Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/6add35-a983-4011-af8a-7aac2d847955/1/BpLbGApyHXLB4qqgJyw3nGH9lH0.roa
File: BpLbGApyHXLB4qqgJyw3nGH9lH0.roa (raw, json)
Hash identifier: 4AoUx/2M994KEwtEdAKInOt11G1446xmTonI1qJPrOg=
Subject key identifier: 06:92:DB:18:0A:72:1D:72:C1:E2:AA:A0:27:2C:37:9C:61:FD:94:7D
Certificate issuer: /CN=6df86a1f570ae31529022aa4f61efd9ec2b97d05
Certificate serial: 0194252172B652A0724DF0C90A21EC2EA5FC
Authority key identifier: 6D:F8:6A:1F:57:0A:E3:15:29:02:2A:A4:F6:1E:FD:9E:C2:B9:7D:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfhqH1cK4xUpAiqk9h79nsK5fQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/6add35-a983-4011-af8a-7aac2d847955/1/BpLbGApyHXLB4qqgJyw3nGH9lH0.roa
Signing time: Thu 02 Jan 2025 03:48:56 +0000
ROA not before: Thu 02 Jan 2025 03:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207573
IP address blocks: 193.41.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/6add35-a983-4011-af8a-7aac2d847955/1/bfhqH1cK4xUpAiqk9h79nsK5fQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/6add35-a983-4011-af8a-7aac2d847955/1/bfhqH1cK4xUpAiqk9h79nsK5fQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfhqH1cK4xUpAiqk9h79nsK5fQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:72:b6:52:a0:72:4d:f0:c9:0a:21:ec:2e:a5:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6df86a1f570ae31529022aa4f61efd9ec2b97d05
Validity
Not Before: Jan 2 03:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0692db180a721d72c1e2aaa0272c379c61fd947d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:09:e5:bd:98:c8:ec:df:e8:44:de:95:cc:f8:
2b:e1:4d:4c:29:9e:5f:92:65:09:c3:53:45:de:38:
d8:17:4e:43:b1:d2:23:f6:cf:b0:70:c2:1f:2b:ca:
4a:72:28:0b:35:f4:f4:f3:86:ee:78:b8:38:71:e8:
c5:b2:33:a4:90:8a:6b:b2:69:83:8f:0c:63:c5:46:
9b:5d:e2:87:c7:9d:fe:46:7c:bf:5a:53:d3:57:e8:
97:41:39:fa:90:d0:7c:ad:1b:ed:0a:77:10:62:cb:
2c:7c:f6:6e:a2:9b:62:85:9a:29:39:6d:5f:bb:e7:
b4:3b:02:ab:be:1a:d9:de:a3:7e:d7:c8:a3:b8:ce:
38:c1:ba:d0:ff:fd:c9:96:d2:c0:bd:d6:bc:4d:8d:
c0:d2:6d:a4:bb:d8:33:ea:60:56:2a:7f:4a:3b:ce:
6e:50:1e:72:94:ff:36:7c:22:4a:46:e0:d1:90:ca:
9c:35:c7:41:9f:d6:aa:d3:38:4a:46:96:eb:18:75:
35:12:fa:35:f1:9c:a4:b2:a2:32:c0:01:32:94:e7:
93:a0:12:6a:20:ad:63:b5:8a:1a:39:85:85:5a:eb:
78:78:bf:06:b3:df:ee:51:f0:09:6b:02:cc:b7:10:
a8:b0:99:12:fa:9b:a9:f8:da:61:43:79:80:f4:a7:
bd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:92:DB:18:0A:72:1D:72:C1:E2:AA:A0:27:2C:37:9C:61:FD:94:7D
X509v3 Authority Key Identifier:
keyid:6D:F8:6A:1F:57:0A:E3:15:29:02:2A:A4:F6:1E:FD:9E:C2:B9:7D:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfhqH1cK4xUpAiqk9h79nsK5fQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6add35-a983-4011-af8a-7aac2d847955/1/BpLbGApyHXLB4qqgJyw3nGH9lH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6add35-a983-4011-af8a-7aac2d847955/1/bfhqH1cK4xUpAiqk9h79nsK5fQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.59.0/24
Signature Algorithm: sha256WithRSAEncryption
12:89:20:e9:f4:37:0a:b1:53:15:7d:4d:69:fe:58:15:15:02:
e7:8d:8a:59:b0:f6:8e:dd:d9:18:17:26:41:26:cd:7b:6a:af:
32:30:9a:e2:94:27:50:58:5f:55:f9:19:af:10:8b:23:71:1d:
b8:ce:5a:c2:bc:85:80:e1:1d:1a:ae:bb:3e:e9:68:e3:74:ff:
51:47:18:10:5f:21:e7:85:d6:b9:82:6e:bb:0e:7a:0b:c4:b8:
26:a2:62:a3:5a:c6:0a:4d:51:3d:a4:80:fe:b2:a7:95:09:5a:
77:72:79:d0:fd:0c:af:8d:67:6d:06:88:64:87:99:f2:09:10:
44:d2:20:1b:45:28:9b:df:cc:7e:6e:98:de:29:9a:ce:1c:d9:
f2:e2:fe:e4:d2:7c:23:4e:85:e9:53:c0:d9:32:5e:84:2d:27:
df:53:16:2a:81:c8:5d:86:e0:be:78:0f:86:7e:d9:1e:9f:69:
87:61:af:ef:a0:07:9d:a2:dd:f8:19:da:1d:78:77:e6:45:3e:
32:67:34:7c:58:02:59:88:63:fb:8d:ff:ab:ea:1b:1b:6e:de:
bc:b5:cd:b4:87:28:ec:e8:57:61:45:b2:bc:80:d3:7e:ad:e3:
52:ed:be:b3:15:67:2a:4b:26:47:eb:b8:a5:d9:4a:34:2c:7b:
85:51:d5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:07:16 2025 by rpki-client