Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/BMbNy19GeL1bX8neyMsJyK4aEIU.roa
File: BMbNy19GeL1bX8neyMsJyK4aEIU.roa (raw, json)
Hash identifier: kmgxNAiXL4L1yGKb+6c+ZIfWxCYiiahIHB6dWkzUY98=
Subject key identifier: 04:C6:CD:CB:5F:46:78:BD:5B:5F:C9:DE:C8:CB:09:C8:AE:1A:10:85
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 0194228DABD865F271ABC09E3A34519C3C6F
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/BMbNy19GeL1bX8neyMsJyK4aEIU.roa
Signing time: Wed 01 Jan 2025 15:48:17 +0000
ROA not before: Wed 01 Jan 2025 15:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201364
IP address blocks: 213.74.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:ab:d8:65:f2:71:ab:c0:9e:3a:34:51:9c:3c:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 1 15:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04c6cdcb5f4678bd5b5fc9dec8cb09c8ae1a1085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b0:3a:55:d3:f1:96:f8:b6:f8:6d:9b:ad:09:
28:c6:ab:d5:6b:9b:7d:53:ed:bd:d2:29:44:1e:58:
36:52:14:00:c1:cb:d5:66:c5:23:62:0f:4a:c7:7e:
c9:c2:1a:bb:88:e8:cf:cf:b1:f3:dd:c8:7d:86:a8:
7d:06:39:f7:6e:d9:23:ca:99:9d:6a:c6:8b:b8:09:
0a:85:f2:6e:b3:8c:26:26:0a:ae:a3:75:da:25:87:
cf:de:62:3f:ad:1c:10:e3:8e:67:d4:26:4a:59:da:
78:63:88:f4:40:53:16:ab:a3:95:b9:7d:68:aa:d8:
de:78:4b:f4:b0:b3:5a:49:d1:04:c9:60:ca:5a:89:
1f:34:a9:cd:c8:e4:8f:d2:ea:92:94:f9:0d:f7:a0:
78:e2:6e:bc:21:91:7b:8f:7e:dc:e0:31:59:6e:68:
13:28:a6:2c:40:7c:84:dc:3e:f9:b8:a7:8d:26:14:
6d:a3:30:27:af:a9:e3:e4:e5:6d:02:1b:83:80:8a:
e4:be:e4:03:f2:7c:35:59:18:e3:00:37:2c:38:4d:
95:a7:d6:2c:19:68:4b:7d:e0:8a:fe:e6:54:37:d7:
6a:91:22:2a:0b:68:67:2e:93:09:4f:9f:ec:53:7b:
d0:19:67:52:cb:de:eb:7d:c2:bc:d5:ef:6d:6c:16:
06:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C6:CD:CB:5F:46:78:BD:5B:5F:C9:DE:C8:CB:09:C8:AE:1A:10:85
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/BMbNy19GeL1bX8neyMsJyK4aEIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.74.40.0/24
Signature Algorithm: sha256WithRSAEncryption
59:7b:73:a0:ab:3d:d5:82:5f:d7:11:7f:cc:10:63:7c:9b:86:
6f:8f:cf:43:a9:65:35:8c:3f:71:aa:56:15:cb:47:15:d1:ad:
bf:b5:0d:cf:f4:cc:2c:96:33:2a:5a:d3:79:f5:4d:fd:06:c8:
37:74:56:a6:0d:04:57:f7:5c:2e:61:f5:56:71:8e:70:90:4f:
56:ac:6f:6c:89:74:ab:10:2f:d9:87:f0:8a:ab:1d:bb:8d:bb:
75:82:3b:95:4d:00:9b:71:ab:a8:12:14:ac:71:80:d2:39:1e:
62:8b:66:01:28:10:07:b9:c2:99:f9:f5:2a:1c:4b:e9:99:94:
28:f7:b0:0a:84:16:f2:d0:83:95:ca:1d:09:39:ab:a7:dd:68:
02:5d:54:d1:fa:6a:14:63:26:db:0f:2e:bf:42:60:b2:7f:31:
b7:b6:86:33:b6:a7:cc:49:8c:5f:27:5d:c5:e1:a1:9f:77:85:
23:7f:5c:28:f6:13:d2:6e:c8:07:2a:17:b0:9d:32:33:f2:61:
8c:d8:5a:ec:79:82:dc:3d:38:06:e9:74:3f:83:dd:ac:ab:76:
7a:b6:f4:91:7e:aa:02:1a:2d:fc:87:7d:72:37:b1:30:62:83:
d8:70:c6:4a:0b:e8:fa:29:18:51:d0:03:74:c4:af:9b:fb:e7:
b0:4f:03:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:13:59 2025 by rpki-client