Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/bf7MiBVtuN_VY-lMeIniqJDCBns.roa
File: bf7MiBVtuN_VY-lMeIniqJDCBns.roa (raw, json)
Hash identifier: m1U+Cy0bI+/dKIetpHKZZ9yo7LVmFreBiQ7nhZy+5Fo=
Subject key identifier: 6D:FE:CC:88:15:6D:B8:DF:D5:63:E9:4C:78:89:E2:A8:90:C2:06:7B
Certificate issuer: /CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Certificate serial: 01972CE10974A9F3F55D45FB2AF9EB1E1FFB
Authority key identifier: DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/bf7MiBVtuN_VY-lMeIniqJDCBns.roa
Signing time: Sun 01 Jun 2025 19:03:54 +0000
ROA not before: Sun 01 Jun 2025 19:03:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62005
IP address blocks: 91.210.108.0/23 maxlen: 24
91.221.190.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:2c:e1:09:74:a9:f3:f5:5d:45:fb:2a:f9:eb:1e:1f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Validity
Not Before: Jun 1 19:03:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6dfecc88156db8dfd563e94c7889e2a890c2067b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:65:15:30:ac:13:52:84:1b:d6:62:7a:08:88:
2c:c2:62:ba:57:38:a0:30:25:eb:7d:20:64:c6:e3:
f7:18:b8:60:50:4a:6e:76:14:76:2e:3c:71:b6:aa:
78:17:da:b1:df:ed:95:e1:66:28:29:4f:12:d6:66:
97:3a:c2:97:66:ab:e0:6b:18:82:1d:90:70:4a:ba:
82:81:d3:6c:be:05:92:c0:40:b0:38:c3:7b:98:18:
b9:57:65:91:18:0b:50:49:40:2b:79:9d:8d:ef:fa:
07:08:e6:df:05:a2:03:ca:61:e7:53:96:80:df:a6:
5f:0e:03:7e:b9:f6:46:7a:a7:ca:77:62:75:b3:3a:
93:c9:d5:df:a8:4c:c9:84:87:e8:ec:fd:76:b7:66:
09:08:8c:50:df:e1:e1:21:35:f3:54:8b:e9:f5:b4:
7b:61:b9:db:ce:dd:6f:e3:53:c8:d4:9b:e7:08:1e:
84:38:5c:f6:e8:01:c4:b6:4f:be:6f:35:4e:96:d0:
24:7d:88:04:75:b8:50:c8:17:2b:93:74:0a:77:0f:
82:96:35:3b:15:e5:0c:47:0e:29:f3:69:f1:4f:66:
61:db:74:05:74:cd:51:e7:02:67:a1:01:25:fd:6f:
39:e0:49:c6:45:f4:a5:dd:3c:e2:fd:ba:25:e3:62:
f7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:FE:CC:88:15:6D:B8:DF:D5:63:E9:4C:78:89:E2:A8:90:C2:06:7B
X509v3 Authority Key Identifier:
keyid:DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/bf7MiBVtuN_VY-lMeIniqJDCBns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.108.0/23
91.221.190.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:6c:6e:8e:ea:21:6a:ad:6d:aa:10:e1:eb:23:72:c8:01:65:
99:b3:77:3d:75:2f:f5:5c:06:36:4d:43:87:45:ad:6a:01:12:
6c:8d:fd:3e:5c:a2:08:24:20:5d:a8:be:ba:f7:23:83:42:f2:
f9:5b:7c:d0:89:57:b8:fe:83:07:d2:f6:36:f0:7f:c6:14:0e:
8f:ef:c0:fe:c4:d5:86:b9:6d:93:95:8c:dc:47:66:0e:ef:da:
0d:a8:8d:a2:9d:ce:73:29:9e:2b:be:f4:cb:28:1a:87:10:35:
f9:e3:0d:6e:52:06:33:84:35:cb:67:c7:d9:fc:2f:72:d8:90:
59:d6:be:32:71:b7:32:50:6c:1d:6e:88:77:fc:a5:9d:f6:e9:
90:95:ee:a8:9e:30:a6:e9:0c:41:44:d7:8d:56:fb:75:6f:bc:
25:5c:3c:49:43:f3:95:20:f2:ea:8a:08:5b:04:d5:2e:65:dc:
03:0c:34:ad:9f:36:69:a2:13:ae:d2:02:f7:cd:36:26:ff:cc:
08:95:14:69:0d:41:a5:42:0d:a5:77:08:83:19:04:e8:0b:18:
7d:24:4a:bf:84:69:46:91:8d:3e:7c:09:5f:b7:34:b3:61:0a:
45:82:29:fa:16:2c:99:79:7f:8a:a6:f7:67:d6:da:ee:c0:33:
30:9e:5b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:30:05 2025 by rpki-client