Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/BAJtDqJxaWUqQAfiueye7uuRaiw.roa
File: BAJtDqJxaWUqQAfiueye7uuRaiw.roa (raw, json)
Hash identifier: xliJwPehY40wkTea7xdHZ3Ii3nZae+NEE66sFETvyTA=
Subject key identifier: 04:02:6D:0E:A2:71:69:65:2A:40:07:E2:B9:EC:9E:EE:EB:91:6A:2C
Certificate issuer: /CN=70dc927808b9a67e7cba1ba74efb5bf6c12c895b
Certificate serial: 019420D5D2B2D6C4E5F753B66E0EBBA6EC97
Authority key identifier: 70:DC:92:78:08:B9:A6:7E:7C:BA:1B:A7:4E:FB:5B:F6:C1:2C:89:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cNySeAi5pn58uhunTvtb9sEsiVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/BAJtDqJxaWUqQAfiueye7uuRaiw.roa
Signing time: Wed 01 Jan 2025 07:47:51 +0000
ROA not before: Wed 01 Jan 2025 07:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39671
IP address blocks: 185.229.68.0/24 maxlen: 24
185.229.69.0/24 maxlen: 24
185.229.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cNySeAi5pn58uhunTvtb9sEsiVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:d2:b2:d6:c4:e5:f7:53:b6:6e:0e:bb:a6:ec:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70dc927808b9a67e7cba1ba74efb5bf6c12c895b
Validity
Not Before: Jan 1 07:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04026d0ea27169652a4007e2b9ec9eeeeb916a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bd:f9:65:11:9c:fc:3d:8f:0d:25:cc:31:38:
c7:9b:b9:30:70:c4:bb:cc:b7:21:53:45:23:b0:6f:
05:b6:3c:48:4e:12:6f:56:99:a8:58:9f:66:d7:2c:
90:62:ec:1d:da:8a:1b:db:99:48:35:e3:08:b3:35:
5d:09:db:19:8e:af:a6:70:0c:43:ba:87:37:e9:dc:
9d:da:fd:1a:65:c5:0c:e4:7a:01:13:07:0f:92:7b:
dd:d3:68:c7:9b:71:50:fb:ec:89:4f:ce:9a:d6:e3:
82:99:2c:67:2f:69:d0:c3:a7:d4:fe:a2:2b:d8:78:
b7:de:12:a6:82:03:17:ae:68:a8:36:13:8e:c1:08:
b0:5d:03:0b:0b:c0:4c:9a:68:68:c8:b4:9b:c8:bf:
a4:e6:33:c7:2f:7d:48:57:48:6d:b5:80:e9:b7:cb:
04:0f:30:73:3a:f3:7e:64:b1:b4:02:85:f5:13:e5:
79:e8:27:02:45:b2:0e:c2:8e:ab:84:2e:84:09:8c:
1c:1c:81:96:f2:4d:0c:28:a8:19:dc:ed:9d:32:c9:
9a:a7:06:39:28:c2:4c:65:9a:72:90:18:59:b1:66:
02:20:65:30:4e:68:97:5e:2f:1c:13:c6:a7:89:3a:
4f:f6:ab:a3:cd:8c:50:d4:5e:d8:d7:28:b9:16:b1:
95:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:02:6D:0E:A2:71:69:65:2A:40:07:E2:B9:EC:9E:EE:EB:91:6A:2C
X509v3 Authority Key Identifier:
keyid:70:DC:92:78:08:B9:A6:7E:7C:BA:1B:A7:4E:FB:5B:F6:C1:2C:89:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNySeAi5pn58uhunTvtb9sEsiVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/BAJtDqJxaWUqQAfiueye7uuRaiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.68.0-185.229.70.255
Signature Algorithm: sha256WithRSAEncryption
4e:ff:de:63:71:70:9a:62:19:b0:68:e1:81:06:9e:e7:23:08:
4b:f9:f5:22:44:b5:7e:b6:81:3c:a2:c8:a5:c9:27:a0:63:10:
3d:6e:af:51:9b:90:77:1c:da:dc:38:79:a3:7a:97:bd:9c:a2:
da:4a:8a:6a:c3:e7:bd:b5:87:57:2f:b4:3c:d4:03:c7:c9:25:
4a:ce:dd:c7:45:8b:f6:a3:92:8e:e9:cc:6e:c7:9b:d1:b8:c5:
a4:47:c4:92:e5:33:5e:2a:0f:41:fb:05:17:7d:0c:b0:a5:ba:
ef:bb:6d:0a:52:ee:22:98:e5:a4:43:49:d4:c0:ab:cd:32:6e:
ac:08:91:37:40:b7:c4:81:0a:c2:1f:99:a9:7a:d2:d3:9b:ae:
1d:27:2a:1b:67:71:17:59:a1:57:7d:ec:b9:3d:f1:7c:10:fe:
70:46:92:aa:b1:37:91:f0:ee:93:5f:c7:19:a9:2c:1c:bd:12:
ff:9b:a7:02:4b:0f:06:a9:a8:34:d0:92:d2:97:7b:33:0b:b3:
9e:fc:cd:42:39:70:d1:ef:c5:6d:64:a8:48:a6:be:66:2a:06:
06:05:3c:dd:34:52:70:f5:6e:14:e7:53:e2:90:04:17:d3:8b:
2f:d3:ec:94:53:ee:ef:03:a8:c4:aa:c5:0a:7c:b4:6c:93:d3:
3c:13:f2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:03:19 2025 by rpki-client