Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/bpYsiF18QRf5QtGXZ_iQjax9NTk.roa
File: bpYsiF18QRf5QtGXZ_iQjax9NTk.roa (raw, json)
Hash identifier: sxWNeli2Kw0W0CpyWRBKMIXDOOMhbuvbRuOafrwk3qg=
Subject key identifier: 6E:96:2C:88:5D:7C:41:17:F9:42:D1:97:67:F8:90:8D:AC:7D:35:39
Certificate issuer: /CN=4a222ed1b8a533858f4658c5d2539faf52abdaa7
Certificate serial: 0194221F65D3C5B8A9A24228317398DA9A81
Authority key identifier: 4A:22:2E:D1:B8:A5:33:85:8F:46:58:C5:D2:53:9F:AF:52:AB:DA:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SiIu0bilM4WPRljF0lOfr1Kr2qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/bpYsiF18QRf5QtGXZ_iQjax9NTk.roa
Signing time: Wed 01 Jan 2025 13:47:50 +0000
ROA not before: Wed 01 Jan 2025 13:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49952
IP address blocks: 91.213.224.0/24 maxlen: 24
185.197.208.0/24 maxlen: 24
185.197.209.0/24 maxlen: 24
2a00:e4a0:100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SiIu0bilM4WPRljF0lOfr1Kr2qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:65:d3:c5:b8:a9:a2:42:28:31:73:98:da:9a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a222ed1b8a533858f4658c5d2539faf52abdaa7
Validity
Not Before: Jan 1 13:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e962c885d7c4117f942d19767f8908dac7d3539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ff:5e:bc:e3:74:bc:9f:0a:24:d5:18:3c:73:
78:bd:16:f6:95:7a:db:b7:df:6a:4e:b4:f0:f2:56:
5b:a9:c5:21:ee:3c:fc:04:3c:86:7f:99:c7:38:ff:
02:08:0d:60:61:cb:37:c3:c5:4b:89:06:68:30:fa:
c8:c2:3a:18:ba:71:1b:8d:de:4d:ff:45:c7:b2:8c:
3d:43:6d:ec:ea:14:ad:af:27:dc:3a:8a:0a:d0:de:
db:cb:13:21:06:bc:84:45:58:59:4d:28:49:12:bf:
8f:55:14:17:b4:84:ff:aa:22:a0:01:28:31:cd:8b:
df:85:14:4e:97:00:cd:f7:98:1d:78:6f:86:a7:8f:
36:9f:56:0f:f0:da:82:73:db:47:2e:70:32:4d:ec:
48:7f:e5:84:ff:dc:6e:e5:da:0e:a4:6e:63:c9:11:
e2:94:79:df:5c:4d:8a:13:9b:23:b3:ea:9c:f5:6c:
66:79:68:c2:0b:03:02:30:a9:3b:4e:5c:ea:52:81:
f6:56:11:95:02:d2:47:94:60:9c:32:df:5a:d7:59:
85:2c:81:c7:37:37:20:72:73:70:16:ab:10:89:48:
18:47:1b:af:18:43:27:39:81:32:97:90:67:37:71:
51:e1:e2:06:a8:9d:6e:80:33:ee:c8:1d:eb:40:c7:
e3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:96:2C:88:5D:7C:41:17:F9:42:D1:97:67:F8:90:8D:AC:7D:35:39
X509v3 Authority Key Identifier:
keyid:4A:22:2E:D1:B8:A5:33:85:8F:46:58:C5:D2:53:9F:AF:52:AB:DA:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiIu0bilM4WPRljF0lOfr1Kr2qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/bpYsiF18QRf5QtGXZ_iQjax9NTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.224.0/24
185.197.208.0/23
IPv6:
2a00:e4a0:100::/40
Signature Algorithm: sha256WithRSAEncryption
6f:10:66:20:a9:12:10:16:37:5c:8e:ca:b4:68:84:bc:f2:f5:
c1:0d:36:fd:2f:11:4c:2d:50:5e:36:dd:61:eb:40:f2:e3:5a:
0a:41:d6:5b:0c:ec:02:e4:81:8d:47:e2:ed:90:70:ae:07:6f:
4d:9b:87:d8:e4:ba:ef:bd:3d:1a:08:30:42:31:45:f2:57:43:
87:e4:b9:8c:3d:df:ee:84:0d:c7:e8:84:f6:61:c4:4a:8b:0d:
72:53:73:d6:aa:59:3b:8c:15:b6:57:66:26:0c:d5:57:70:e9:
a9:4a:5d:cb:85:bc:14:2c:c5:51:94:47:c7:66:9d:a0:83:33:
7b:84:33:d7:02:d8:b7:48:a4:50:ae:a9:64:fa:0d:79:a8:06:
47:04:6c:31:26:e2:37:82:bc:db:ba:18:b8:40:9f:c1:23:2f:
98:d0:78:80:10:57:d9:03:fe:ce:fc:df:16:57:41:98:60:b5:
47:4b:bb:aa:77:9a:24:8c:87:35:5f:58:39:2a:c9:c4:df:4f:
6b:64:32:76:db:e7:b9:c6:55:43:32:51:39:a2:09:b6:e6:d7:
9a:8a:2f:5d:4f:ab:65:f8:dd:e4:97:7f:20:06:6b:b9:52:fd:
6a:e4:56:a6:56:51:58:c5:8b:05:ac:11:e5:d7:2b:ce:75:57:
a2:ab:06:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:03:49 2025 by rpki-client