Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/bfaBM6FlZYXa4nbuYDgVUb-kZ3Q.roa
File: bfaBM6FlZYXa4nbuYDgVUb-kZ3Q.roa (raw, json)
Hash identifier: xgsMr2NauAKQSxWJwA/kjcmJfb7a4hHGqMdZNQtzfIo=
Subject key identifier: 6D:F6:81:33:A1:65:65:85:DA:E2:76:EE:60:38:15:51:BF:A4:67:74
Certificate issuer: /CN=3bfa6636fe6440acf293b75705a7a1dcada8420b
Certificate serial: 0194266C375257CFC0969CD66B42D5522863
Authority key identifier: 3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/bfaBM6FlZYXa4nbuYDgVUb-kZ3Q.roa
Signing time: Thu 02 Jan 2025 09:50:13 +0000
ROA not before: Thu 02 Jan 2025 09:50:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208062
IP address blocks: 149.3.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:37:52:57:cf:c0:96:9c:d6:6b:42:d5:52:28:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bfa6636fe6440acf293b75705a7a1dcada8420b
Validity
Not Before: Jan 2 09:50:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6df68133a1656585dae276ee60381551bfa46774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0c:2d:57:8f:da:15:6e:1b:24:c9:bf:d8:01:
a0:f3:d3:93:4c:63:cf:11:92:8d:ae:ff:14:c9:e9:
24:58:ec:63:6b:fa:f9:71:79:92:51:11:9c:a9:66:
cc:19:25:07:b5:be:72:99:57:e3:05:2f:3a:a0:cf:
00:d4:7d:98:e1:53:e0:1d:50:af:40:6d:3d:06:26:
25:5e:4e:20:c2:43:05:05:f6:d3:aa:58:86:20:4e:
85:38:04:96:d9:22:c2:67:d8:c8:42:00:13:43:1d:
98:37:52:1d:62:c2:15:a7:53:a8:2b:fa:10:ae:f0:
74:f2:ba:ed:b6:44:84:6a:64:d6:0a:a9:5d:54:68:
67:b7:d6:e7:43:5f:49:54:8f:47:95:33:91:8b:94:
b8:ae:9f:95:80:49:bb:af:1c:ce:bf:c3:bf:c7:88:
b5:bf:2a:94:22:3a:1d:cf:9a:50:af:6f:61:38:2c:
0d:55:eb:bf:a9:e8:e7:75:de:be:40:59:54:57:5f:
e8:0f:fb:5e:0f:82:57:8a:ad:ed:5b:eb:5a:0d:4f:
13:25:bd:60:4b:45:2a:d2:97:87:c7:45:06:f8:b7:
0a:a4:90:fe:60:44:98:9f:1f:c5:70:80:e2:00:34:
9a:94:a0:dd:c9:f4:aa:9e:d8:2c:e3:67:fb:fd:85:
88:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F6:81:33:A1:65:65:85:DA:E2:76:EE:60:38:15:51:BF:A4:67:74
X509v3 Authority Key Identifier:
keyid:3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/bfaBM6FlZYXa4nbuYDgVUb-kZ3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.3.188.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:5c:0f:a8:2b:24:6e:8d:47:73:17:88:32:b1:aa:ab:24:1e:
34:9d:23:7d:57:a8:1b:03:17:39:73:b1:5d:bb:18:f2:dc:e7:
95:b5:15:39:90:e6:c0:a6:4b:06:84:2e:30:d9:07:38:8f:9b:
02:5d:8a:42:eb:76:5d:f7:47:87:95:22:60:fc:27:84:99:6a:
78:f9:6f:e3:ae:4f:5d:ab:c1:21:8e:58:dd:ab:14:40:d7:31:
c7:ac:ff:af:9b:65:79:ab:88:0c:ae:db:7c:6f:79:79:52:fe:
93:7d:72:d6:3b:65:64:73:08:b2:3d:03:7e:c3:96:b0:d7:e4:
34:40:06:e4:ab:fc:95:fa:53:69:99:1d:ec:d0:c0:06:6e:9b:
2f:03:af:df:44:64:99:55:0f:37:07:df:3a:e6:13:70:c8:a2:
6c:04:b6:fd:b3:be:0d:2f:5b:de:72:88:45:a6:ad:01:67:b6:
d2:ab:09:04:c2:7f:8f:44:44:41:81:90:89:2a:0c:e6:ed:01:
ae:30:fa:68:a1:d0:b1:16:fb:a6:d4:69:53:a8:8a:73:34:7d:
d7:6f:e1:1e:79:05:47:b5:e6:94:96:9f:c0:ac:15:5b:d5:81:
37:13:c8:aa:26:40:46:7f:a7:46:13:dd:48:b8:fb:50:22:a8:
8d:5f:c5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:58:06 2025 by rpki-client