Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/bcgHeTecNhcHR9QWO6gmvpmmI5c.roa
File: bcgHeTecNhcHR9QWO6gmvpmmI5c.roa (raw, json)
Hash identifier: EV6/wlUYGCbS7xEazmx8eI5Bar/BgAFt51P9o3UlOuQ=
Subject key identifier: 6D:C8:07:79:37:9C:36:17:07:47:D4:16:3B:A8:26:BE:99:A6:23:97
Certificate issuer: /CN=a186a76a1899dbf9029e1aefd905177bb09d368d
Certificate serial: 01941F8C77678380D8904D27CC1D268ABE60
Authority key identifier: A1:86:A7:6A:18:99:DB:F9:02:9E:1A:EF:D9:05:17:7B:B0:9D:36:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYanahiZ2_kCnhrv2QUXe7CdNo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/bcgHeTecNhcHR9QWO6gmvpmmI5c.roa
Signing time: Wed 01 Jan 2025 01:48:06 +0000
ROA not before: Wed 01 Jan 2025 01:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6730
IP address blocks: 193.5.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYanahiZ2_kCnhrv2QUXe7CdNo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:77:67:83:80:d8:90:4d:27:cc:1d:26:8a:be:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a186a76a1899dbf9029e1aefd905177bb09d368d
Validity
Not Before: Jan 1 01:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6dc80779379c36170747d4163ba826be99a62397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1b:61:7e:e2:40:bf:d6:af:73:b2:d6:8d:e4:
84:25:0f:fa:2f:6a:19:38:3f:ab:f5:34:53:1c:d4:
59:08:18:11:1d:5e:9f:c4:14:9e:5b:88:c5:6f:c3:
17:f1:9a:ee:42:df:ae:0d:0b:d9:27:37:31:2a:4e:
e2:88:fa:21:0c:19:8c:31:38:49:67:88:03:7e:6f:
76:67:bf:46:1c:01:dc:fd:10:fe:a2:6f:0f:2f:63:
7f:56:56:f2:f7:b5:7a:73:fe:61:1f:dc:61:e4:a5:
05:7e:a4:26:40:b3:ec:3b:83:6e:18:da:34:74:e1:
17:86:28:2c:7c:8f:e9:20:c6:36:96:17:47:4a:20:
b1:36:d6:fb:45:a1:6b:d8:d0:37:33:12:3a:d8:da:
6b:21:f1:db:3f:39:59:01:53:c2:62:02:d3:21:1a:
fe:c3:3c:b7:b0:50:d5:46:cb:8e:5c:1e:9b:2d:d7:
43:18:7d:a5:ca:a1:80:cb:78:80:60:a3:58:36:92:
6b:5e:a5:df:d5:49:7f:28:40:cf:48:0f:ce:f3:3b:
53:0d:99:e8:2b:e9:2a:cd:bc:60:5e:1f:a6:02:7a:
e0:e8:5c:e1:42:b2:b8:70:2d:2a:67:c6:f4:dd:70:
08:e5:c4:b3:ac:bb:86:ae:8e:d9:df:59:59:62:48:
6d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C8:07:79:37:9C:36:17:07:47:D4:16:3B:A8:26:BE:99:A6:23:97
X509v3 Authority Key Identifier:
keyid:A1:86:A7:6A:18:99:DB:F9:02:9E:1A:EF:D9:05:17:7B:B0:9D:36:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYanahiZ2_kCnhrv2QUXe7CdNo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/bcgHeTecNhcHR9QWO6gmvpmmI5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.121.0/24
Signature Algorithm: sha256WithRSAEncryption
25:8e:45:03:43:2d:b9:0f:2c:6f:16:4b:bc:b1:51:23:c5:91:
6c:43:84:36:dd:27:b9:b7:26:bf:6f:6b:e2:ac:8b:e9:8e:ae:
40:77:e1:3e:7e:94:6a:82:84:f5:d7:3f:f7:9a:bd:c0:0c:b7:
1a:98:95:60:96:29:37:3e:47:03:2c:40:cc:95:b2:bb:90:cf:
6b:09:d1:d9:2a:a7:e4:e1:23:03:d8:d5:c6:05:d8:5b:37:d5:
8c:36:2c:1b:0e:be:de:7a:37:77:cb:5b:18:d3:61:10:c7:fc:
83:58:07:b4:31:81:bc:d0:fe:4b:6f:aa:23:8b:e7:ad:52:31:
96:1d:4f:ee:4a:f3:ff:38:49:35:e5:5f:09:69:76:64:00:4d:
73:21:8c:53:61:c6:09:8a:79:45:6d:b8:76:19:0d:9a:04:9b:
19:6e:64:70:04:67:f4:3d:e5:c9:33:9c:a3:7c:8c:b9:f8:84:
47:43:57:3f:1e:bd:f5:32:56:48:0d:80:3c:ba:78:5d:c7:34:
2b:24:f8:0a:e6:50:87:44:36:d1:57:fc:e6:f6:e5:39:b6:ad:
5e:eb:e3:82:d4:32:40:38:6a:b4:b4:13:8a:be:16:21:a7:0e:
e2:32:7e:e4:5f:07:9b:d5:92:c1:59:4b:84:b0:d9:80:84:2b:
33:9e:1a:31
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjHdng4DYkE0nzB0mir5gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExODZhNzZhMTg5OWRiZjkwMjllMWFlZmQ5MDUxNzdiYjA5
ZDM2OGQwHhcNMjUwMTAxMDE0ODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZGM4MDc3OTM3OWMzNjE3MDc0N2Q0MTYzYmE4MjZiZTk5YTYyMzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RthfuJAv9avc7LWjeSEJQ/6L2oZ
OD+r9TRTHNRZCBgRHV6fxBSeW4jFb8MX8ZruQt+uDQvZJzcxKk7iiPohDBmMMThJ
Z4gDfm92Z79GHAHc/RD+om8PL2N/Vlby97V6c/5hH9xh5KUFfqQmQLPsO4NuGNo0
dOEXhigsfI/pIMY2lhdHSiCxNtb7RaFr2NA3MxI62NprIfHbPzlZAVPCYgLTIRr+
wzy3sFDVRsuOXB6bLddDGH2lyqGAy3iAYKNYNpJrXqXf1Ul/KEDPSA/O8ztTDZno
K+kqzbxgXh+mAnrg6FzhQrK4cC0qZ8b03XAI5cSzrLuGro7Z31lZYkhtRQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG3IB3k3nDYXB0fUFjuoJr6ZpiOXMB8GA1UdIwQY
MBaAFKGGp2oYmdv5Ap4a79kFF3uwnTaNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1lhbmFoaVoyX2tDbmhydjJRVVhlN0NkTm8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS84NTk1YzgtNDgzNC00ZDU0LWEzOTEt
MzEyZTViNDkxMTQ2LzEvYmNnSGVUZWNOaGNIUjlRV082Z212cG1tSTVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS84NTk1YzgtNDgzNC00ZDU0LWEzOTEtMzEyZTViNDkxMTQ2
LzEvb1lhbmFoaVoyX2tDbmhydjJRVVhlN0NkTm8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQV5MA0G
CSqGSIb3DQEBCwUAA4IBAQAljkUDQy25DyxvFku8sVEjxZFsQ4Q23Se5tya/b2vi
rIvpjq5Ad+E+fpRqgoT11z/3mr3ADLcamJVglik3PkcDLEDMlbK7kM9rCdHZKqfk
4SMD2NXGBdhbN9WMNiwbDr7eejd3y1sY02EQx/yDWAe0MYG80P5Lb6oji+etUjGW
HU/uSvP/OEk15V8JaXZkAE1zIYxTYcYJinlFbbh2GQ2aBJsZbmRwBGf0PeXJM5yj
fIy5+IRHQ1c/Hr31MlZIDYA8unhdxzQrJPgK5lCHRDbRV/zm9uU5tq1e6+OC1DJA
OGq0tBOKvhYhpw7iMn7kXweb1ZLBWUuEsNmAhCsznhox
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:17:48 2025 by rpki-client