:b7:28:8c:29:97:64:68:40:6d:93:12:
ac:0f:7d:11:2c:6f:fe:88:73:55:74:5b:c6:f3:79:
dd:aa:ad:c7:49:85:3c:1e:33:5d:2e:41:e0:30:12:
68:02:0e:8b:fd:40:1a:44:65:9a:b5:b6:14:11:c8:
e6:17:e8:06:66:f5:6f:4a:c1:ee:03:77:3e:2f:66:
85:49:b6:cf:0a:dd:f5:a4:88:86:0a:1a:55:90:e1:
cf:4e:49:75:dd:44:84:44:98:8d:66:ea:b5:f6:47:
74:dc:c4:9e:b8:ff:5a:63:92:ee:85:ee:31:84:07:
ab:8a:17:21:12:26:12:17:2f:12:8f:33:2a:da:eb:
1a:0f:ed:6d:fb:4e:28:8b:bb:d5:6e:69:94:54:e6:
a0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:6D:6D:A5:F6:07:53:57:80:01:EE:3B:10:53:D3:34:B0:06:AE:77
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/bm1tpfYHU1eAAe47EFPTNLAGrnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.130.144.0/23
Signature Algorithm: sha256WithRSAEncryption
71:1e:0b:5c:e6:e5:74:7e:cc:e4:c1:de:58:cb:c2:1b:fe:85:
7b:08:a0:29:3f:aa:86:3a:d4:c2:76:87:63:1e:13:85:1c:c8:
d1:3b:19:2e:97:a3:2a:20:a9:a1:ba:23:89:7c:1b:db:8a:c0:
af:25:43:fa:15:3a:ea:36:42:b7:4f:bd:1e:c1:01:61:48:d8:
61:3c:0d:24:92:f5:c5:41:b8:74:25:23:c8:a5:45:3a:30:90:
bf:ca:cb:30:93:b0:03:7d:cb:47:3d:29:fe:3e:33:b1:7d:9a:
64:f2:4b:75:30:36:02:a7:29:66:0e:ef:48:72:0d:a8:3e:e6:
e3:64:af:23:89:e9:30:47:6f:2f:b8:53:7a:db:ca:36:39:a9:
2a:f5:a9:5a:c7:e7:39:4e:8f:28:ff:6c:a7:8b:16:32:25:68:
b4:87:72:c0:6c:c6:a8:6e:29:a6:4f:7f:0f:6b:18:b3:da:ce:
09:a3:72:e4:9c:a1:44:dc:82:97:62:d4:46:d7:0f:14:8b:e1:
00:d3:2a:13:3c:19:68:0e:6e:fd:52:24:77:fa:e1:1a:6e:8f:
fa:b9:e4:61:e8:a6:c8:6b:68:21:c7:b1:6f:b8:df:18:f8:9b:
e2:0e:af:ba:73:aa:fd:a4:f4:cf:ad:eb:2d:ba:33:35:09:18:
97:20:80:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:29:15 2025 by rpki-client