Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/BVOoOEB4gLobrgdxyI5-9zlLWgE.roa
File: BVOoOEB4gLobrgdxyI5-9zlLWgE.roa (raw, json)
Hash identifier: pTz91HcnSysQwLiCozFtJaXWh/WUZ9JSyAK8aIEd67c=
Subject key identifier: 05:53:A8:38:40:78:80:BA:1B:AE:07:71:C8:8E:7E:F7:39:4B:5A:01
Certificate issuer: /CN=c285a1474e38627e301a551be34efa4582a5cf39
Certificate serial: 019423D6BB8FA90BC06FB4EE0D6A16FEE8E0
Authority key identifier: C2:85:A1:47:4E:38:62:7E:30:1A:55:1B:E3:4E:FA:45:82:A5:CF:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/woWhR044Yn4wGlUb4076RYKlzzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/BVOoOEB4gLobrgdxyI5-9zlLWgE.roa
Signing time: Wed 01 Jan 2025 21:47:42 +0000
ROA not before: Wed 01 Jan 2025 21:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201419
IP address blocks: 81.173.43.0/24 maxlen: 24
185.62.162.0/23 maxlen: 23
2a03:522::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/woWhR044Yn4wGlUb4076RYKlzzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 12:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:bb:8f:a9:0b:c0:6f:b4:ee:0d:6a:16:fe:e8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c285a1474e38627e301a551be34efa4582a5cf39
Validity
Not Before: Jan 1 21:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0553a838407880ba1bae0771c88e7ef7394b5a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:51:14:ab:cb:65:21:6d:dc:c2:61:7c:57:3c:
b9:f6:94:2b:d7:8a:92:c6:b7:74:1b:58:0b:35:48:
72:48:b5:76:7b:04:92:c5:6e:91:05:66:b0:09:dd:
fc:66:70:59:68:ca:2f:2a:c9:b2:b2:ef:65:b5:8d:
bd:93:7a:7b:60:8e:ca:c9:5d:2b:fa:28:f6:29:f3:
3d:95:25:de:ac:84:b5:e6:30:8f:d5:aa:46:3d:01:
f4:56:c0:d5:ee:47:99:3f:f5:3f:85:ec:6a:77:a7:
78:eb:f2:e4:56:95:7e:93:62:11:81:a5:d9:b9:ec:
29:4e:b2:29:10:90:a4:69:d7:e3:85:83:08:9e:ef:
88:da:2a:66:36:90:86:5b:d1:0b:60:8f:f8:d2:ef:
b4:7a:7b:6d:66:af:4e:0d:35:e6:ca:00:95:b6:69:
50:92:8f:19:dd:9f:19:6e:21:93:4e:81:73:a7:44:
9a:fe:d3:36:58:d5:6c:e1:42:d7:5f:32:9b:99:4b:
ec:6e:dc:b1:4c:58:65:60:87:cc:c7:d8:c6:68:c9:
d2:b1:e2:02:c6:5d:e4:9b:2a:7e:6c:26:2e:c6:9d:
4a:46:25:db:e4:8e:9a:ef:8a:88:28:3c:d1:aa:9a:
ad:67:a9:ed:90:a2:2b:2c:0e:7a:ad:9a:28:78:16:
12:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:53:A8:38:40:78:80:BA:1B:AE:07:71:C8:8E:7E:F7:39:4B:5A:01
X509v3 Authority Key Identifier:
keyid:C2:85:A1:47:4E:38:62:7E:30:1A:55:1B:E3:4E:FA:45:82:A5:CF:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/woWhR044Yn4wGlUb4076RYKlzzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/BVOoOEB4gLobrgdxyI5-9zlLWgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.173.43.0/24
185.62.162.0/23
IPv6:
2a03:522::/32
Signature Algorithm: sha256WithRSAEncryption
00:32:5c:f0:78:c5:30:d3:f5:63:cb:9c:71:a2:8b:d4:f7:a0:
1e:0e:86:d5:36:09:f2:4a:92:d5:f3:b8:7e:03:b1:5b:f1:d4:
3f:73:c6:e1:ff:eb:e3:93:9f:bc:6b:cb:47:66:6e:30:c5:cd:
46:fb:54:99:96:d8:a7:05:38:6e:58:d5:47:fd:bf:4e:1c:5a:
75:f6:3e:35:69:c9:74:b3:27:3e:47:ac:a2:9d:9b:63:19:6b:
ef:5f:91:27:93:ab:be:50:c9:5c:28:63:0b:46:45:a8:ad:44:
41:7e:03:c2:cc:c5:ce:d1:26:e5:b1:28:c3:df:01:2c:44:49:
fd:e9:2d:b5:cd:0d:4f:47:87:67:64:ab:40:d1:5d:0d:f5:84:
f1:ef:d0:f0:f5:62:24:71:8d:41:82:a8:cf:02:07:11:88:76:
b6:0d:13:51:3a:67:61:0f:96:0c:ca:89:82:75:fb:de:3e:98:
ee:eb:cb:8b:ce:70:12:4c:4d:1e:fe:25:b8:d9:cc:af:df:d9:
b8:15:38:42:82:2e:71:3e:47:fd:ee:f5:f4:b2:4e:04:76:ad:
33:37:ef:18:89:b9:e0:34:48:ee:44:ca:dc:df:dc:d9:39:d7:
00:06:56:08:07:60:cd:96:24:47:cc:3d:d3:d5:14:a9:08:2d:
65:cf:6b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:55:19 2025 by rpki-client