Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/BdJNgntrZrRhO2AK_hQo7PgCvTk.roa
File: BdJNgntrZrRhO2AK_hQo7PgCvTk.roa (raw, json)
Hash identifier: qnecmpUOajvf3EfUH7Y9wq1em/+r3qX6QxejVMmKwZw=
Subject key identifier: 05:D2:4D:82:7B:6B:66:B4:61:3B:60:0A:FE:14:28:EC:F8:02:BD:39
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 019421B253E71FB7A545ACC8EF598D9EA4AD
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/BdJNgntrZrRhO2AK_hQo7PgCvTk.roa
Signing time: Wed 01 Jan 2025 11:48:42 +0000
ROA not before: Wed 01 Jan 2025 11:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5567
IP address blocks: 85.143.64.0/20 maxlen: 20
85.143.80.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 09:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:53:e7:1f:b7:a5:45:ac:c8:ef:59:8d:9e:a4:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 11:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05d24d827b6b66b4613b600afe1428ecf802bd39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:35:29:ae:73:ab:88:b0:e9:5d:d6:72:99:36:
39:0f:07:7d:83:24:6b:91:8d:ee:8e:61:ff:7f:c6:
21:b8:8b:05:63:a2:3e:8e:aa:28:5d:7b:0d:47:82:
7f:d0:d3:a9:b9:99:91:fa:51:cc:9f:d5:7b:64:cc:
c6:a5:10:35:5b:f3:90:18:af:33:a7:fc:19:b0:bd:
f7:d1:20:ff:fc:b4:93:be:18:d3:e4:60:2c:50:69:
a7:44:c2:80:44:0e:5a:12:79:7c:04:4a:3b:3f:05:
98:c4:cc:3a:b5:01:7d:5d:ae:a5:58:f1:f0:b0:55:
be:74:6f:3c:d5:c0:3e:8f:c2:73:6f:94:b9:9b:88:
8e:75:77:28:c2:2d:35:ac:b2:67:18:c6:2e:7c:5c:
fe:bc:dd:cf:82:b7:a6:c3:50:d4:be:4f:a1:87:af:
a6:37:f4:9c:59:46:bf:0a:f8:87:7e:03:89:09:d6:
16:31:f9:9d:77:c6:45:59:16:ce:4b:32:b2:c7:f4:
dc:e7:da:6d:8f:29:97:a2:ed:4a:fd:0e:ee:67:78:
45:f8:97:ff:f3:27:60:6f:99:90:5c:15:2b:74:eb:
c9:2c:cd:75:28:d6:b8:b5:3b:79:8a:89:d7:db:57:
93:71:ef:25:14:63:c3:e5:1a:6d:18:17:ca:c2:1b:
ff:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D2:4D:82:7B:6B:66:B4:61:3B:60:0A:FE:14:28:EC:F8:02:BD:39
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/BdJNgntrZrRhO2AK_hQo7PgCvTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.143.64.0-85.143.87.255
Signature Algorithm: sha256WithRSAEncryption
96:95:b4:74:5e:7c:b6:23:2e:26:8f:49:4b:3a:69:ca:60:3f:
2f:22:c1:30:16:98:92:64:ed:9c:34:ad:5f:06:88:bd:49:4b:
57:75:b3:5e:25:17:a2:15:d5:40:be:b2:08:a6:27:99:7d:6d:
50:8d:9c:a6:49:96:ab:cc:be:7f:c4:40:8b:22:27:4b:5d:28:
19:e2:ba:21:85:ff:87:58:d3:9f:51:f7:e5:1c:2f:56:fd:0e:
67:6a:97:10:25:3c:12:9a:f9:59:76:50:d7:74:38:e5:95:75:
75:a7:ae:1b:39:bf:ce:83:d6:c2:1e:34:2a:be:e2:fd:7d:fe:
7c:a1:cb:8a:05:59:c3:a8:7a:00:da:57:7e:49:47:28:8a:37:
62:79:31:12:1c:de:3e:90:d6:de:83:6a:9f:22:81:e6:50:37:
6f:9b:66:08:56:16:d8:76:a4:03:93:cb:d5:18:8f:8d:bd:4c:
4a:86:6d:f5:8d:56:e7:71:13:6b:12:2e:97:4a:80:af:52:59:
c2:71:f2:d3:47:97:89:8b:87:35:9c:f2:a9:f6:35:f2:54:a0:
92:bc:43:fc:55:1e:7e:73:b5:a9:44:69:2b:01:49:d2:e2:13:
c0:42:90:dc:4d:84:6e:af:32:af:5f:9c:e9:60:88:89:5d:7d:
e7:4f:a8:bb
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQhslPnH7elRazI71mNnqStMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl
MmM2ODUwHhcNMjUwMTAxMTE0ODQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNWQyNGQ4MjdiNmI2NmI0NjEzYjYwMGFmZTE0MjhlY2Y4MDJiZDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDUprnOriLDpXdZymTY5Dwd9gyRr
kY3ujmH/f8YhuIsFY6I+jqooXXsNR4J/0NOpuZmR+lHMn9V7ZMzGpRA1W/OQGK8z
p/wZsL330SD//LSTvhjT5GAsUGmnRMKARA5aEnl8BEo7PwWYxMw6tQF9Xa6lWPHw
sFW+dG881cA+j8Jzb5S5m4iOdXcowi01rLJnGMYufFz+vN3Pgremw1DUvk+hh6+m
N/ScWUa/CviHfgOJCdYWMfmdd8ZFWRbOSzKyx/Tc59ptjymXou1K/Q7uZ3hF+Jf/
8ydgb5mQXBUrdOvJLM11KNa4tTt5ionX21eTce8lFGPD5RptGBfKwhv/KwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFAXSTYJ7a2a0YTtgCv4UKOz4Ar05MB8GA1UdIwQY
MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt
NDBkOTViZDMzZmNiLzEvQmRKTmdudHJaclJoTzJBS19oUW83UGdDdlRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi
LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAZVj0AD
BANVj1AwDQYJKoZIhvcNAQELBQADggEBAJaVtHRefLYjLiaPSUs6acpgPy8iwTAW
mJJk7Zw0rV8GiL1JS1d1s14lF6IV1UC+sgimJ5l9bVCNnKZJlqvMvn/EQIsiJ0td
KBniuiGF/4dY059R9+UcL1b9DmdqlxAlPBKa+Vl2UNd0OOWVdXWnrhs5v86D1sIe
NCq+4v19/nyhy4oFWcOoegDaV35JRyiKN2J5MRIc3j6Q1t6Dap8igeZQN2+bZghW
Fth2pAOTy9UYj429TEqGbfWNVudxE2sSLpdKgK9SWcJx8tNHl4mLhzWc8qn2NfJU
oJK8Q/xVHn5ztalEaSsBSdLiE8BCkNxNhG6vMq9fnOlgiIldfedPqLs=
-----END CERTIFICATE-----
Generated at Tue Apr 15 18:45:35 2025 by rpki-client