Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/bgfztVWShrtQVnnUy79Uwf2ad-U.roa
File: bgfztVWShrtQVnnUy79Uwf2ad-U.roa (raw, json)
Hash identifier: 6rNqpGYtQ5hCAICw5R79FB5nCbidIpeSHwH6YCdW27k=
Subject key identifier: 6E:07:F3:B5:55:92:86:BB:50:56:79:D4:CB:BF:54:C1:FD:9A:77:E5
Certificate issuer: /CN=ab7aaabb23cd245bfa828fb02521d644c6d5b566
Certificate serial: 0194FAB216F75F6062BF3BE18AAFCC1FE1B5
Authority key identifier: AB:7A:AA:BB:23:CD:24:5B:FA:82:8F:B0:25:21:D6:44:C6:D5:B5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/bgfztVWShrtQVnnUy79Uwf2ad-U.roa
Signing time: Wed 12 Feb 2025 15:06:02 +0000
ROA not before: Wed 12 Feb 2025 15:06:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212318
IP address blocks: 88.218.112.0/22 maxlen: 24
93.179.88.0/22 maxlen: 24
178.57.65.0/24 maxlen: 24
178.57.66.0/23 maxlen: 24
178.57.68.0/24 maxlen: 24
185.217.37.0/24 maxlen: 24
2a0f:52c1::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:fa:b2:16:f7:5f:60:62:bf:3b:e1:8a:af:cc:1f:e1:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7aaabb23cd245bfa828fb02521d644c6d5b566
Validity
Not Before: Feb 12 15:06:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e07f3b5559286bb505679d4cbbf54c1fd9a77e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:0b:ec:8f:61:82:3d:9a:d1:45:35:e7:7d:2d:
27:d4:2f:aa:4b:fc:e7:3b:1e:19:08:da:86:af:e5:
8e:0d:6e:04:70:4a:4e:20:bc:85:f4:6c:de:f4:eb:
5f:87:6e:6d:c2:02:b3:68:e9:09:0b:2e:ec:22:17:
18:c7:9f:7e:8d:47:95:eb:d7:e9:a0:bf:65:6f:cb:
df:ef:fd:fd:70:f9:3a:72:0d:e2:85:07:ce:1c:b7:
1f:13:50:02:f0:8e:91:28:9e:fa:70:4f:9b:47:12:
cf:4d:83:fe:a7:50:94:c3:f9:5b:c5:36:33:84:50:
82:8e:7f:c6:4c:67:fe:a2:e0:5f:d7:46:da:b4:93:
f3:b7:e6:8b:3c:5d:d5:72:1d:93:14:f7:fb:34:fc:
e2:1d:22:ba:88:11:e5:84:98:8b:05:08:3b:3b:b9:
20:98:42:1d:0d:91:03:fb:eb:a5:cf:57:71:65:6f:
fa:12:a6:af:28:eb:98:03:ec:9d:fa:46:ed:0b:da:
f1:0f:3e:bf:62:f9:28:37:69:5e:0b:65:88:5e:d4:
48:47:47:ea:69:b5:ab:ab:2d:cf:43:ab:2d:c4:e8:
30:f6:91:b4:7a:cb:d4:bd:dd:e6:1d:e8:7f:46:76:
00:c1:38:de:a5:81:ec:7c:04:e9:76:43:72:61:a1:
ed:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:07:F3:B5:55:92:86:BB:50:56:79:D4:CB:BF:54:C1:FD:9A:77:E5
X509v3 Authority Key Identifier:
keyid:AB:7A:AA:BB:23:CD:24:5B:FA:82:8F:B0:25:21:D6:44:C6:D5:B5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/bgfztVWShrtQVnnUy79Uwf2ad-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.112.0/22
93.179.88.0/22
178.57.65.0-178.57.68.255
185.217.37.0/24
IPv6:
2a0f:52c1::/46
Signature Algorithm: sha256WithRSAEncryption
6b:7b:d6:d1:fd:2d:6d:a9:08:2f:7f:97:c1:da:ed:e1:ea:aa:
ef:32:9d:3e:b4:ca:fd:fe:22:9d:81:c8:27:f1:6c:0d:75:97:
cb:4a:36:ad:1e:16:58:a8:ef:47:3a:b3:92:be:b1:25:42:fa:
52:c2:08:b9:73:2b:26:1a:9d:23:bc:ca:d4:2a:5d:42:cd:e1:
5c:8f:8e:02:d4:f7:c7:97:67:06:24:cd:70:d4:6b:71:fb:c6:
b5:f2:65:13:61:09:c9:25:e5:ff:84:b3:32:dd:bf:60:84:8a:
e0:53:37:46:8e:74:e8:96:22:18:db:73:07:4f:ab:53:d6:0b:
f2:6c:9f:96:61:ed:b1:69:a8:04:99:3e:24:4e:81:d8:73:01:
10:d4:a8:dc:83:13:16:bc:b0:39:5b:6a:09:4a:88:c8:2d:2e:
96:51:41:53:f7:65:46:73:48:2f:94:0b:ce:1e:52:19:c9:b8:
f0:41:45:93:30:9e:4c:0d:92:fa:bb:cf:31:54:93:1e:38:a0:
8b:9e:e2:3a:2e:c6:5d:e9:e7:45:8c:23:6c:6b:3c:f8:98:05:
33:ff:c4:2f:26:86:0f:88:9a:a5:6d:8c:f3:0a:c0:71:32:00:
8f:00:ba:ee:df:4b:df:d4:e5:0c:73:2d:4f:bd:ec:9d:20:a1:
ed:f4:da:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:40:20 2025 by rpki-client