Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/94f98c-c1d1-4fe2-9adc-a010d8e4faf0/1/BlMPV4TbFy0S3lLdYLP0zmdpvf4.roa
File: BlMPV4TbFy0S3lLdYLP0zmdpvf4.roa (raw, json)
Hash identifier: FX2tFGx6ls8P2UDOzXsC/mVC7xk+xWljqYmpj+Cau/U=
Subject key identifier: 06:53:0F:57:84:DB:17:2D:12:DE:52:DD:60:B3:F4:CE:67:69:BD:FE
Certificate issuer: /CN=d9c9baf46d6c94d27ce128da3b65b5a3b06db38b
Certificate serial: 0194274814B6982C4A1A55E9D8B34720FEF4
Authority key identifier: D9:C9:BA:F4:6D:6C:94:D2:7C:E1:28:DA:3B:65:B5:A3:B0:6D:B3:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2cm69G1slNJ84SjaO2W1o7Bts4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/94f98c-c1d1-4fe2-9adc-a010d8e4faf0/1/BlMPV4TbFy0S3lLdYLP0zmdpvf4.roa
Signing time: Thu 02 Jan 2025 13:50:22 +0000
ROA not before: Thu 02 Jan 2025 13:50:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212122
IP address blocks: 185.228.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/94f98c-c1d1-4fe2-9adc-a010d8e4faf0/1/2cm69G1slNJ84SjaO2W1o7Bts4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/94f98c-c1d1-4fe2-9adc-a010d8e4faf0/1/2cm69G1slNJ84SjaO2W1o7Bts4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2cm69G1slNJ84SjaO2W1o7Bts4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 22:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:14:b6:98:2c:4a:1a:55:e9:d8:b3:47:20:fe:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9c9baf46d6c94d27ce128da3b65b5a3b06db38b
Validity
Not Before: Jan 2 13:50:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06530f5784db172d12de52dd60b3f4ce6769bdfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:02:92:47:7a:52:0b:1b:35:c7:9e:5f:56:7a:
4e:b1:04:91:f0:05:57:5c:ea:3b:6a:7a:9b:11:9b:
9b:7b:8b:e0:6d:d3:e2:73:72:7c:47:49:57:da:b8:
29:6f:cc:b0:47:bc:00:c2:e8:c2:a9:f0:9f:46:30:
7c:6f:f7:97:60:93:a6:c9:67:f0:62:56:73:4b:56:
aa:56:8e:2e:06:43:00:fd:63:29:88:0d:c4:f4:05:
f3:b4:03:ca:91:24:6d:54:7c:d8:35:1d:05:af:7b:
de:d2:c1:ea:b0:be:98:bd:9d:d2:b5:7e:2e:1f:a2:
c1:48:e8:22:12:e5:32:8b:c8:fe:93:7a:4e:e1:55:
37:28:77:98:e9:7b:8b:0d:d2:45:be:5b:70:a2:c9:
c5:d8:78:1e:4e:8f:1b:e9:23:29:32:0f:5f:de:30:
a8:81:a3:91:32:ee:97:46:82:f2:4b:b6:c1:12:42:
9c:bd:94:b8:57:37:8e:29:a6:cc:75:7b:a6:21:8e:
e3:25:fe:5f:ab:33:e6:04:0a:6d:ca:92:e6:60:54:
a9:06:88:60:7d:5a:c7:ec:da:fa:f4:5a:4e:d2:97:
48:46:be:0d:e0:26:33:61:07:a4:f7:e5:df:78:61:
f6:df:d7:2e:96:e0:3f:09:0f:fa:a8:ec:34:f0:58:
24:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:53:0F:57:84:DB:17:2D:12:DE:52:DD:60:B3:F4:CE:67:69:BD:FE
X509v3 Authority Key Identifier:
keyid:D9:C9:BA:F4:6D:6C:94:D2:7C:E1:28:DA:3B:65:B5:A3:B0:6D:B3:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2cm69G1slNJ84SjaO2W1o7Bts4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/94f98c-c1d1-4fe2-9adc-a010d8e4faf0/1/BlMPV4TbFy0S3lLdYLP0zmdpvf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/94f98c-c1d1-4fe2-9adc-a010d8e4faf0/1/2cm69G1slNJ84SjaO2W1o7Bts4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.249.0/24
Signature Algorithm: sha256WithRSAEncryption
30:a6:22:4c:18:79:7e:06:b1:98:2d:04:2e:a2:9e:68:8e:5b:
4f:cb:fb:fd:1e:e0:1c:63:a2:9b:37:8f:02:99:49:2b:71:6a:
1f:8d:9d:19:48:12:7e:f0:74:e1:bd:0b:c0:2f:14:b2:6c:5c:
9a:03:ea:cb:4b:57:36:c7:73:51:1f:09:53:96:4b:37:b4:61:
59:26:f9:11:d4:4e:77:8a:e5:9c:d3:ed:24:0e:b0:56:b3:da:
db:2d:f0:16:28:3d:1f:a8:25:67:2f:16:0c:f8:73:6e:7f:6d:
96:99:f9:cd:df:eb:ff:e3:0b:b1:ad:52:df:c4:7d:58:e4:64:
55:df:6d:59:9a:9f:c7:71:8f:57:08:27:1e:96:57:ff:54:9f:
3a:34:cf:85:97:e1:83:d9:a7:53:79:ea:91:96:7d:76:16:3a:
b9:83:48:21:88:71:a9:9e:59:54:85:b6:11:00:fa:1f:06:f1:
e0:d8:e8:2e:a2:3a:42:5d:6d:f2:c4:0f:82:d3:67:66:75:bd:
e9:98:ad:2a:70:93:e1:56:62:7d:6c:0d:01:e8:5b:d6:ae:cf:
cb:94:da:c6:0a:ff:99:05:53:08:3f:cf:ee:ac:6d:a8:b9:43:
4a:f5:5e:3a:3a:2d:e5:b3:df:84:5c:71:bb:ab:3e:12:2b:31:
1b:de:75:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:55:01 2025 by rpki-client