Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/bf-KUAB6aLpkHJGbHNwPz-TdsjU.roa
File: bf-KUAB6aLpkHJGbHNwPz-TdsjU.roa (raw, json)
Hash identifier: HN5lyJEQT7Bh/OQNiW1klOAzdGY3jUKHNz1khIQidQk=
Subject key identifier: 6D:FF:8A:50:00:7A:68:BA:64:1C:91:9B:1C:DC:0F:CF:E4:DD:B2:35
Certificate issuer: /CN=1ce65c57686ce5e51b367fc996b49bcc59896b9c
Certificate serial: 01972CABEF16224EB7669A9161EE81B0E444
Authority key identifier: 1C:E6:5C:57:68:6C:E5:E5:1B:36:7F:C9:96:B4:9B:CC:59:89:6B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HOZcV2hs5eUbNn_JlrSbzFmJa5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/bf-KUAB6aLpkHJGbHNwPz-TdsjU.roa
Signing time: Sun 01 Jun 2025 18:05:54 +0000
ROA not before: Sun 01 Jun 2025 18:05:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57137
IP address blocks: 45.129.148.0/24 maxlen: 24
45.129.150.0/24 maxlen: 24
45.129.151.0/24 maxlen: 24
2a0e:4c41::/32 maxlen: 32
2a0e:4c47:421::/48 maxlen: 48
2a0e:4c47:4210::/48 maxlen: 48
2a0e:4c47:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/HOZcV2hs5eUbNn_JlrSbzFmJa5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:2c:ab:ef:16:22:4e:b7:66:9a:91:61:ee:81:b0:e4:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ce65c57686ce5e51b367fc996b49bcc59896b9c
Validity
Not Before: Jun 1 18:05:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6dff8a50007a68ba641c919b1cdc0fcfe4ddb235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ad:6f:42:d3:ae:0e:8d:21:56:cc:08:45:12:
3c:0f:8d:64:fc:ad:bd:e6:83:e8:00:e3:81:07:e1:
38:e5:1b:6f:66:b5:f1:eb:fe:6b:8d:5f:04:06:45:
2d:10:82:c1:57:81:c6:37:4d:9f:82:3b:b0:d3:bb:
95:a9:ce:92:15:38:35:db:d4:56:31:9f:08:0f:82:
89:09:17:9b:e7:e6:76:bc:ac:7d:20:c5:6e:6b:ac:
de:51:5f:61:f6:fa:cc:7c:c6:e1:dc:7d:f6:f4:3d:
41:36:b7:73:31:88:e4:5e:c3:e8:27:72:d5:7e:b6:
3d:b4:38:2a:80:fa:f0:6c:9d:35:fe:a7:50:ab:7f:
6c:48:ff:4a:07:29:e3:71:7c:e7:48:d3:64:c1:90:
56:03:58:2c:c7:25:89:11:db:37:ad:f0:16:35:4d:
24:a4:11:be:6a:3e:f2:ea:fb:2f:15:12:40:57:3f:
0f:8d:01:27:d7:8e:38:89:a7:90:24:21:c7:20:d0:
c6:4f:5f:81:d2:d8:ce:1f:00:2e:8f:f1:ec:ea:fd:
2d:67:7a:13:cd:89:da:66:50:ab:a4:53:86:b4:83:
3f:86:15:c4:3a:a9:16:31:02:44:19:c4:a1:8e:02:
00:65:c7:bc:4a:6f:8c:e5:64:90:b1:f6:a9:5d:8d:
32:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:FF:8A:50:00:7A:68:BA:64:1C:91:9B:1C:DC:0F:CF:E4:DD:B2:35
X509v3 Authority Key Identifier:
keyid:1C:E6:5C:57:68:6C:E5:E5:1B:36:7F:C9:96:B4:9B:CC:59:89:6B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HOZcV2hs5eUbNn_JlrSbzFmJa5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/bf-KUAB6aLpkHJGbHNwPz-TdsjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.148.0/24
45.129.150.0/23
IPv6:
2a0e:4c41::/32
2a0e:4c47:421::/48
2a0e:4c47:4210::/48
2a0e:4c47:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
46:7a:ba:2c:95:d6:be:cb:b9:30:c1:23:8d:61:84:4a:3e:a5:
3c:49:4f:04:8b:09:63:45:dc:00:04:be:be:5d:17:59:9c:9e:
c7:7d:b3:d6:a7:25:c0:ff:0f:2e:fb:4d:62:c5:56:27:e4:77:
eb:b2:98:b6:ed:62:9b:31:ff:15:fc:27:8c:57:ff:96:29:ab:
96:ba:22:e5:c2:87:14:70:35:0a:51:d4:a4:0d:7d:eb:60:7f:
ae:dd:75:cf:98:19:f6:b7:8b:b1:bf:78:a6:58:18:84:41:bd:
d5:d4:34:a0:ae:13:9d:17:85:2e:18:05:1d:d4:f9:20:17:7f:
75:8e:84:bf:b5:e7:11:63:99:a3:17:bb:ce:4e:71:20:d2:f9:
61:cd:f5:fb:24:89:83:40:e3:54:4d:96:fd:9d:74:80:d6:ee:
92:41:6d:10:72:24:27:2f:1e:5a:f4:09:47:7e:32:e4:e8:04:
63:63:42:1b:79:72:9b:6a:a7:72:29:f7:3a:54:ba:5e:31:c0:
79:e9:09:0d:48:68:ef:85:75:44:f4:4a:4b:75:5e:f9:b6:ea:
41:c5:34:e6:46:8c:49:9c:f1:af:ae:d0:b3:7b:26:7a:a2:a7:
3d:36:45:bc:94:2a:c9:2d:ae:f1:1a:ad:8a:42:c5:f2:6d:62:
64:df:2f:31
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZcsq+8WIk63ZpqRYe6BsOREMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjZTY1YzU3Njg2Y2U1ZTUxYjM2N2ZjOTk2YjQ5YmNjNTk4
OTZiOWMwHhcNMjUwNjAxMTgwNTU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZGZmOGE1MDAwN2E2OGJhNjQxYzkxOWIxY2RjMGZjZmU0ZGRiMjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlq1vQtOuDo0hVswIRRI8D41k/K29
5oPoAOOBB+E45RtvZrXx6/5rjV8EBkUtEILBV4HGN02fgjuw07uVqc6SFTg129RW
MZ8ID4KJCReb5+Z2vKx9IMVua6zeUV9h9vrMfMbh3H329D1BNrdzMYjkXsPoJ3LV
frY9tDgqgPrwbJ01/qdQq39sSP9KBynjcXznSNNkwZBWA1gsxyWJEds3rfAWNU0k
pBG+aj7y6vsvFRJAVz8PjQEn1444iaeQJCHHINDGT1+B0tjOHwAuj/Hs6v0tZ3oT
zYnaZlCrpFOGtIM/hhXEOqkWMQJEGcShjgIAZce8Sm+M5WSQsfapXY0y3QIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFG3/ilAAemi6ZByRmxzcD8/k3bI1MB8GA1UdIwQY
MBaAFBzmXFdobOXlGzZ/yZa0m8xZiWucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSE9aY1YyaHM1ZVViTm5fSmxyU2J6Rm1KYTV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9hZjhmMzYtZTM1OC00Yjc2LTg4MjIt
MTI4YjVjM2QwNTNhLzEvYmYtS1VBQjZhTHBrSEpHYkhOd1B6LVRkc2pVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9hZjhmMzYtZTM1OC00Yjc2LTg4MjItMTI4YjVjM2QwNTNh
LzEvSE9aY1YyaHM1ZVViTm5fSmxyU2J6Rm1KYTV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjASBAIAATAMAwQALYGUAwQB
LYGWMCgEAgACMCIDBQAqDkxBAwcAKg5MRwQhAwcAKg5MR0IQAwcAKg5MR///MA0G
CSqGSIb3DQEBCwUAA4IBAQBGeroslda+y7kwwSONYYRKPqU8SU8EiwljRdwABL6+
XRdZnJ7HfbPWpyXA/w8u+01ixVYn5Hfrspi27WKbMf8V/CeMV/+WKauWuiLlwocU
cDUKUdSkDX3rYH+u3XXPmBn2t4uxv3imWBiEQb3V1DSgrhOdF4UuGAUd1PkgF391
joS/tecRY5mjF7vOTnEg0vlhzfX7JImDQONUTZb9nXSA1u6SQW0QciQnLx5a9AlH
fjLk6ARjY0IbeXKbaqdyKfc6VLpeMcB56QkNSGjvhXVE9EpLdV75tupBxTTmRoxJ
nPGvrtCzeyZ6oqc9NkW8lCrJLa7xGq2KQsXybWJk3y8x
-----END CERTIFICATE-----
Generated at Sun Jun 8 19:57:30 2025 by rpki-client