Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/BLT1ngn_2yuE8mFORqHW-cSXHQY.roa
File: BLT1ngn_2yuE8mFORqHW-cSXHQY.roa (raw, json)
Hash identifier: U3KVPNTE0bXwLy66XZUdNxOAnSZYwwrGp7BYzLsjyOs=
Subject key identifier: 04:B4:F5:9E:09:FF:DB:2B:84:F2:61:4E:46:A1:D6:F9:C4:97:1D:06
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 019425FDD509179D90B1E924C5E3BF99E260
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/BLT1ngn_2yuE8mFORqHW-cSXHQY.roa
Signing time: Thu 02 Jan 2025 07:49:39 +0000
ROA not before: Thu 02 Jan 2025 07:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.197.135.0/24 maxlen: 24
2a06:e881:650f::/48 maxlen: 48
2a06:e881:7340::/42 maxlen: 48
2a06:e881:73ff::/48 maxlen: 48
2a06:e881:9200::/45 maxlen: 48
2a06:e881:9600::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:d5:09:17:9d:90:b1:e9:24:c5:e3:bf:99:e2:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 07:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04b4f59e09ffdb2b84f2614e46a1d6f9c4971d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a8:a0:76:ec:d0:0e:fd:88:ef:a9:53:d6:bd:
7f:2a:df:e7:b0:80:0f:2c:5e:53:0f:7d:3b:47:9b:
73:3d:20:9c:09:01:03:12:5b:9a:27:8a:b6:65:74:
3b:be:59:3d:7a:ac:c0:83:34:c5:74:92:c9:b9:3c:
67:3f:04:94:19:3e:a7:7c:90:b2:51:30:bd:26:6f:
c4:6b:bf:55:95:44:01:37:79:f6:c3:a2:76:39:e0:
1a:a6:55:fd:61:b2:d4:34:b4:dc:cf:4c:9c:e8:46:
06:62:53:a2:57:8c:42:9c:95:f0:49:1f:6e:b1:aa:
83:02:9f:dd:47:5e:4e:fa:06:de:dc:2a:b2:64:9c:
e3:a1:d9:30:3a:e9:5c:21:c3:90:c0:3b:ac:f3:1f:
92:d4:d0:74:6a:82:ec:4d:87:00:06:0c:1b:45:61:
96:5c:71:b3:5e:d3:c6:bf:49:a7:3d:d8:5f:03:84:
6f:1f:f1:be:c4:da:00:a1:c6:ef:7b:62:62:f4:63:
f9:ed:e0:5e:35:70:ed:0b:5b:02:e5:40:b8:70:93:
42:11:03:3e:e3:21:0b:01:af:4d:f9:77:48:b6:41:
99:1b:d5:a4:df:0a:3d:6d:54:8d:55:31:95:cd:a4:
eb:b9:a2:e1:88:24:34:45:8f:a6:ba:e6:4b:f3:e6:
26:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B4:F5:9E:09:FF:DB:2B:84:F2:61:4E:46:A1:D6:F9:C4:97:1D:06
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/BLT1ngn_2yuE8mFORqHW-cSXHQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.135.0/24
IPv6:
2a06:e881:650f::/48
2a06:e881:7340::/42
2a06:e881:73ff::/48
2a06:e881:9200::/45
2a06:e881:9600::/48
Signature Algorithm: sha256WithRSAEncryption
2a:ac:11:dc:8e:59:87:a6:7c:09:78:c3:7b:43:ec:13:98:1f:
1b:f6:ce:0e:da:cc:28:b5:fc:6b:fe:a6:a4:da:b2:b4:10:09:
0a:99:89:b7:c3:e1:e1:ca:28:a3:d5:36:8e:29:0a:5b:3e:c3:
f2:63:5e:d4:c1:86:48:bd:c3:34:78:7b:2f:ea:0e:dc:14:35:
c9:65:b6:9d:d9:fb:c1:63:bc:af:3b:bf:b8:70:60:4e:48:35:
03:45:94:e4:65:b7:61:43:0e:e3:c2:b6:a3:a6:8e:08:14:81:
e0:fc:01:63:80:64:c9:21:a6:2a:0a:1c:4e:e9:75:f5:93:27:
40:52:ea:b8:22:08:4f:1e:72:d1:3a:86:61:85:4c:0a:03:ae:
bb:e0:cc:bf:4d:b9:c0:3c:3d:95:9e:4b:09:65:c3:1a:e2:2e:
4b:ad:eb:fb:63:04:8b:0e:9b:78:38:0a:06:9e:2d:52:a7:90:
34:67:16:e7:0e:8a:e2:17:80:c0:52:39:87:ae:0b:d5:b4:01:
b0:a4:c1:1b:bc:7e:a2:a3:f5:af:c1:de:2c:11:0a:d5:2c:0f:
2b:ca:01:4c:3b:97:48:88:2d:7b:28:be:d0:18:f7:eb:cc:d2:
68:39:a6:03:bf:03:5f:48:83:ec:c7:66:00:8b:49:0a:73:3f:
b9:68:29:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:32:47 2025 by rpki-client