Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/bapCvmKxdelU8tZ6N-tKCDOP9nc.roa
File: bapCvmKxdelU8tZ6N-tKCDOP9nc.roa (raw, json)
Hash identifier: VCq5gvHvFWolaPnUftzl/5TniUIyPDLiIdSVxN63Njg=
Subject key identifier: 6D:AA:42:BE:62:B1:75:E9:54:F2:D6:7A:37:EB:4A:08:33:8F:F6:77
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 0194258FA3C2E0511ADFE0CA8E65B9FB86F5
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/bapCvmKxdelU8tZ6N-tKCDOP9nc.roa
Signing time: Thu 02 Jan 2025 05:49:18 +0000
ROA not before: Thu 02 Jan 2025 05:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61239
IP address blocks: 80.253.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a3:c2:e0:51:1a:df:e0:ca:8e:65:b9:fb:86:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Jan 2 05:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6daa42be62b175e954f2d67a37eb4a08338ff677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:66:f2:a0:65:96:52:9e:d3:ad:2e:60:65:66:
3a:33:9d:81:01:02:2d:12:fb:cb:0b:76:63:3a:64:
e6:99:b6:2d:d3:5a:21:0d:18:46:5e:3b:fb:39:c5:
24:2a:4b:72:45:bc:50:8a:1f:97:34:9b:5f:e4:8e:
33:a9:47:18:2a:18:74:aa:e9:ad:be:62:27:b2:2b:
f6:f3:f7:83:ff:92:7a:2b:f6:21:cc:d0:7c:dd:f0:
ff:06:60:a1:2f:8c:93:99:87:d7:b7:37:d1:b0:32:
25:0a:19:c2:b5:77:4c:68:9e:a8:6b:de:42:e5:de:
7d:50:c8:86:91:3e:bc:f5:70:2b:dd:cf:ab:fa:ae:
ac:ef:f1:9a:9f:1d:e2:4e:ff:d1:c8:7e:f0:cb:d2:
fd:e4:6c:29:c4:8a:48:cc:60:e8:04:66:1c:a3:e6:
52:5d:33:33:98:63:a3:71:06:66:72:c6:da:eb:4e:
f0:85:3e:55:e2:33:c4:ab:2a:d9:07:be:5d:d3:8e:
56:71:d9:82:68:dd:41:9f:86:38:6b:8c:b1:9b:25:
21:09:ad:a6:58:1f:16:39:c5:ec:e4:70:68:9b:cd:
9a:95:0f:e3:a8:8a:ba:a9:b2:9d:d5:ed:89:e7:6b:
4c:7f:08:5d:d8:c7:5a:69:0d:4b:e5:63:54:d6:85:
62:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:AA:42:BE:62:B1:75:E9:54:F2:D6:7A:37:EB:4A:08:33:8F:F6:77
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/bapCvmKxdelU8tZ6N-tKCDOP9nc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.159.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:5f:86:48:08:76:d3:f0:40:de:a8:ee:59:94:8b:ad:97:12:
00:c9:30:43:a6:7e:64:39:8e:09:fb:c9:75:c7:ac:44:67:97:
d1:48:cb:2d:70:c4:45:a2:ed:49:98:ec:de:e0:dc:bc:76:9b:
cd:ee:00:02:93:9b:7d:36:d5:d4:15:78:ba:b5:43:4e:7d:f5:
ef:5d:ae:d7:43:10:01:27:16:a7:5b:bc:4b:8a:65:d1:69:24:
be:0c:ab:a3:80:2e:54:11:0a:7e:0a:e9:28:8f:f0:7d:0a:a7:
5f:be:8d:f8:13:bd:df:0f:63:4d:5a:51:81:d7:4b:8a:30:3b:
db:2b:e2:46:87:71:d2:43:e8:6e:0f:f8:d5:8b:d1:c9:25:fb:
71:98:15:ea:25:94:36:74:ca:d3:85:16:db:76:09:a4:6e:e0:
a7:84:e6:8a:36:ed:04:51:ac:04:f1:99:ae:33:7f:26:b6:4a:
bb:1a:43:c8:f0:28:f4:e8:46:a4:09:39:bd:d4:d8:56:1d:a5:
16:d9:79:b3:90:b3:b0:ff:77:a7:31:81:1d:77:fc:24:91:cd:
56:30:99:52:d2:a1:71:12:86:4e:41:e0:be:e8:19:d0:0b:93:
ac:0f:c9:4b:79:51:7f:5d:0d:ca:ec:da:91:41:f7:2f:7f:72:
9b:d5:d4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:01:02 2025 by rpki-client