Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/BBrcZolorsy-tffprBkzb6kzxjw.roa
File: BBrcZolorsy-tffprBkzb6kzxjw.roa (raw, json)
Hash identifier: LubTLYd6O/FVL7Y6tbf5xWEWtjZWCQG4GmiGhTzuDxo=
Subject key identifier: 04:1A:DC:66:89:68:AE:CC:BE:B5:F7:E9:AC:19:33:6F:A9:33:C6:3C
Certificate issuer: /CN=d4ff7bac644d5956722e5e183a22fb1455e75546
Certificate serial: 019423D7D8A9BAAB4A69A9E4225D2636DA6F
Authority key identifier: D4:FF:7B:AC:64:4D:59:56:72:2E:5E:18:3A:22:FB:14:55:E7:55:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P97rGRNWVZyLl4YOiL7FFXnVUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/BBrcZolorsy-tffprBkzb6kzxjw.roa
Signing time: Wed 01 Jan 2025 21:48:55 +0000
ROA not before: Wed 01 Jan 2025 21:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47461
IP address blocks: 195.242.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1P97rGRNWVZyLl4YOiL7FFXnVUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:d8:a9:ba:ab:4a:69:a9:e4:22:5d:26:36:da:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ff7bac644d5956722e5e183a22fb1455e75546
Validity
Not Before: Jan 1 21:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=041adc668968aeccbeb5f7e9ac19336fa933c63c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:30:2b:84:9c:05:f4:f8:f0:e5:62:ab:92:5a:
ff:7c:dc:79:72:ff:33:1b:ee:2c:80:dc:1c:03:6a:
55:2d:9b:0f:09:42:fa:a5:a1:1d:31:bc:77:8f:52:
2b:7c:ef:0f:1a:d9:e5:e2:cb:76:25:2c:ff:33:47:
a6:02:47:5d:40:94:e7:05:79:7b:2d:ac:f4:36:cc:
75:6c:a9:9f:3f:1f:fb:db:84:c5:4d:eb:0f:e1:9f:
27:ad:e5:dc:51:93:6a:6c:11:0a:95:e8:b9:f5:cf:
1d:06:ce:4a:55:ca:47:e0:4b:cb:dc:b9:dd:fd:94:
c8:c0:97:40:ac:4b:37:4a:f1:03:2b:9a:2c:16:cb:
b8:e1:1d:45:69:81:63:d3:6f:30:dd:e6:65:99:32:
46:7b:bd:32:ad:90:5a:2d:9d:4f:53:be:15:c8:8d:
61:76:5f:d0:5a:f2:3b:25:5f:91:bc:e1:bb:2d:01:
5c:60:66:1d:89:f4:c5:16:4a:9a:4f:0b:46:49:18:
34:46:53:a3:e1:bf:1e:d6:67:08:8d:4e:ab:af:5e:
d6:f0:da:e1:14:84:66:f5:08:ab:ef:34:ba:4f:0e:
2f:7e:4d:a4:2d:b4:ab:db:41:75:4b:fa:3b:c4:c5:
94:86:13:07:8a:14:ba:1d:14:84:3e:b9:d3:d0:07:
e7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:1A:DC:66:89:68:AE:CC:BE:B5:F7:E9:AC:19:33:6F:A9:33:C6:3C
X509v3 Authority Key Identifier:
keyid:D4:FF:7B:AC:64:4D:59:56:72:2E:5E:18:3A:22:FB:14:55:E7:55:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P97rGRNWVZyLl4YOiL7FFXnVUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/BBrcZolorsy-tffprBkzb6kzxjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.174.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:34:b6:d4:e9:f6:f5:d9:0f:2d:58:2f:8c:af:a4:c1:33:9a:
57:2b:5d:91:9d:88:ac:75:06:1e:04:8f:a1:63:ee:e5:26:a8:
97:b8:c6:73:ba:3d:1a:6c:76:a6:4e:fa:d2:ba:62:78:c1:6b:
76:08:d3:e1:53:79:42:3f:3f:97:4c:da:7a:81:88:51:6c:f8:
34:85:2e:31:b4:84:d5:fd:15:9c:79:01:9f:1e:23:63:79:22:
fb:a4:07:cd:c1:ec:e0:2e:a2:f4:fe:04:c1:ae:17:fb:8e:42:
5f:4f:eb:6c:1d:95:13:a8:ed:d6:89:71:ca:2f:21:ff:0a:e2:
64:fc:ae:24:f0:fc:92:85:dd:3e:b7:f2:9d:23:33:a3:e1:57:
43:a0:07:0d:6e:2f:c5:b3:4f:bb:a8:d3:d5:a3:ec:c6:aa:fe:
e1:2c:a1:dc:af:f7:e9:ea:9a:d5:1f:5d:bc:16:3d:2c:a3:cf:
1f:96:52:30:6d:55:c7:01:33:af:80:1b:9b:f5:bb:d0:9c:f0:
40:ef:97:e8:b4:c0:9f:cf:e2:04:ec:86:00:8b:66:2c:41:2e:
6c:07:54:20:e8:ab:9e:7c:04:d1:f9:21:8e:f3:cb:c6:12:0e:
b6:b7:97:71:a4:7d:32:d5:4f:aa:fb:e2:44:04:6b:d2:d9:7e:
67:8b:33:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 10:01:12 2025 by rpki-client