Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/RBSA_xmAukJ_RCmNHrfeOD9E9eI.roa
File: RBSA_xmAukJ_RCmNHrfeOD9E9eI.roa (raw, json)
Hash identifier: l4NpYuAxwqDbJinyR7lEClt2QHa6uj4usBENgUTrRc0=
Subject key identifier: 44:14:80:FF:19:80:BA:42:7F:44:29:8D:1E:B7:DE:38:3F:44:F5:E2
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01942747E1DDC71469B10672053118CEAA79
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/RBSA_xmAukJ_RCmNHrfeOD9E9eI.roa
Signing time: Thu 02 Jan 2025 13:50:09 +0000
ROA not before: Thu 02 Jan 2025 13:50:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12982
IP address blocks: 212.72.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:e1:dd:c7:14:69:b1:06:72:05:31:18:ce:aa:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 2 13:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=441480ff1980ba427f44298d1eb7de383f44f5e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b7:32:85:fe:91:d6:1c:cd:90:bc:43:b6:d4:
cb:7e:f8:cc:1d:ae:78:be:a2:10:6d:7b:26:51:58:
13:18:fa:06:a3:b6:15:bd:6c:02:19:28:99:a1:2c:
9e:86:0d:74:22:20:49:a3:97:c8:8d:48:44:c5:be:
5f:f2:15:ac:d8:b7:37:5c:b1:3f:96:9a:03:9f:7b:
24:48:c5:2c:e7:c9:9c:7c:f2:50:fc:8a:4d:5e:2f:
56:f4:81:a8:b5:7d:f4:cf:45:7c:d1:2f:20:df:2d:
99:d1:18:e4:26:ba:ed:44:c2:67:17:4c:57:76:63:
9f:9b:12:5f:59:2b:8b:6a:87:2b:18:3a:c7:04:c3:
75:1c:86:e6:d5:28:df:55:4d:47:27:28:6a:81:0a:
80:23:79:14:0f:fc:55:a5:0e:50:f2:7d:97:91:b0:
23:e8:cb:51:8b:8b:92:65:57:91:4e:1f:9a:85:b4:
65:75:e5:cc:14:39:14:b0:3d:90:7b:43:ee:92:d4:
f1:c8:4b:bd:07:7b:2d:be:34:4d:cf:ef:61:85:64:
d9:aa:9a:91:38:a7:90:81:4d:57:76:09:84:95:8e:
4b:86:35:2e:a0:7e:04:0c:97:51:f0:c8:98:09:c8:
60:aa:54:f2:e2:dd:e1:f1:fc:8f:b7:14:da:20:42:
0b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:14:80:FF:19:80:BA:42:7F:44:29:8D:1E:B7:DE:38:3F:44:F5:E2
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/RBSA_xmAukJ_RCmNHrfeOD9E9eI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.72.195.0/24
Signature Algorithm: sha256WithRSAEncryption
84:86:b5:89:81:47:8b:12:94:5a:00:9a:35:3e:a3:07:ce:25:
c4:0b:6d:34:3d:16:75:f7:cf:d6:29:eb:8d:ec:e3:15:1f:b9:
c1:a7:38:03:98:5b:c4:13:ed:3b:07:b9:2d:58:f2:25:2a:36:
41:91:12:f3:58:fe:ef:54:00:0d:d2:23:57:69:06:47:5e:88:
21:34:a2:3d:20:f3:b7:e6:1e:37:1e:31:dc:6e:ad:d3:4c:9e:
3a:9e:70:ec:07:50:e0:20:f4:d2:6a:be:f3:70:c3:ea:6b:63:
e1:8d:21:6e:f1:9d:11:14:39:11:ce:7b:53:16:0c:24:a1:47:
83:15:ef:99:bb:f7:88:0f:c0:ec:bb:d0:1a:d8:c0:b1:c2:0b:
ee:75:bf:95:8e:0c:9f:9f:87:10:45:c1:5b:24:5a:af:8d:7c:
82:d3:68:c2:76:e8:dc:d1:d7:c9:1a:49:33:1b:b2:92:01:21:
4c:ef:47:11:d6:ea:d7:11:e6:2b:aa:91:71:e1:15:4d:4e:1d:
16:64:c4:e7:06:95:7a:cf:bd:42:e5:f6:7a:c7:20:67:2a:2c:
1e:49:87:a8:c9:69:52:f4:f5:71:92:3c:2d:1e:51:06:4d:27:
d0:7a:64:ab:d0:7e:6e:a3:6f:b5:6e:fb:2a:62:63:e2:bb:a1:
fb:c4:4f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:21:24 2025 by rpki-client