Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/BF1OaGyaTyDLCWSklyxgYbn9nEs.roa
File: BF1OaGyaTyDLCWSklyxgYbn9nEs.roa (raw, json)
Hash identifier: AVER/BhL6ABrbQlRM/PyN/xXO4yBqy6qEwfqfNZn84A=
Subject key identifier: 04:5D:4E:68:6C:9A:4F:20:CB:09:64:A4:97:2C:60:61:B9:FD:9C:4B
Certificate issuer: /CN=42217a2d513a9fb0fce1a1cfc2b3c05c018bd8c1
Certificate serial: 019422FC3BEFA34A9120254EC9D9992A075B
Authority key identifier: 42:21:7A:2D:51:3A:9F:B0:FC:E1:A1:CF:C2:B3:C0:5C:01:8B:D8:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiF6LVE6n7D84aHPwrPAXAGL2ME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/BF1OaGyaTyDLCWSklyxgYbn9nEs.roa
Signing time: Wed 01 Jan 2025 17:49:03 +0000
ROA not before: Wed 01 Jan 2025 17:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 193.188.196.0/24 maxlen: 24
2001:67c:b80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiF6LVE6n7D84aHPwrPAXAGL2ME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:3b:ef:a3:4a:91:20:25:4e:c9:d9:99:2a:07:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42217a2d513a9fb0fce1a1cfc2b3c05c018bd8c1
Validity
Not Before: Jan 1 17:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=045d4e686c9a4f20cb0964a4972c6061b9fd9c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:dc:4d:46:c8:46:1a:a5:e0:23:04:63:77:f9:
4b:7a:f6:e4:b8:68:61:91:b2:ec:a7:7e:4a:d8:64:
7e:9c:a1:73:e1:3a:70:d0:60:55:a7:48:4b:f8:1c:
fa:05:61:2e:b6:0e:d3:93:eb:ae:fe:e5:57:50:41:
72:82:4e:66:e6:49:eb:5b:d5:2f:3b:36:54:7a:55:
72:65:26:38:c1:d8:3f:8d:bb:ab:0f:e5:eb:8d:b9:
70:bc:c8:ae:37:1e:46:91:90:82:51:6a:6e:70:da:
14:26:bb:bb:75:4a:9c:6c:58:98:f4:ea:3e:40:30:
3d:e0:2e:57:c8:01:9e:c4:8e:d0:a2:c5:67:c5:14:
47:96:21:ca:2e:c5:30:8e:4b:9e:6d:13:2c:98:2d:
97:60:3b:ab:80:cd:11:be:45:93:f6:ca:f8:22:73:
03:80:0f:4b:bb:46:e6:be:74:14:ba:ce:62:f9:23:
07:cd:b5:9f:8d:be:96:ab:37:d4:fa:94:9c:a1:87:
71:43:e0:d6:8e:1f:d8:7c:36:a3:09:33:c1:0e:cb:
a2:e7:82:4c:0e:6b:67:d2:2f:d0:ad:c5:b8:17:6b:
8c:ad:6d:93:01:84:13:dc:b3:aa:87:bf:b2:0b:5d:
c1:a8:0b:1e:01:a8:83:6d:d1:4f:09:fa:ba:76:94:
6d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:5D:4E:68:6C:9A:4F:20:CB:09:64:A4:97:2C:60:61:B9:FD:9C:4B
X509v3 Authority Key Identifier:
keyid:42:21:7A:2D:51:3A:9F:B0:FC:E1:A1:CF:C2:B3:C0:5C:01:8B:D8:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiF6LVE6n7D84aHPwrPAXAGL2ME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/BF1OaGyaTyDLCWSklyxgYbn9nEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.188.196.0/24
IPv6:
2001:67c:b80::/48
Signature Algorithm: sha256WithRSAEncryption
93:bb:17:fb:7a:63:fd:d4:3c:fe:30:b1:6a:a2:59:2b:47:9d:
55:d9:dd:be:f2:60:76:23:15:dd:58:6c:97:59:6d:0c:e1:b6:
7c:84:24:9b:de:df:1f:a8:dd:c4:b5:f9:6d:aa:59:49:b0:0d:
2b:49:55:7b:be:35:52:22:9f:f4:ff:ce:fb:7f:29:9e:15:5c:
b7:0c:62:36:00:a7:3e:b5:4e:65:e6:42:89:07:eb:bb:0e:a8:
d5:5c:f5:e4:47:ba:41:c9:7f:85:68:a5:44:95:e4:28:18:5f:
dd:63:6d:d2:76:d3:1c:10:7b:05:3d:65:1b:56:3c:34:64:43:
6f:c3:39:30:e5:bf:53:30:db:a7:bd:9d:c7:61:da:ae:ff:19:
fb:cf:2d:93:74:51:9d:fa:f0:d5:91:07:c2:de:fb:5b:3b:5f:
50:ea:2f:8e:3a:20:2b:f1:9a:b3:92:bc:ba:66:63:ca:26:ea:
08:9b:be:f0:fb:e5:2a:eb:f3:10:2d:66:fe:05:47:de:05:cf:
5a:25:25:96:e8:f3:5b:9a:24:4e:a1:50:ed:70:38:a3:b2:be:
d4:58:b7:8b:ed:c9:d8:02:e4:21:1c:37:93:08:95:44:60:a8:
9b:64:35:f9:44:77:17:21:19:b6:cf:b6:4b:a2:e6:45:47:55:
98:d5:4d:f6
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQi/Dvvo0qRICVOydmZKgdbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMjE3YTJkNTEzYTlmYjBmY2UxYTFjZmMyYjNjMDVjMDE4
YmQ4YzEwHhcNMjUwMTAxMTc0OTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDVkNGU2ODZjOWE0ZjIwY2IwOTY0YTQ5NzJjNjA2MWI5ZmQ5YzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dxNRshGGqXgIwRjd/lLevbkuGhh
kbLsp35K2GR+nKFz4Tpw0GBVp0hL+Bz6BWEutg7Tk+uu/uVXUEFygk5m5knrW9Uv
OzZUelVyZSY4wdg/jburD+XrjblwvMiuNx5GkZCCUWpucNoUJru7dUqcbFiY9Oo+
QDA94C5XyAGexI7QosVnxRRHliHKLsUwjkuebRMsmC2XYDurgM0RvkWT9sr4InMD
gA9Lu0bmvnQUus5i+SMHzbWfjb6WqzfU+pScoYdxQ+DWjh/YfDajCTPBDsui54JM
Dmtn0i/QrcW4F2uMrW2TAYQT3LOqh7+yC13BqAseAaiDbdFPCfq6dpRtIwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFARdTmhsmk8gywlkpJcsYGG5/ZxLMB8GA1UdIwQY
MBaAFEIhei1ROp+w/OGhz8KzwFwBi9jBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWlGNkxWRTZuN0Q4NGFIUHdyUEFYQUdMMk1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9mMTI1NTEtMjBjYy00MjE4LWE0MjYt
ZjQxZDZjMGM4NGI2LzEvQkYxT2FHeWFUeURMQ1dTa2x5eGdZYm45bkVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9mMTI1NTEtMjBjYy00MjE4LWE0MjYtZjQxZDZjMGM4NGI2
LzEvUWlGNkxWRTZuN0Q4NGFIUHdyUEFYQUdMMk1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwbzEMA8E
AgACMAkDBwAgAQZ8C4AwDQYJKoZIhvcNAQELBQADggEBAJO7F/t6Y/3UPP4wsWqi
WStHnVXZ3b7yYHYjFd1YbJdZbQzhtnyEJJve3x+o3cS1+W2qWUmwDStJVXu+NVIi
n/T/zvt/KZ4VXLcMYjYApz61TmXmQokH67sOqNVc9eRHukHJf4VopUSV5CgYX91j
bdJ20xwQewU9ZRtWPDRkQ2/DOTDlv1Mw26e9ncdh2q7/GfvPLZN0UZ368NWRB8Le
+1s7X1DqL446ICvxmrOSvLpmY8om6gibvvD75Srr8xAtZv4FR94Fz1olJZbo81ua
JE6hUO1wOKOyvtRYt4vtydgC5CEcN5MIlURgqJtkNflEdxchGbbPtkui5kVHVZjV
TfY=
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:46:16 2025 by rpki-client