Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/BorusD87l5J2TYxre3Gw8ED14c0.roa
File: BorusD87l5J2TYxre3Gw8ED14c0.roa (raw, json)
Hash identifier: xxXysVTbA/0WGCy4sb2ruRMVMBKnhW6YWf0n8anG8zk=
Subject key identifier: 06:8A:EE:B0:3F:3B:97:92:76:4D:8C:6B:7B:71:B0:F0:40:F5:E1:CD
Certificate issuer: /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Certificate serial: 0194252179D561F7B70CBE3439F707E59F6B
Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/BorusD87l5J2TYxre3Gw8ED14c0.roa
Signing time: Thu 02 Jan 2025 03:48:57 +0000
ROA not before: Thu 02 Jan 2025 03:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39346
IP address blocks: 85.204.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 07:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:79:d5:61:f7:b7:0c:be:34:39:f7:07:e5:9f:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Validity
Not Before: Jan 2 03:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=068aeeb03f3b9792764d8c6b7b71b0f040f5e1cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:50:f3:24:cf:3c:0c:1b:67:25:64:72:9a:36:
fb:02:70:ce:4a:0d:ba:85:38:3d:0e:bf:64:2d:de:
22:93:d8:bc:ab:b7:f2:06:f0:22:29:64:ab:96:99:
1a:fc:11:f4:35:3f:79:9c:68:3f:e2:43:4b:99:f1:
47:6c:1d:92:b7:bd:37:f4:21:3a:af:ca:07:90:d3:
e2:a2:ab:68:7f:63:01:84:4b:3d:18:11:c5:bc:0c:
8a:01:d5:13:5d:f8:34:e4:0e:95:9d:4f:a7:a3:c0:
b3:be:43:1f:e9:58:a3:50:39:ef:f4:0f:c1:49:10:
4c:d0:90:1a:2e:b0:91:63:4c:65:d3:7b:d7:2c:aa:
c4:71:fa:94:45:96:b9:71:e3:3b:86:83:bd:0b:f7:
0f:7b:ae:14:87:de:ab:df:51:9b:0f:12:dc:91:0e:
8b:29:ba:bb:65:0b:cf:ab:7f:75:c8:ef:de:50:cc:
45:62:05:3d:2f:19:fc:fa:b9:db:5d:57:0d:80:e5:
f3:1d:0a:6f:06:a7:14:25:60:a1:86:c2:9d:ff:46:
c4:64:15:2e:93:24:3f:73:86:7f:55:b1:41:9b:48:
cd:37:3f:7f:49:5f:28:95:39:fa:89:0a:47:c5:ce:
47:d9:e4:50:9f:ec:f9:6b:a1:17:24:1a:63:5b:3b:
bf:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:8A:EE:B0:3F:3B:97:92:76:4D:8C:6B:7B:71:B0:F0:40:F5:E1:CD
X509v3 Authority Key Identifier:
keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/BorusD87l5J2TYxre3Gw8ED14c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.139.0/24
Signature Algorithm: sha256WithRSAEncryption
89:ce:7d:0e:8b:14:b1:cb:68:e5:77:4f:93:75:98:f1:d2:32:
ef:c7:5c:b4:b1:9e:29:5d:72:1f:b6:93:08:53:b0:81:10:5a:
29:1b:f9:95:7b:d6:80:f5:56:9f:ae:e9:f1:0c:a2:15:77:6c:
42:71:96:bd:6b:9f:62:af:9f:91:80:23:fd:88:ab:6f:5b:68:
af:73:27:a9:0d:6a:a3:13:4a:0a:8f:ca:03:f0:66:8f:ed:b0:
3b:b7:6d:fa:41:5c:f4:a3:53:a9:50:0f:f2:9f:ae:b9:9c:53:
95:a6:b8:8c:62:26:5e:f1:d5:9c:c7:1e:ec:52:89:a3:10:43:
26:b3:4a:e7:4e:c6:cb:f5:ba:8d:57:68:99:1c:30:0d:70:1b:
d6:8c:12:73:bd:dc:8f:5f:6b:54:ef:9e:cc:25:11:ae:ba:1f:
0d:05:d8:7b:23:d8:20:76:c1:9d:87:3f:a9:5f:7e:71:03:af:
5f:65:b0:c1:4c:1c:26:27:f7:42:ce:58:a0:62:aa:dc:4a:cf:
1c:8b:2f:d3:ee:a5:ad:14:7a:c6:37:fd:3a:60:28:0f:fa:ae:
11:17:d8:de:7a:16:c5:6d:79:8f:f0:b7:e7:c5:03:a5:01:1e:
e3:9b:74:06:8f:ee:ce:26:24:7e:26:6a:53:bc:24:34:bb:eb:
44:37:ed:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:16:16 2025 by rpki-client