Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/bWBHLDLXAN-AoH5BcE0MpR6eMI8.roa
File: bWBHLDLXAN-AoH5BcE0MpR6eMI8.roa (raw, json)
Hash identifier: 1kLGiKwdqoK2K8B7I5XFtIe5sNN2BCN7xnm7j0LEaA4=
Subject key identifier: 6D:60:47:2C:32:D7:00:DF:80:A0:7E:41:70:4D:0C:A5:1E:9E:30:8F
Certificate issuer: /CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Certificate serial: 0194228E2E0EF3589DE58F639C70FA7FAA4F
Authority key identifier: AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/bWBHLDLXAN-AoH5BcE0MpR6eMI8.roa
Signing time: Wed 01 Jan 2025 15:48:50 +0000
ROA not before: Wed 01 Jan 2025 15:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31400
IP address blocks: 37.114.96.0/19 maxlen: 24
82.211.0.0/18 maxlen: 24
84.200.0.0/16 maxlen: 32
84.201.0.0/18 maxlen: 32
185.171.204.0/22 maxlen: 32
2001:1608::/32 maxlen: 48
2001:1638::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 18:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:2e:0e:f3:58:9d:e5:8f:63:9c:70:fa:7f:aa:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Validity
Not Before: Jan 1 15:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d60472c32d700df80a07e41704d0ca51e9e308f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b3:0f:12:d7:41:b6:f7:2c:e3:63:f5:10:1a:
5d:b9:2f:f0:bb:96:43:3f:a5:12:eb:35:b3:74:0e:
5c:a8:1d:35:d0:a9:34:b4:78:d8:55:dd:68:36:aa:
7a:3c:f1:33:1a:6e:91:28:4c:d2:a3:81:c4:47:04:
de:92:8e:64:57:f9:3e:d0:35:dd:19:5b:55:09:2a:
d7:1d:54:73:24:6b:10:ef:c5:cd:e2:2d:dc:03:9a:
98:08:58:1c:2a:86:46:93:ee:60:c6:f2:c4:94:47:
8c:7c:38:e2:90:f6:35:7e:cc:80:e4:ca:54:c7:f0:
ff:08:5c:25:75:9e:2b:4d:08:67:57:2b:10:ca:92:
70:89:a4:89:11:68:e8:9f:25:60:81:b8:f6:3a:0b:
70:31:1f:f0:29:a5:0c:ad:fb:5b:c3:09:2a:3f:e6:
cf:9c:65:a9:46:2d:53:f1:2d:12:4f:bd:db:04:bf:
6a:39:fa:95:9f:2c:b8:60:60:4b:71:61:2a:99:6a:
d5:70:e9:af:eb:63:65:2c:b2:bc:f8:95:03:8b:d2:
06:e2:37:b9:90:f5:38:d1:bf:cf:6f:8e:a0:7b:b5:
99:21:50:d8:49:25:ce:0f:d1:84:64:32:13:a8:9f:
c4:a1:87:6f:d6:3a:b8:03:bb:7c:61:db:46:aa:b6:
58:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:60:47:2C:32:D7:00:DF:80:A0:7E:41:70:4D:0C:A5:1E:9E:30:8F
X509v3 Authority Key Identifier:
keyid:AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/bWBHLDLXAN-AoH5BcE0MpR6eMI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.96.0/19
82.211.0.0/18
84.200.0.0-84.201.63.255
185.171.204.0/22
IPv6:
2001:1608::/32
2001:1638::/32
Signature Algorithm: sha256WithRSAEncryption
2b:a0:d7:f9:6d:aa:1b:af:52:87:c7:1a:e6:2e:c1:f4:22:be:
bf:ce:1b:ce:d6:39:4e:58:c3:d8:c1:80:7e:c9:69:d6:fe:26:
46:91:76:61:6f:23:de:6e:5c:f1:d8:fc:1b:f0:56:49:86:09:
8e:dd:61:46:5e:58:44:e4:eb:95:94:69:14:b1:f2:06:31:83:
76:a4:f3:09:83:eb:44:4a:bd:09:a3:07:63:9f:a3:7b:29:da:
cb:6d:b4:ed:0f:df:0e:ae:6f:c1:f7:08:19:86:a4:9e:7b:d0:
90:03:fc:0f:77:bb:f8:e5:27:fc:ee:f2:eb:35:57:80:66:71:
08:00:d1:90:f5:d6:1a:80:c1:44:5b:19:11:de:44:8a:f4:68:
81:3b:58:83:78:58:54:e7:94:54:5e:02:45:b4:39:1e:00:75:
4e:64:d3:27:4f:5a:ac:dc:b7:b8:2d:61:9f:c5:4b:cb:07:cd:
c8:d1:eb:59:5e:86:4f:f9:82:3b:97:f5:a4:a1:76:93:be:e1:
96:74:0e:c3:b8:c5:a0:94:a5:85:40:1b:ca:8b:d9:96:14:c5:
e1:16:b7:81:ca:9d:d4:f9:c9:1e:74:ee:80:6c:be:6e:e3:27:
72:18:54:1f:6b:5d:1a:05:bf:f4:e2:ba:d6:71:82:c0:5a:a7:
0c:1f:d7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 03:38:43 2025 by rpki-client