Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/BclF8ogFJm7SHbbSauqgIPuVgI8.roa
File: BclF8ogFJm7SHbbSauqgIPuVgI8.roa (raw, json)
Hash identifier: 6BijkZjD88M35uPP9hk20CG6BMPOZYagpsfeWkqpwqw=
Subject key identifier: 05:C9:45:F2:88:05:26:6E:D2:1D:B6:D2:6A:EA:A0:20:FB:95:80:8F
Certificate issuer: /CN=7302cdc29fdca09e9a0f3f7d2113da85a7e1d654
Certificate serial: 019424B2680250EF7DEAC3BA1D90D267D60E
Authority key identifier: 73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/BclF8ogFJm7SHbbSauqgIPuVgI8.roa
Signing time: Thu 02 Jan 2025 01:47:39 +0000
ROA not before: Thu 02 Jan 2025 01:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202991
IP address blocks: 185.148.84.0/22 maxlen: 22
185.178.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:68:02:50:ef:7d:ea:c3:ba:1d:90:d2:67:d6:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7302cdc29fdca09e9a0f3f7d2113da85a7e1d654
Validity
Not Before: Jan 2 01:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05c945f28805266ed21db6d26aeaa020fb95808f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:97:c5:90:69:1e:7a:d5:58:00:b6:13:d4:bf:
fd:bd:d6:d8:49:98:d2:97:b4:a4:b1:99:62:c8:93:
c1:2e:4f:0a:ce:77:b5:20:0c:4b:56:26:24:b9:dd:
a6:77:77:c4:f9:c8:38:fe:95:60:e0:18:b8:ab:93:
8c:d7:ad:71:08:26:28:3a:53:b0:02:5a:0a:28:da:
69:8d:62:b8:4f:81:fd:9a:f4:ac:46:8d:df:40:0b:
1a:6c:e3:00:dd:09:6a:ea:1c:ad:30:57:5b:6a:4c:
9e:e0:83:40:83:64:bc:44:cd:09:c1:6f:96:7d:b1:
e7:77:51:88:d1:4b:85:a8:5b:a9:30:a7:a8:39:c6:
c3:18:e2:dc:92:5e:79:23:fc:5e:98:9f:29:29:a2:
3c:25:ec:88:89:50:6f:4d:f1:ee:67:da:43:ab:b0:
95:85:21:56:03:c8:a8:8a:3a:1c:eb:fd:d6:0c:ee:
37:c0:e5:78:b4:11:8d:b6:fe:08:95:cf:3f:e1:b3:
8e:1a:87:21:2a:30:8f:ff:4f:70:09:f3:c7:91:55:
09:be:9b:9e:80:ec:d8:99:ee:35:8b:b5:e6:b1:c1:
27:12:d9:74:fc:78:a5:18:26:c2:1a:52:7f:ed:75:
e4:56:6e:70:98:8a:ba:f2:01:2f:28:6c:f2:64:18:
aa:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C9:45:F2:88:05:26:6E:D2:1D:B6:D2:6A:EA:A0:20:FB:95:80:8F
X509v3 Authority Key Identifier:
keyid:73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/BclF8ogFJm7SHbbSauqgIPuVgI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.84.0/22
185.178.240.0/22
Signature Algorithm: sha256WithRSAEncryption
18:ca:e0:31:9e:0e:47:bf:e1:1f:27:4a:c1:72:be:b4:2e:44:
8c:7d:23:30:4a:68:14:a2:3f:64:f9:90:5b:ae:22:9c:0b:05:
c0:dd:55:04:55:1f:54:93:f6:d8:a3:9c:1a:ae:09:64:4e:9a:
22:10:c5:0b:53:ec:28:ad:13:32:7a:ca:42:75:80:0a:9a:42:
de:47:d9:73:32:0c:86:20:f5:ac:02:ef:d4:24:13:ff:82:80:
ee:38:00:e3:e4:de:77:2a:ae:d8:c4:11:de:4d:dc:f9:29:a5:
d1:10:8e:0c:0e:66:6f:e6:e4:01:9f:e9:20:84:d6:61:67:a2:
c9:c1:94:35:cb:2a:fc:a4:6c:31:18:10:0b:35:59:b8:3c:d1:
c8:b2:88:14:b2:80:3b:eb:c5:a6:95:51:13:18:2f:14:0d:af:
89:9d:c1:8a:bb:ad:3e:57:63:b4:cc:9c:b1:1d:3f:2a:39:cb:
54:7d:9d:d9:bf:e9:e8:41:a2:0c:0e:8d:77:39:ac:0c:48:9a:
b3:66:3b:d0:6c:66:f2:9c:3b:0a:34:89:97:cb:e3:bd:00:8f:
ab:94:70:2a:a6:f9:9c:41:88:6c:a7:4e:33:2d:f8:84:2d:a3:
ee:c2:09:0f:53:25:d9:3b:5a:fc:0b:e0:16:6a:71:3f:02:31:
0b:ec:13:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:16:12 2025 by rpki-client