Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/BQSRgsrnX8JnjaCE0pOBIpQ5ebc.roa
File: BQSRgsrnX8JnjaCE0pOBIpQ5ebc.roa (raw, json)
Hash identifier: h3wwdJrizfCgG4S/e0JuPLlbVsXDFB1J+2NlIEyZmsM=
Subject key identifier: 05:04:91:82:CA:E7:5F:C2:67:8D:A0:84:D2:93:81:22:94:39:79:B7
Certificate issuer: /CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
Certificate serial: 019427479DB15F1A324600CC9CC1D8F4BD6F
Authority key identifier: F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/BQSRgsrnX8JnjaCE0pOBIpQ5ebc.roa
Signing time: Thu 02 Jan 2025 13:49:52 +0000
ROA not before: Thu 02 Jan 2025 13:49:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212815
IP address blocks: 91.250.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:9d:b1:5f:1a:32:46:00:cc:9c:c1:d8:f4:bd:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
Validity
Not Before: Jan 2 13:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05049182cae75fc2678da084d2938122943979b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:54:7e:16:72:21:07:34:86:d0:ff:39:ad:67:
a7:69:0a:91:9b:48:02:fc:21:08:14:ab:83:2f:12:
58:14:5d:5e:96:2d:1d:50:d5:f2:0f:94:3d:1e:44:
f2:e2:c0:a1:26:dd:86:e6:4e:dd:c4:99:3e:ed:00:
32:ea:8d:7f:7a:b7:76:5e:cd:61:b7:b3:0d:57:58:
77:6e:e5:39:f6:15:a3:15:6f:ab:a5:44:2b:11:54:
d3:ee:46:9a:3b:b2:2c:83:1f:07:14:1f:06:6e:4e:
f5:7a:5b:ee:a9:14:81:0a:e9:9b:f5:3d:c0:8e:a9:
5c:00:23:bc:97:b1:eb:97:be:a0:10:04:a4:64:54:
6c:65:69:92:8b:c9:e1:05:5a:2d:c3:ee:40:6e:76:
07:bd:af:f3:f8:67:81:21:93:21:9b:e8:29:a4:e5:
c5:71:d9:14:64:5a:93:bf:a7:6c:1c:b9:d0:91:95:
2b:3b:8e:da:dc:7a:11:9b:a3:0e:f4:33:f3:5d:f1:
4d:c0:fe:f9:9d:fe:9d:7c:36:24:22:fb:e2:dc:73:
43:88:d2:cf:f6:58:4d:29:2a:c5:36:ce:5b:08:70:
0a:8e:d7:8d:f4:3a:94:74:f4:69:dd:a0:9c:98:22:
0b:93:71:21:e8:0f:ee:ed:44:4a:5f:91:6d:13:09:
98:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:04:91:82:CA:E7:5F:C2:67:8D:A0:84:D2:93:81:22:94:39:79:B7
X509v3 Authority Key Identifier:
keyid:F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/BQSRgsrnX8JnjaCE0pOBIpQ5ebc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.250.253.0/24
Signature Algorithm: sha256WithRSAEncryption
19:4b:f6:d5:e1:f7:6f:6f:be:41:b3:79:c6:b4:ba:fc:bf:aa:
17:ec:21:18:8c:a8:0e:2c:61:bd:79:e7:95:62:7e:68:b4:d3:
d7:db:c9:3c:c5:b9:5d:d7:e0:02:f4:77:e0:7a:29:ae:36:29:
72:d3:90:72:34:cd:1b:de:c8:96:e2:2d:d9:90:06:1d:a5:b9:
79:06:54:a0:ef:06:df:c9:3c:40:45:fd:c8:e1:9f:0a:38:35:
af:8f:fb:86:8d:4e:76:20:c7:8e:17:0c:aa:ec:dd:88:4f:d7:
13:5c:63:f8:42:df:51:a4:f8:ca:c0:03:b0:b4:61:df:ac:a0:
1e:78:51:54:6b:4c:47:5f:7c:37:00:e9:ca:ec:e7:c6:23:55:
5f:51:61:d4:98:fb:ed:6c:2c:85:b9:ea:c8:37:65:85:00:09:
38:f7:2c:08:ae:79:d0:7b:ba:89:c2:28:6a:04:bd:5a:d1:74:
0c:5b:9e:e6:d6:08:90:2c:90:8e:cd:b3:4c:74:5d:0d:08:16:
f8:c8:fe:df:15:b2:a0:15:47:6e:79:6c:3b:a8:cc:46:6e:02:
26:c5:9b:e3:e2:2c:b4:06:c9:28:61:70:b0:66:28:ed:29:0c:
b0:15:b2:4d:d2:aa:d0:b3:7d:db:68:58:e0:c6:e8:fb:54:5c:
c2:32:f7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:36:26 2025 by rpki-client