Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/t8BDYn1_4F2TyunsqfKmIL3bpGQ.roa
File: t8BDYn1_4F2TyunsqfKmIL3bpGQ.roa (raw, json)
Hash identifier: 96TEsEkP40hfvXfLq7oaqGEhgKhW300uagupuFMXgtg=
Subject key identifier: B7:C0:43:62:7D:7F:E0:5D:93:CA:E9:EC:A9:F2:A6:20:BD:DB:A4:64
Certificate issuer: /CN=bd90bc3e371140b42a21d697d8300d9410a249aa
Certificate serial: 0194266C07B633580ADAF70D7F62C9A34BF0
Authority key identifier: BD:90:BC:3E:37:11:40:B4:2A:21:D6:97:D8:30:0D:94:10:A2:49:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/t8BDYn1_4F2TyunsqfKmIL3bpGQ.roa
Signing time: Thu 02 Jan 2025 09:50:01 +0000
ROA not before: Thu 02 Jan 2025 09:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15557
IP address blocks: 195.234.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 12:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:07:b6:33:58:0a:da:f7:0d:7f:62:c9:a3:4b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd90bc3e371140b42a21d697d8300d9410a249aa
Validity
Not Before: Jan 2 09:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7c043627d7fe05d93cae9eca9f2a620bddba464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a5:60:b5:22:cb:29:d7:c6:f9:38:74:ef:cb:
8a:9a:b0:ae:b0:5b:7f:fa:90:ec:78:64:e3:fa:bf:
26:1a:9f:68:39:5c:61:45:07:ea:c4:a9:56:d6:4e:
3a:ad:76:ff:7e:12:bf:16:fe:39:df:71:91:90:dd:
c2:5b:27:76:89:57:28:c8:60:b8:c3:0b:94:fe:d6:
a1:54:68:6d:dc:42:8f:d4:4e:e7:aa:78:b2:da:ad:
c6:c2:f7:c0:a9:2a:9e:e8:ee:59:2c:4b:7b:72:c2:
5c:dd:ff:3d:4a:a1:80:1d:d6:56:8a:9e:fb:da:24:
b9:93:ce:76:80:85:5d:e0:3b:62:c6:c0:d6:af:de:
0b:5a:13:c4:f3:d2:bf:94:99:d5:ea:c0:96:69:94:
f4:d9:63:09:c5:63:9c:ce:45:5a:e7:2e:9a:4d:6e:
cc:9c:99:21:91:76:89:3d:d1:5b:b6:26:f2:97:af:
34:e7:2c:c1:b6:93:55:5c:fd:23:55:b6:38:20:22:
04:b2:07:10:62:33:1b:a2:8a:fa:92:81:b8:f7:f0:
08:88:84:f1:55:18:c4:49:14:eb:4f:91:64:80:f7:
9c:13:a9:0a:0d:00:b0:58:b7:b8:a3:0f:b3:ff:92:
c4:3c:18:ea:f5:2b:57:13:52:80:6f:75:90:36:ce:
bf:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C0:43:62:7D:7F:E0:5D:93:CA:E9:EC:A9:F2:A6:20:BD:DB:A4:64
X509v3 Authority Key Identifier:
keyid:BD:90:BC:3E:37:11:40:B4:2A:21:D6:97:D8:30:0D:94:10:A2:49:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/t8BDYn1_4F2TyunsqfKmIL3bpGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.41.0/24
Signature Algorithm: sha256WithRSAEncryption
93:16:63:72:47:b7:63:cc:47:8e:c6:e1:d1:e6:35:e5:df:ca:
7d:c8:25:7e:20:c9:c4:69:7e:b6:77:3b:6c:0f:a4:46:12:6e:
4a:5f:3f:74:88:d5:25:e0:9d:c7:b3:4d:ce:f8:d1:6c:c6:f8:
3c:0c:dc:1b:cf:76:ad:f9:7c:ae:6b:37:f4:4f:84:d7:62:79:
bf:ec:c2:54:7c:f9:95:ac:09:48:aa:c8:35:b7:78:59:3a:6f:
cd:52:ce:eb:1b:37:b5:65:96:a4:c4:d9:a9:f8:84:b9:43:0b:
e9:79:b8:11:b2:f9:fc:dd:d5:5b:a1:49:37:4f:5a:e9:33:ad:
21:dd:ce:b2:0a:36:70:6a:9c:9d:28:ad:2b:c9:33:23:22:47:
73:2a:88:c6:e6:3c:b1:08:1a:14:5c:7d:9f:35:a4:44:3f:00:
16:55:43:92:a4:2d:1e:02:a4:5b:c2:f1:c0:3c:64:84:b1:f3:
48:80:e9:d2:95:68:10:8b:11:6a:df:ec:61:f2:77:9f:01:c3:
8a:ba:80:09:a8:d1:44:96:d3:b4:bb:8a:7a:98:be:88:05:1c:
e8:b8:e5:10:42:ed:88:10:58:dd:f9:3a:2a:e1:bc:56:48:c4:
c1:7d:a7:d7:28:d0:8f:47:b1:e3:63:06:76:89:ff:a9:ee:dd:
06:a0:72:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:28:46 2025 by rpki-client