Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/bApeGU9pDTxTCcxiN5J5ipRkqMI.roa
File: bApeGU9pDTxTCcxiN5J5ipRkqMI.roa (raw, json)
Hash identifier: NZoPIqG6nJxYq38KIr9pSvoBY19L9DXRzBM19WHpf7I=
Subject key identifier: 6C:0A:5E:19:4F:69:0D:3C:53:09:CC:62:37:92:79:8A:94:64:A8:C2
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 019421B1DCB53C9C325FA485E8D04D454C9A
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/bApeGU9pDTxTCcxiN5J5ipRkqMI.roa
Signing time: Wed 01 Jan 2025 11:48:11 +0000
ROA not before: Wed 01 Jan 2025 11:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60097
IP address blocks: 46.107.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:dc:b5:3c:9c:32:5f:a4:85:e8:d0:4d:45:4c:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 1 11:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c0a5e194f690d3c5309cc623792798a9464a8c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a0:94:c6:89:b1:3f:7b:fa:de:86:65:f4:a0:
5d:c5:33:d9:56:88:b2:67:6f:be:d4:8b:c4:cf:f9:
0c:d3:69:b0:af:17:5f:29:bd:a8:86:14:a4:27:2e:
f6:6b:5c:c0:18:89:6a:e1:07:34:63:5c:ab:f2:d5:
c0:ef:f6:19:cf:67:b5:dc:62:df:b2:64:ab:58:83:
75:24:06:c3:08:37:d5:c6:d0:b4:bd:64:8d:31:b6:
e4:25:c2:b4:78:33:16:46:92:64:7d:88:e6:77:ce:
34:59:a1:0f:c6:c3:93:3d:5f:11:2f:c4:48:ef:24:
b8:83:d8:b8:49:e6:08:58:a5:69:d7:22:e5:8a:b7:
b7:13:02:de:58:9f:25:ce:6f:62:58:f0:b8:f6:6e:
12:46:eb:f0:a2:cc:ee:34:9b:f1:38:b4:6d:ec:92:
bf:95:d7:1e:97:8a:b0:20:f6:dc:01:45:14:92:c4:
aa:eb:07:8f:a2:2c:d2:7d:cf:0d:0b:d4:5e:ab:5d:
44:86:1d:26:04:10:24:5d:eb:78:26:7c:a5:c3:25:
87:62:f5:fc:af:93:bd:e8:1c:11:c0:a7:22:c3:bc:
08:b5:0c:be:9e:de:75:ac:62:c6:32:e8:79:fe:43:
0e:30:2a:d6:91:0b:4f:85:12:9a:18:4d:46:01:1e:
89:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:0A:5E:19:4F:69:0D:3C:53:09:CC:62:37:92:79:8A:94:64:A8:C2
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/bApeGU9pDTxTCcxiN5J5ipRkqMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.107.239.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:e7:24:bb:54:d8:d2:ef:85:ac:41:e0:7e:6b:12:3e:c2:25:
e4:46:47:40:e7:47:be:eb:56:9f:82:b5:16:3e:81:56:7b:6a:
c0:4c:97:18:aa:51:a2:9c:79:09:cb:f8:11:6f:73:d2:c9:e4:
a8:31:c5:02:75:39:e9:80:31:6a:b3:9c:24:9d:f3:9c:22:da:
fc:ef:89:ec:f3:a3:b7:99:de:13:0e:66:53:e6:a9:24:16:d4:
ff:78:4d:69:ab:60:b7:45:a3:00:20:fa:43:44:5f:67:57:1b:
43:c8:de:c6:68:3a:d2:39:b0:2c:f8:cd:5c:31:59:3e:06:7c:
97:79:55:4d:04:c2:db:ba:fc:30:65:9f:d8:89:6f:40:d0:f6:
5d:5b:c2:6a:02:9e:98:46:3d:d5:c8:11:4f:00:f2:65:0d:b6:
6d:54:aa:b0:79:2f:da:a7:3a:af:3c:4f:12:f3:13:6b:1a:f2:
71:65:35:f4:fe:25:30:73:15:eb:30:1e:4c:17:e1:80:1b:26:
69:3b:e8:da:38:87:c8:fe:fa:98:1a:50:6e:84:36:8a:a7:c5:
0e:7e:b9:99:1f:6a:14:ac:6a:ac:42:98:7c:c1:24:df:0f:02:
43:5b:d9:41:38:50:7c:21:6e:6a:3a:8c:1d:87:b0:fe:1a:45:
c6:08:c3:98
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsdy1PJwyX6SF6NBNRUyaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMmRhYzYwNWY0NjU5NzE4YzBhMTVlMWY3MzJjYmQ0ZjQ4
YWFlN2IwHhcNMjUwMTAxMTE0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzBhNWUxOTRmNjkwZDNjNTMwOWNjNjIzNzkyNzk4YTk0NjRhOGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqCUxomxP3v63oZl9KBdxTPZVoiy
Z2++1IvEz/kM02mwrxdfKb2ohhSkJy72a1zAGIlq4Qc0Y1yr8tXA7/YZz2e13GLf
smSrWIN1JAbDCDfVxtC0vWSNMbbkJcK0eDMWRpJkfYjmd840WaEPxsOTPV8RL8RI
7yS4g9i4SeYIWKVp1yLlire3EwLeWJ8lzm9iWPC49m4SRuvwoszuNJvxOLRt7JK/
ldcel4qwIPbcAUUUksSq6wePoizSfc8NC9Req11Ehh0mBBAkXet4JnylwyWHYvX8
r5O96BwRwKciw7wItQy+nt51rGLGMuh5/kMOMCrWkQtPhRKaGE1GAR6JQQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGwKXhlPaQ08UwnMYjeSeYqUZKjCMB8GA1UdIwQY
MBaAFPAtrGBfRllxjAoV4fcyy9T0iq57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYt
MjkyYWU0NmU2MzAyLzEvYkFwZUdVOXBEVHhUQ2N4aU41SjVpcFJrcU1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYtMjkyYWU0NmU2MzAy
LzEvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALmvvMA0G
CSqGSIb3DQEBCwUAA4IBAQB+5yS7VNjS74WsQeB+axI+wiXkRkdA50e+61afgrUW
PoFWe2rATJcYqlGinHkJy/gRb3PSyeSoMcUCdTnpgDFqs5wknfOcItr874ns86O3
md4TDmZT5qkkFtT/eE1pq2C3RaMAIPpDRF9nVxtDyN7GaDrSObAs+M1cMVk+BnyX
eVVNBMLbuvwwZZ/YiW9A0PZdW8JqAp6YRj3VyBFPAPJlDbZtVKqweS/apzqvPE8S
8xNrGvJxZTX0/iUwcxXrMB5MF+GAGyZpO+jaOIfI/vqYGlBuhDaKp8UOfrmZH2oU
rGqsQph8wSTfDwJDW9lBOFB8IW5qOowdh7D+GkXGCMOY
-----END CERTIFICATE-----
Generated at Sun Apr 13 15:44:15 2025 by rpki-client