Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/bIOP6zTckgfazEJud8vxPBhx8yU.roa
File: bIOP6zTckgfazEJud8vxPBhx8yU.roa (raw, json)
Hash identifier: MrtqoOHLEt4NYdTsarUu/kPlSqMrs79epMZuKq+/qAs=
Subject key identifier: 6C:83:8F:EB:34:DC:92:07:DA:CC:42:6E:77:CB:F1:3C:18:71:F3:25
Certificate issuer: /CN=6bf0f847e1a216e7543c752a6350c6be23c7c6d5
Certificate serial: 0194258E7270C3E5DE621563836E731852DF
Authority key identifier: 6B:F0:F8:47:E1:A2:16:E7:54:3C:75:2A:63:50:C6:BE:23:C7:C6:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a_D4R-GiFudUPHUqY1DGviPHxtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/bIOP6zTckgfazEJud8vxPBhx8yU.roa
Signing time: Thu 02 Jan 2025 05:47:59 +0000
ROA not before: Thu 02 Jan 2025 05:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43404
IP address blocks: 77.87.200.0/21 maxlen: 24
89.23.32.0/19 maxlen: 24
2a04:17c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a_D4R-GiFudUPHUqY1DGviPHxtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:72:70:c3:e5:de:62:15:63:83:6e:73:18:52:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bf0f847e1a216e7543c752a6350c6be23c7c6d5
Validity
Not Before: Jan 2 05:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c838feb34dc9207dacc426e77cbf13c1871f325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4e:52:50:b5:dd:b9:e5:6c:54:fe:e8:22:6e:
79:3b:9f:59:e3:e9:14:cf:b5:7b:f1:cf:90:bb:40:
35:e9:c6:bd:ab:34:c8:cc:db:cf:76:d2:d3:67:6b:
59:d1:53:d6:08:52:c3:2a:26:38:8b:43:e2:d9:05:
9a:06:23:10:7d:57:a1:00:c6:92:72:11:04:18:fe:
da:37:12:8b:35:65:11:a0:30:5f:59:dc:be:5e:aa:
b0:26:91:c6:93:13:05:b6:a3:af:b9:a9:54:18:b3:
16:f4:de:23:7f:7a:80:ea:31:5a:f5:44:3e:0a:14:
f3:5c:f4:46:f6:f4:53:eb:5d:ff:0a:9d:59:41:4c:
e3:40:44:2c:c3:e4:fc:3e:5a:63:b9:7e:1c:04:3e:
2f:cc:3a:df:62:fb:b9:e7:85:b6:c6:95:5e:d3:a0:
ad:9d:1d:0c:80:0c:51:aa:01:e2:e8:4d:5e:54:cf:
59:2f:c9:9e:be:40:7d:d1:c5:ca:6c:2f:1d:20:63:
8d:0b:a0:f7:2b:4d:87:51:32:bc:f8:a2:9c:e7:09:
2e:b1:7c:76:9c:5f:1e:cd:11:4a:57:84:80:c6:fe:
85:18:5a:2d:34:cd:be:cd:77:da:9d:01:49:ca:9c:
56:96:74:75:d1:9e:a5:71:10:40:01:e4:93:25:bf:
68:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:83:8F:EB:34:DC:92:07:DA:CC:42:6E:77:CB:F1:3C:18:71:F3:25
X509v3 Authority Key Identifier:
keyid:6B:F0:F8:47:E1:A2:16:E7:54:3C:75:2A:63:50:C6:BE:23:C7:C6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_D4R-GiFudUPHUqY1DGviPHxtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/bIOP6zTckgfazEJud8vxPBhx8yU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.200.0/21
89.23.32.0/19
IPv6:
2a04:17c0::/29
Signature Algorithm: sha256WithRSAEncryption
08:f0:f6:b5:70:b0:fc:01:b1:3a:18:32:d2:19:2e:e5:03:ab:
e1:24:ed:a1:a5:36:7a:a4:9e:f5:ad:86:15:49:ad:2f:a9:c3:
c3:11:cd:e5:ef:be:48:f5:ef:90:28:37:88:71:57:2e:39:f1:
fc:3c:df:30:0b:0c:93:06:46:97:0d:2d:08:65:5d:5d:c3:58:
33:fd:16:75:38:cb:ab:18:2c:95:98:9e:bf:03:1a:68:e3:1d:
a1:17:dc:a1:e9:07:a6:50:50:fb:23:37:0f:2e:df:ab:83:38:
53:36:0f:8d:c5:98:8a:04:7e:ff:98:21:5f:3d:84:fe:3e:42:
d1:db:c4:28:96:46:22:14:d3:c7:1a:7f:07:a9:16:72:9a:3d:
63:83:8e:37:64:b9:8a:b4:cd:12:85:a4:c0:bf:06:31:13:11:
42:bc:24:fe:95:71:e7:4f:ef:b7:3c:e7:0c:a6:d3:c8:3f:64:
ce:25:fb:5d:03:10:4a:3f:15:ec:8f:a1:56:78:35:bf:fc:09:
47:83:43:b2:7b:85:b1:d5:5e:94:39:19:11:e1:af:91:52:ef:
b0:31:a7:e7:fa:4d:ec:55:ca:e7:3c:55:5d:be:9f:90:31:78:
c9:e9:f4:dc:8a:c2:9e:51:c5:85:bb:2f:96:89:34:d8:8c:e3:
57:e9:60:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:15:14 2025 by rpki-client