Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/BJ5wLJZeiCHt3JS_ePCOOXcJWmg.roa
File: BJ5wLJZeiCHt3JS_ePCOOXcJWmg.roa (raw, json)
Hash identifier: QSsfJsmrmefOW0y3K9Z/gWckPqlMRdhyw9ELh5r+TmA=
Subject key identifier: 04:9E:70:2C:96:5E:88:21:ED:DC:94:BF:78:F0:8E:39:77:09:5A:68
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 0194FA3BFCCAD75D1EAEA5F85001968AFE00
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/BJ5wLJZeiCHt3JS_ePCOOXcJWmg.roa
Signing time: Wed 12 Feb 2025 12:57:02 +0000
ROA not before: Wed 12 Feb 2025 12:57:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137517
IP address blocks: 77.246.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:fa:3b:fc:ca:d7:5d:1e:ae:a5:f8:50:01:96:8a:fe:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Feb 12 12:57:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=049e702c965e8821eddc94bf78f08e3977095a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b8:e8:1e:e9:b8:2d:9f:51:29:7a:48:d0:a4:
b4:dd:28:1c:13:44:39:94:93:2c:d8:40:9a:8d:db:
b0:5e:30:58:48:d0:1f:6a:70:00:94:34:77:1e:9f:
a5:e3:f7:ca:89:c6:eb:15:9a:42:eb:9d:b9:7c:5e:
f9:32:23:fd:97:2e:74:66:3c:c4:36:37:91:f4:cb:
63:88:cf:96:71:e0:a5:c9:cd:61:f2:41:c9:8d:f5:
07:c5:35:1c:0b:90:29:60:dc:14:0e:de:bb:05:f4:
62:71:c2:1b:3e:9c:c4:dd:17:72:7b:d6:6f:2f:6e:
77:00:2c:2d:a6:05:6a:11:1d:65:6b:cb:50:08:11:
65:3f:e3:f2:df:87:4c:17:17:56:14:38:15:31:07:
dc:d3:5a:32:ea:ef:17:30:b4:1b:e5:57:57:51:d0:
4e:35:de:d5:30:59:12:0f:4d:09:92:e5:d9:cc:52:
ba:ab:0a:ac:dc:bb:5f:bf:e9:f8:7d:a0:50:5d:9a:
4e:fc:44:09:f8:89:1d:12:c0:51:95:cf:f7:51:77:
f1:94:33:16:27:fe:80:f4:9e:9e:8f:ab:4e:bc:f1:
d1:4a:74:e9:ad:cc:77:62:5e:f1:a7:19:80:18:7d:
04:4d:e9:f6:46:04:bd:84:37:9c:d8:21:a9:bb:fc:
81:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:9E:70:2C:96:5E:88:21:ED:DC:94:BF:78:F0:8E:39:77:09:5A:68
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/BJ5wLJZeiCHt3JS_ePCOOXcJWmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.220.0/24
Signature Algorithm: sha256WithRSAEncryption
12:ab:4c:76:26:81:2f:10:06:e6:d1:d4:cb:d8:60:5f:58:05:
a5:5a:6a:2f:08:39:76:b1:dc:3c:11:b7:0f:04:ea:72:52:57:
fb:dc:ba:a4:ba:be:81:c0:75:1c:87:67:00:51:dd:d0:6e:8d:
e6:47:c2:47:f0:61:7e:dc:35:83:6f:8d:3d:8d:aa:91:e9:6e:
6e:22:ec:18:ab:33:7d:ce:c8:ce:da:e5:e6:c7:3d:d9:5f:f7:
3f:ef:51:85:fb:44:e3:de:a3:02:78:dc:a7:a4:79:f5:19:c8:
21:50:f5:25:6e:e2:57:5b:f1:4c:09:49:ae:f9:8b:99:98:a2:
78:04:e0:ff:38:03:eb:16:70:18:b8:fb:af:a2:d6:a3:22:b0:
0b:3d:c5:c6:1f:ec:e1:b2:78:13:06:b1:69:02:db:6c:8a:db:
4a:73:e1:21:62:c5:8a:53:6a:70:55:07:30:55:a3:c7:27:67:
fb:3f:81:99:db:a9:8d:8d:3b:56:c6:67:0c:13:58:af:5d:24:
20:69:db:00:82:a2:0d:5f:fa:81:de:1a:13:af:2b:ce:1b:dc:
de:6c:0d:5f:62:f7:ec:34:d4:be:7e:68:90:f3:26:eb:97:78:
8e:cb:78:27:b8:76:de:a3:36:cb:8c:fa:45:41:56:88:cd:5e:
74:49:94:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:33:49 2025 by rpki-client