Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/6gNZAsVf-wN84JvRq_OcC2fCfZI.roa
File: 6gNZAsVf-wN84JvRq_OcC2fCfZI.roa (raw, json)
Hash identifier: bKq5ijI4cHYkiNFIZmWyJ6ZOR6ehBPjiusPq1BV3o9w=
Subject key identifier: EA:03:59:02:C5:5F:FB:03:7C:E0:9B:D1:AB:F3:9C:0B:67:C2:7D:92
Certificate issuer: /CN=bfc470e9b58e557ea8c1dbedaeb9c6a5fc455125
Certificate serial: 019427B5E3C81DF7CCAEE12C4580C056789D
Authority key identifier: BF:C4:70:E9:B5:8E:55:7E:A8:C1:DB:ED:AE:B9:C6:A5:FC:45:51:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/6gNZAsVf-wN84JvRq_OcC2fCfZI.roa
Signing time: Thu 02 Jan 2025 15:50:19 +0000
ROA not before: Thu 02 Jan 2025 15:50:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47886
IP address blocks: 185.236.16.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:e3:c8:1d:f7:cc:ae:e1:2c:45:80:c0:56:78:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfc470e9b58e557ea8c1dbedaeb9c6a5fc455125
Validity
Not Before: Jan 2 15:50:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea035902c55ffb037ce09bd1abf39c0b67c27d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bb:20:24:f8:5d:60:ea:4b:eb:3f:7a:0e:54:
98:87:e9:2c:b5:8b:be:ad:12:ba:dd:af:9d:e9:6d:
b1:18:af:d8:b5:ca:4b:81:c0:ba:c6:5f:fc:37:82:
68:42:47:f8:7a:32:1d:5a:63:4a:55:5f:ed:47:3f:
6a:8c:d2:4e:52:9b:17:dc:92:38:dd:5a:99:47:16:
cf:1e:e5:66:e3:6f:fc:88:00:97:39:b7:34:e1:85:
96:ab:95:bd:16:22:db:5c:6e:23:8b:ef:2b:6d:90:
a1:85:01:1e:f6:06:c7:49:10:2a:94:e8:6d:78:a8:
dc:a4:c6:d6:58:f3:2a:b3:7a:af:0b:72:9a:06:00:
cf:4f:0e:a8:c6:5d:48:9b:ee:78:57:96:11:8a:a2:
a9:ff:3c:da:2c:c1:c4:64:62:1a:f5:b9:45:9e:5f:
ad:b8:fe:55:01:c6:e6:2c:d4:32:bb:b4:96:4f:bb:
ec:03:d0:94:f8:fe:e7:5c:a9:71:d4:b8:44:f0:64:
be:f2:e7:8d:f7:3a:d7:61:c6:d7:e5:ac:12:d5:c1:
95:e2:23:2d:62:d0:96:c5:76:4b:e0:7c:3f:d7:ff:
6f:e6:fb:8e:2b:d0:5d:d2:4d:78:79:59:0c:5f:ac:
4d:fc:54:31:35:18:7a:34:be:9f:b1:66:0d:85:4b:
48:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:03:59:02:C5:5F:FB:03:7C:E0:9B:D1:AB:F3:9C:0B:67:C2:7D:92
X509v3 Authority Key Identifier:
keyid:BF:C4:70:E9:B5:8E:55:7E:A8:C1:DB:ED:AE:B9:C6:A5:FC:45:51:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/6gNZAsVf-wN84JvRq_OcC2fCfZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.16.0/22
Signature Algorithm: sha256WithRSAEncryption
08:a0:f9:15:b5:f5:06:86:68:ac:bd:dc:79:18:06:f4:9f:98:
68:85:57:db:b1:7a:ff:f6:a4:82:e8:86:83:e8:22:1c:82:96:
c0:5f:d5:37:e0:57:fc:c4:3f:32:b9:f8:ee:4a:03:e2:d6:d5:
8e:96:fc:2e:a2:bc:db:dd:b6:44:d3:ae:53:36:f8:7b:6a:74:
69:59:57:46:e4:4d:89:42:b1:3e:a1:dd:3a:5a:df:4e:42:cd:
70:30:d4:c8:12:35:a0:c2:18:dd:d7:df:e9:d5:26:fb:f0:89:
72:4f:39:29:e2:16:55:c8:d0:05:5b:17:5f:f0:d1:7d:9b:85:
ce:5c:1f:6a:00:f6:1b:d5:49:07:a7:ee:f3:ce:7e:2e:89:14:
51:a6:06:85:6d:f8:80:7e:0b:4a:6c:a9:bd:40:c8:71:0a:cf:
2e:a4:2a:76:44:2f:6a:4d:18:0c:b9:4c:a7:46:52:8f:46:14:
dd:28:1e:d1:e4:6e:76:c4:bc:bc:41:12:76:3b:22:c8:45:19:
66:27:db:2e:cd:29:59:d7:2e:31:78:93:21:19:5b:91:b2:25:
84:12:c3:89:e1:2c:bf:c3:c3:4e:31:04:23:44:b7:10:17:9c:
70:90:8f:60:41:0e:6f:8e:8f:72:48:df:f0:0d:77:98:47:cd:
8d:c1:90:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:16:49 2025 by rpki-client