Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bf_DKv8yihRZPRp6cK44XtImnwo.roa
File: bf_DKv8yihRZPRp6cK44XtImnwo.roa (raw, json)
Hash identifier: cf1lwlF11/cCTtWQ5tTjpogdj8zs6jS1tY3LpyQNrIU=
Subject key identifier: 6D:FF:C3:2A:FF:32:8A:14:59:3D:1A:7A:70:AE:38:5E:D2:26:9F:0A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195297B052A011459F596CD179DF353EFF5
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bf_DKv8yihRZPRp6cK44XtImnwo.roa
Signing time: Fri 21 Feb 2025 17:08:02 +0000
ROA not before: Fri 21 Feb 2025 17:08:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198584
IP address blocks: 217.60.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:29:7b:05:2a:01:14:59:f5:96:cd:17:9d:f3:53:ef:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 21 17:08:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6dffc32aff328a14593d1a7a70ae385ed2269f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:03:76:38:12:da:ae:4d:f6:f7:ba:e0:23:8c:
ad:cc:d5:03:69:ac:d9:1f:20:11:5e:2d:08:8a:32:
da:91:e7:a2:91:4f:a0:1d:e8:5a:c3:7e:77:67:6c:
4d:be:bf:52:eb:ec:71:8d:d1:68:d8:7f:01:07:0e:
06:e2:d4:0b:c6:0b:cd:cc:3d:a7:5f:8c:a7:81:ac:
a1:d8:cb:7b:88:e9:03:ca:10:64:61:04:0e:18:ff:
61:ab:45:ff:59:cc:33:8b:3d:d7:fc:3a:68:be:8a:
c1:30:c7:fd:56:ff:9e:d9:48:61:51:a4:0c:32:e1:
43:1f:6d:a2:67:ef:ad:65:8b:aa:aa:5a:7a:46:fc:
b8:8f:f3:7a:f8:f2:d4:57:83:9c:23:f7:fc:4f:92:
36:cb:d7:ba:b8:c3:b9:52:c3:81:46:6d:67:6d:ae:
e5:a1:df:67:98:0b:26:7a:35:dd:45:cc:14:c4:7a:
b2:03:de:ea:5b:3b:3d:d4:9a:8e:5b:42:b2:fc:c4:
ac:f2:c6:fa:22:fa:77:d3:d3:d6:b3:19:ae:12:ba:
4d:1f:b1:e2:e5:5c:74:2a:b8:4c:0a:3e:59:d9:bb:
f5:ab:48:1d:62:ce:ee:65:bd:1c:19:6f:00:cf:9f:
70:e0:d0:48:b4:9a:88:52:8a:f3:7e:10:f5:53:6b:
e5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:FF:C3:2A:FF:32:8A:14:59:3D:1A:7A:70:AE:38:5E:D2:26:9F:0A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bf_DKv8yihRZPRp6cK44XtImnwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.236.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:16:99:18:98:3d:54:08:ca:ff:3d:a1:e6:c1:31:1f:e5:b4:
b4:01:a7:bc:bd:b0:3d:a1:89:12:91:f9:12:f8:1a:82:cf:82:
eb:f7:0f:42:37:d5:0e:e2:5a:50:fa:79:2e:67:b0:02:64:4b:
6e:b3:f8:29:d2:fd:09:b5:e6:a2:8c:7c:37:23:91:dc:8c:ee:
96:c0:5c:78:2d:a5:e1:d1:e0:f3:cd:41:a8:5d:82:24:0e:65:
bd:08:bb:cd:fa:88:89:f7:9d:25:d4:82:75:6c:47:ee:b6:bb:
dd:01:cc:47:a4:72:07:98:fc:ba:ed:66:e7:ce:f1:a8:e0:81:
21:b5:fe:69:ce:fe:2e:42:88:8a:80:19:74:94:a9:b5:1c:f9:
af:e9:e9:f5:dc:40:e0:62:84:15:91:08:13:09:70:29:14:7c:
92:05:7c:32:da:3d:39:0c:eb:f2:44:c7:45:7c:06:8f:e0:2f:
b9:a3:e8:2b:16:05:96:69:56:bf:3e:d9:5b:ad:c4:b9:71:f0:
81:f3:b1:30:2a:ac:6e:15:41:1e:c8:42:47:53:78:d8:72:c5:
0d:a4:26:07:6d:3a:3c:16:13:dc:56:35:f9:45:52:81:e7:5d:
ae:ea:80:82:9b:e1:a2:fc:e0:a5:a0:e9:82:7e:78:6c:cb:a7:
81:f3:7e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:40:22 2025 by rpki-client