Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/BAVL0SvQ0U3wy0YK40A-J0r2e4Y.roa
File: BAVL0SvQ0U3wy0YK40A-J0r2e4Y.roa (raw, json)
Hash identifier: Qn2BZzT2IC702D3BbkNzBAy6eFqJTIDC0+WwpaKAWgk=
Subject key identifier: 04:05:4B:D1:2B:D0:D1:4D:F0:CB:46:0A:E3:40:3E:27:4A:F6:7B:86
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 019421B258A3DFEEED2EDE5CC6BA94CC2922
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/BAVL0SvQ0U3wy0YK40A-J0r2e4Y.roa
Signing time: Wed 01 Jan 2025 11:48:43 +0000
ROA not before: Wed 01 Jan 2025 11:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12724
IP address blocks: 82.179.96.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 09:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:58:a3:df:ee:ed:2e:de:5c:c6:ba:94:cc:29:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 11:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04054bd12bd0d14df0cb460ae3403e274af67b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:76:d8:bb:c1:45:15:a8:07:38:74:b4:c4:45:
1d:ca:a6:ff:f0:71:4c:24:59:c8:13:d8:7b:c2:c9:
66:a9:58:29:36:f7:6e:14:59:86:95:c7:f7:1c:36:
0b:9c:da:65:da:76:d0:cc:1a:a7:0f:65:e1:15:ea:
3c:e0:69:a0:69:44:73:b8:be:e5:4b:6b:4f:ee:30:
0c:f3:d3:30:36:c7:44:0e:47:d1:d2:b8:ef:83:d0:
15:df:18:74:93:e3:9b:2e:1c:41:d8:2b:52:12:8f:
76:4e:04:a5:54:e2:9b:0c:1f:9e:ab:07:72:39:dc:
69:13:38:cb:de:b3:a7:87:86:d4:57:df:c3:5f:a5:
d5:55:22:a5:58:85:f0:8c:1b:bb:40:dc:5a:f1:d4:
1e:78:71:0b:6b:05:4b:85:5f:4c:80:f4:84:93:46:
52:b3:d1:92:cb:77:a0:9b:5a:57:51:66:68:77:5a:
71:82:c2:e9:aa:e6:a5:04:3e:65:3e:6d:b0:fe:e1:
04:fc:7b:cf:f7:92:21:04:d1:af:fe:5d:5c:7e:d2:
c2:a4:48:52:9c:5c:0f:6c:cd:ef:84:62:01:67:2a:
94:25:f0:bc:8f:5a:01:ed:0c:b6:f8:ac:f6:b7:37:
4d:87:e5:02:46:37:b2:8c:c1:3f:55:eb:cc:d9:00:
5f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:05:4B:D1:2B:D0:D1:4D:F0:CB:46:0A:E3:40:3E:27:4A:F6:7B:86
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/BAVL0SvQ0U3wy0YK40A-J0r2e4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.179.96.0/20
Signature Algorithm: sha256WithRSAEncryption
7c:b0:5e:25:34:52:4f:cb:c9:50:f4:c0:4d:c5:b6:43:bb:3c:
d0:f6:03:3f:23:a5:3b:67:65:19:0c:c4:e5:1c:71:7e:78:0e:
ce:1a:11:fa:66:28:0d:09:4f:2e:fc:75:47:46:c5:02:02:74:
16:d2:79:98:44:72:c9:a5:60:ef:d9:b3:c2:09:47:01:8e:12:
aa:1b:d1:6b:f9:fb:97:fb:22:e0:ca:63:84:e2:87:63:4a:f8:
60:7d:91:72:4f:43:36:c3:b0:6b:78:84:21:92:a6:ad:f9:05:
32:5d:d3:65:de:54:1b:77:bc:b9:1c:18:64:4a:e0:80:cd:18:
2a:76:42:e8:0f:60:da:37:79:d1:f5:5e:25:93:79:c9:89:b6:
92:14:14:80:7e:a4:89:bc:2c:44:54:58:7e:fb:06:aa:e9:b7:
9d:89:f2:d9:15:35:36:3e:82:a0:d3:7c:bc:54:74:7a:28:40:
6a:ee:0e:af:16:a8:42:01:7f:0b:6f:36:17:91:ae:4e:fb:c6:
ba:b9:7b:d6:4e:e8:2e:70:69:7a:b5:45:d3:e5:c6:f3:32:7d:
15:ad:07:78:a2:fb:af:4e:ea:12:e5:4d:84:20:00:82:8e:8e:
6b:fd:95:2c:a4:8f:99:11:f0:e0:7d:79:83:c2:dd:0d:e5:b3:
c0:b6:40:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 18:45:34 2025 by rpki-client