Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/BWB6GN7D13HqBruvqbROWWp6xA0.roa
File: BWB6GN7D13HqBruvqbROWWp6xA0.roa (raw, json)
Hash identifier: qfYxB0fYVpA0UPvKTjqwnZ7wxUGPibhuAVf2AwiqcvM=
Subject key identifier: 05:60:7A:18:DE:C3:D7:71:EA:06:BB:AF:A9:B4:4E:59:6A:7A:C4:0D
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01942369AAB4534A060946597C16AB875B3C
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/BWB6GN7D13HqBruvqbROWWp6xA0.roa
Signing time: Wed 01 Jan 2025 19:48:35 +0000
ROA not before: Wed 01 Jan 2025 19:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59892
IP address blocks: 89.39.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:aa:b4:53:4a:06:09:46:59:7c:16:ab:87:5b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 19:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05607a18dec3d771ea06bbafa9b44e596a7ac40d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:30:2e:7d:89:36:3d:98:47:79:e7:fb:39:d7:
28:b3:44:5d:18:65:46:b7:4b:82:28:97:93:e2:2b:
0c:9c:bc:f8:d0:25:44:35:98:b3:f1:b8:68:00:e6:
42:72:2b:66:fd:0e:e3:ac:1a:17:09:7e:26:5b:41:
9b:b7:76:f8:b2:18:b6:a4:ae:98:4b:ce:62:61:48:
c9:b1:15:83:0f:b5:ee:ba:f2:03:a6:bf:e5:a6:fb:
48:db:69:d7:25:cd:43:20:5e:d0:c1:8c:db:21:ba:
d2:d6:a5:a9:19:93:78:de:a0:1b:f3:23:f0:5a:d2:
03:de:a3:01:df:33:c2:f7:6f:6a:47:bb:a3:5b:fb:
02:04:92:22:bc:c7:77:f8:c7:d9:f4:1f:86:4a:cb:
ef:f9:07:52:19:73:f5:56:01:95:9c:92:c1:6f:81:
fb:56:d1:23:d6:3c:64:1d:0d:0f:16:f1:18:97:58:
82:f5:10:1a:60:29:e7:c2:91:8f:85:eb:c7:3b:a3:
a8:f6:00:fb:3c:16:1f:21:cf:c0:02:27:f7:be:e5:
12:05:cb:0a:32:82:b1:a6:19:1c:e0:0c:d0:a3:c1:
cc:85:52:fd:7e:2b:c5:0c:39:c6:1f:a6:79:87:6c:
56:93:91:41:a8:03:fc:d4:29:42:ac:3a:18:cf:09:
0f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:60:7A:18:DE:C3:D7:71:EA:06:BB:AF:A9:B4:4E:59:6A:7A:C4:0D
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/BWB6GN7D13HqBruvqbROWWp6xA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.190.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:f4:1a:7c:0e:60:ff:aa:85:57:5a:e4:22:97:12:02:b2:0a:
52:90:c7:d6:f3:ba:ba:7e:1f:3f:f0:87:54:f1:c9:ca:68:f9:
3c:40:be:81:77:54:12:66:f1:e4:b8:d5:b8:a7:2e:3e:3a:05:
6b:a4:cb:80:2d:36:e6:ba:39:3f:8e:5e:3f:43:13:de:e5:04:
65:ed:21:d6:02:40:3a:4d:4c:5d:9b:08:6f:c6:37:ee:f8:02:
c1:28:f8:fa:aa:56:ed:f7:1e:26:26:65:78:bb:df:1c:a8:7e:
9d:2e:23:e6:4e:15:5f:88:a0:f7:5a:ec:fa:bb:9a:51:ec:17:
71:69:52:f5:72:b1:3a:3e:15:be:e6:04:b5:2b:fd:69:b3:f3:
9b:d3:fd:90:ee:d2:fa:45:d6:e0:84:ea:95:07:2a:1e:51:48:
0e:8f:ae:d7:32:8c:2e:5c:c1:9d:39:61:24:ff:ba:e9:83:e1:
81:1e:50:ff:ab:66:38:fb:1f:e5:81:52:ab:19:aa:8d:27:aa:
31:72:b1:af:84:9c:e2:79:f2:da:a1:75:45:bc:8a:6e:09:eb:
d5:92:b1:68:77:64:0a:0e:88:7b:01:64:ba:a1:ed:2b:9b:51:
9c:02:be:18:72:d6:53:f6:fc:f6:4a:7f:29:cd:12:39:9f:42:
7f:cc:f3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:14 2025 by rpki-client