Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/bazUCWmUnVsUPI48K1m2IjF_KYM.roa
File: bazUCWmUnVsUPI48K1m2IjF_KYM.roa (raw, json)
Hash identifier: AyYWdQS+wgobcYMMdY+5yoadUDioqr0YVD4DAeG57TU=
Subject key identifier: 6D:AC:D4:09:69:94:9D:5B:14:3C:8E:3C:2B:59:B6:22:31:7F:29:83
Certificate issuer: /CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
Certificate serial: 019428253CF7A53699495A92C1809BDDD067
Authority key identifier: 48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/bazUCWmUnVsUPI48K1m2IjF_KYM.roa
Signing time: Thu 02 Jan 2025 17:51:56 +0000
ROA not before: Thu 02 Jan 2025 17:51:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206388
IP address blocks: 185.186.243.0/24 maxlen: 24
2a0f:f1c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:3c:f7:a5:36:99:49:5a:92:c1:80:9b:dd:d0:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
Validity
Not Before: Jan 2 17:51:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6dacd40969949d5b143c8e3c2b59b622317f2983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c2:cc:ab:b4:8e:96:79:d4:f1:d3:a5:e4:d2:
79:0c:96:9c:d5:87:89:83:46:32:cf:70:8d:9e:de:
5a:4d:27:de:00:69:f1:0c:41:64:2a:04:ce:f4:9e:
31:c6:9a:62:e2:6d:36:c2:65:64:26:b7:8f:1a:4e:
5d:37:5d:4e:f8:84:bf:ba:eb:9f:27:94:38:60:6c:
1e:a2:09:be:18:71:5a:ed:33:6f:f3:97:12:06:ab:
ed:3d:9d:65:24:e7:aa:d7:7e:92:82:20:64:d8:62:
3c:56:52:6d:6a:7d:bf:02:60:60:da:d6:05:4f:6f:
ce:4d:d2:63:e2:f3:36:76:8a:c7:df:1c:27:ba:d3:
a5:5f:2a:5c:f7:a7:f8:96:e8:de:de:01:ef:a9:a2:
42:80:8c:92:f8:33:4b:f6:84:3d:6e:a5:d1:6b:75:
99:f1:9d:f8:c0:20:e7:65:21:eb:1b:3e:ae:8d:df:
ec:93:92:e9:94:3b:ad:55:3d:3d:a9:12:8d:3f:5c:
d2:48:a2:ea:c5:4a:f4:16:38:5c:fe:20:32:bc:a8:
ab:d9:ca:15:eb:64:11:b3:54:d0:25:6d:29:7a:7c:
49:81:b8:f7:39:c3:d0:bb:b5:04:c5:d8:e5:cd:0c:
65:ce:fd:08:5b:81:e0:a1:7e:f3:3c:23:eb:6d:57:
c3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:AC:D4:09:69:94:9D:5B:14:3C:8E:3C:2B:59:B6:22:31:7F:29:83
X509v3 Authority Key Identifier:
keyid:48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/bazUCWmUnVsUPI48K1m2IjF_KYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.243.0/24
IPv6:
2a0f:f1c0::/29
Signature Algorithm: sha256WithRSAEncryption
9a:34:d5:5e:23:89:77:aa:c7:3b:f9:4d:2c:9d:ec:7f:84:16:
3c:7f:a3:96:17:66:64:3e:c2:78:1d:0c:da:ca:91:19:e8:0a:
7d:65:d1:e6:80:35:dc:b7:2e:03:af:7a:a5:95:2b:8c:3f:f6:
4d:04:e0:86:25:85:9c:39:7f:91:52:bf:8b:5c:74:d4:01:9f:
d0:14:f8:8c:e1:09:6e:d3:87:9d:8f:a5:67:8e:44:87:62:29:
60:17:58:ec:1f:cf:7a:74:ad:9d:0d:ab:be:a1:d6:20:e9:9e:
6b:28:30:cf:7d:54:eb:33:be:08:dc:e5:a5:e3:0b:00:2f:af:
f4:d5:10:91:ed:17:9b:d4:11:d6:c5:fc:eb:d6:c8:5c:18:3a:
b2:00:87:ac:72:70:e6:a0:6d:6c:58:49:76:9a:fa:4e:24:ac:
63:95:62:b7:9e:38:63:b0:dd:ae:d0:b1:49:2b:06:7a:e6:d1:
b4:19:4b:23:a0:a0:59:32:0a:84:06:e5:a1:b6:94:cd:50:af:
bb:9c:68:f7:a0:8c:d7:e8:ce:28:5c:a6:40:fa:54:7c:b9:73:
1f:cb:90:ec:58:db:85:8a:dc:46:00:4a:0f:e9:b2:61:8f:04:
50:45:e3:5d:66:f5:63:38:6f:f6:bb:29:b4:b2:c6:8d:00:5d:
1e:8c:36:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:03:33 2025 by rpki-client