Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/bV79ILH--58gt9dtF00HeUq47cQ.roa
File: bV79ILH--58gt9dtF00HeUq47cQ.roa (raw, json)
Hash identifier: BXd8PPNvrrnDgtgq8CCIijNcvqOqsLnPItymUT1YKWE=
Subject key identifier: 6D:5E:FD:20:B1:FE:FB:9F:20:B7:D7:6D:17:4D:07:79:4A:B8:ED:C4
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 019420D5C7FD8485AE89792013AF4C04F073
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/bV79ILH--58gt9dtF00HeUq47cQ.roa
Signing time: Wed 01 Jan 2025 07:47:48 +0000
ROA not before: Wed 01 Jan 2025 07:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39303
IP address blocks: 193.135.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:c7:fd:84:85:ae:89:79:20:13:af:4c:04:f0:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jan 1 07:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d5efd20b1fefb9f20b7d76d174d07794ab8edc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:14:6a:d9:05:e5:0c:ef:20:c1:a0:b5:8d:2b:
a8:92:34:46:f5:ea:94:15:3f:cf:f0:0c:8e:be:94:
d6:07:de:93:f7:0c:1f:9e:f5:c9:11:eb:c4:ce:89:
a7:a0:0a:e9:8b:89:c8:c5:88:dc:01:fa:d0:04:4d:
a9:65:48:1e:0a:c5:ca:72:a2:08:8d:bf:1a:70:74:
15:72:51:26:cf:fc:5e:55:95:be:1d:b8:78:ab:5d:
c3:14:2e:4f:aa:6e:3a:6d:12:19:b8:aa:b7:d7:38:
0d:7d:a7:e6:53:09:2f:01:c2:47:7c:db:15:8c:33:
ef:67:93:4f:51:89:bd:7d:2a:2c:27:f0:d8:90:eb:
a4:21:a2:ce:b7:0f:8d:87:96:d3:66:73:de:2b:5c:
e1:6a:23:6b:1a:cf:d3:92:3c:4e:61:b0:32:dc:7c:
76:23:9a:8a:49:ef:7b:fa:55:78:02:8a:3c:31:82:
9d:ca:5c:d4:5d:cb:7b:63:5e:7d:97:39:42:c0:b9:
ec:d6:60:e0:ee:52:88:84:37:44:cd:d1:e6:d6:ef:
60:07:d6:3f:a6:6c:2f:96:1f:9b:a0:ab:bf:d0:19:
46:82:da:86:31:dc:73:04:a7:91:c5:a9:df:ba:d7:
38:29:38:94:d7:0a:3f:63:33:c5:c7:a0:dd:dd:54:
65:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:5E:FD:20:B1:FE:FB:9F:20:B7:D7:6D:17:4D:07:79:4A:B8:ED:C4
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/bV79ILH--58gt9dtF00HeUq47cQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.135.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:8b:78:d0:1b:82:ef:ec:95:5b:64:3d:1e:1b:d5:b3:cb:05:
20:68:0b:6c:23:34:79:04:62:a1:b3:91:c3:b1:cb:b1:47:9c:
e2:15:60:a6:d9:15:03:e5:52:51:75:4a:49:2c:21:79:ce:87:
fb:41:6b:7d:65:49:0f:36:24:25:df:1d:5b:48:19:c5:34:88:
0b:51:93:0a:41:6e:ce:d2:b3:5e:be:f4:d7:a5:57:98:b1:f7:
3d:97:6c:13:f9:ca:d6:c1:1c:a6:3b:1f:bd:29:52:8e:78:22:
98:17:1d:99:0b:2d:88:9d:c3:be:0d:73:6b:a2:d3:7e:5c:f7:
8c:87:54:5b:5e:33:d4:34:6f:bc:9a:0c:f6:3b:30:b0:5a:dc:
45:2a:c1:f1:b2:d1:5c:f9:96:e2:35:ae:fe:f1:29:64:91:fd:
53:59:85:c9:7b:11:f0:d8:c4:42:38:da:0c:d8:91:bf:7d:c9:
b4:92:72:e5:48:49:dd:c5:5b:a3:8b:c1:5e:70:81:5b:1e:45:
c4:f7:f6:4b:6e:11:20:0c:b8:24:3e:78:96:b6:43:87:64:46:
64:6a:d9:e1:52:0a:43:14:c8:04:37:35:1d:09:a1:00:5c:17:
6c:4b:91:6b:95:46:42:7c:85:e2:1d:61:2a:e2:9c:41:27:59:
3b:b3:4d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:00:39 2025 by rpki-client