Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/BUbgMU6qyG1ptU2dIWwVh8i-Kjc.roa
File: BUbgMU6qyG1ptU2dIWwVh8i-Kjc.roa (raw, json)
Hash identifier: rqwF60FwzB+zZQwtQI8AX0k6qPeHy+PObyrOxNB5ovY=
Subject key identifier: 05:46:E0:31:4E:AA:C8:6D:69:B5:4D:9D:21:6C:15:87:C8:BE:2A:37
Certificate issuer: /CN=ca1efd8e63169d8fdbf98b7139fcddedaf016cb2
Certificate serial: 019420D5F0C3092BB43E1A017504C0E533CA
Authority key identifier: CA:1E:FD:8E:63:16:9D:8F:DB:F9:8B:71:39:FC:DD:ED:AF:01:6C:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yh79jmMWnY_b-YtxOfzd7a8BbLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/BUbgMU6qyG1ptU2dIWwVh8i-Kjc.roa
Signing time: Wed 01 Jan 2025 07:47:59 +0000
ROA not before: Wed 01 Jan 2025 07:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29003
IP address blocks: 81.90.48.0/20 maxlen: 20
185.95.220.0/22 maxlen: 22
2a02:8f0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yh79jmMWnY_b-YtxOfzd7a8BbLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:f0:c3:09:2b:b4:3e:1a:01:75:04:c0:e5:33:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1efd8e63169d8fdbf98b7139fcddedaf016cb2
Validity
Not Before: Jan 1 07:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0546e0314eaac86d69b54d9d216c1587c8be2a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:10:37:71:cc:70:84:2d:f6:e4:f3:9b:28:89:
57:d0:b3:ba:56:7f:74:e1:d5:59:bd:34:95:29:21:
58:86:e9:bc:38:1f:61:d6:17:dc:59:18:1b:09:98:
a6:fe:80:50:a9:f1:e6:f3:c4:4a:95:b8:9e:bb:9d:
ed:a0:2b:01:aa:c2:f4:0c:c0:47:64:7e:ec:90:b2:
8c:63:51:92:3e:42:60:56:8d:32:87:1e:28:84:71:
0d:65:3a:f9:e4:c0:a6:d4:ff:a2:54:87:b1:41:b0:
17:08:7d:94:15:f4:e9:5e:07:00:6d:b9:eb:b9:cb:
fe:7b:30:26:0d:97:01:9b:16:ef:3a:ba:47:f1:36:
fb:fe:99:ca:75:a8:40:13:46:9d:d3:43:a7:c1:44:
58:c3:93:ff:f0:eb:6d:ee:d4:eb:68:bb:a2:df:e7:
7e:6d:24:59:58:d8:cf:64:a1:57:26:c8:68:f1:f3:
94:9c:75:de:96:0c:0d:52:e7:d6:c1:c0:95:a3:36:
bc:25:d3:9a:1d:d5:4d:c5:74:73:13:52:c5:06:95:
42:63:c1:08:93:5e:1e:86:cc:4e:72:18:07:89:27:
3a:ee:17:92:8d:4b:31:65:f3:59:bf:d7:85:7e:f4:
36:26:91:d7:71:e8:87:24:08:6b:7d:dc:50:0f:76:
09:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:46:E0:31:4E:AA:C8:6D:69:B5:4D:9D:21:6C:15:87:C8:BE:2A:37
X509v3 Authority Key Identifier:
keyid:CA:1E:FD:8E:63:16:9D:8F:DB:F9:8B:71:39:FC:DD:ED:AF:01:6C:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yh79jmMWnY_b-YtxOfzd7a8BbLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/BUbgMU6qyG1ptU2dIWwVh8i-Kjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.90.48.0/20
185.95.220.0/22
IPv6:
2a02:8f0::/32
Signature Algorithm: sha256WithRSAEncryption
8f:0f:cf:5f:c9:bb:9f:c9:58:d1:52:57:37:0b:e8:aa:8c:5d:
23:16:5c:b2:13:1c:d2:31:73:93:a2:39:4f:12:15:21:05:d9:
a5:fb:e2:4e:80:8f:1b:cb:46:fc:1a:1e:ad:a4:bb:2a:24:30:
00:95:cd:3f:ad:ec:2a:7d:64:ed:81:53:e6:f5:14:74:85:31:
ff:0a:ee:98:44:05:81:30:72:13:70:bb:99:4a:4c:65:cb:5f:
5e:2e:8b:85:7b:4b:ec:b9:3f:83:3c:54:70:44:14:cd:93:94:
23:2f:bb:9d:1b:15:72:00:6e:cb:d1:e7:0a:4a:7e:4d:b1:3d:
79:62:86:13:8d:c9:33:78:2a:39:74:ad:7e:2c:75:8a:ba:e0:
30:92:9b:90:dd:b7:1b:cd:55:5d:91:52:76:a1:15:bd:e1:6e:
c6:ad:a1:cf:c5:63:ed:d7:12:96:3c:fb:d3:7c:b1:13:90:de:
07:8d:d3:ea:14:a0:66:28:e9:8e:08:14:f3:b9:3e:46:49:3e:
f9:24:47:8f:cd:f3:3e:6b:2e:bd:84:6f:05:4a:f1:4f:cb:b3:
25:85:b2:e7:57:b9:27:53:37:6d:c5:a5:89:d0:69:e1:af:72:
cb:67:44:f2:4e:cf:fd:2e:15:de:92:17:15:2d:07:7e:c1:2b:
34:11:f8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 21:28:56 2025 by rpki-client