Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/BO-bzW2V5HfZnpDWCOZRREj0_aA.roa
File: BO-bzW2V5HfZnpDWCOZRREj0_aA.roa (raw, json)
Hash identifier: bBvM5GD33JW26g6UBHC38zwmrN/wxvFNIrA/ZVP1z3g=
Subject key identifier: 04:EF:9B:CD:6D:95:E4:77:D9:9E:90:D6:08:E6:51:44:48:F4:FD:A0
Certificate issuer: /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Certificate serial: 01941FFA804D3B4610B6A0463ADADAB8F463
Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/BO-bzW2V5HfZnpDWCOZRREj0_aA.roa
Signing time: Wed 01 Jan 2025 03:48:17 +0000
ROA not before: Wed 01 Jan 2025 03:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60985
IP address blocks: 45.10.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 12:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:80:4d:3b:46:10:b6:a0:46:3a:da:da:b8:f4:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Validity
Not Before: Jan 1 03:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04ef9bcd6d95e477d99e90d608e6514448f4fda0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:75:59:99:81:92:3c:9c:15:bd:8f:d0:29:7a:
4f:6f:5b:a7:8e:72:00:8b:31:04:e9:fb:5a:e1:28:
40:62:d5:07:ed:6d:00:73:f1:67:de:c2:30:60:00:
22:a6:30:7b:62:8c:e7:42:2b:1a:6e:b6:62:76:ad:
f8:a1:e7:bf:cb:00:8e:26:18:57:fb:e2:9e:a7:32:
be:6d:b9:80:47:59:c8:5d:15:1f:2c:eb:83:fd:97:
14:e5:6f:4d:0a:18:47:b5:7f:1c:42:65:27:47:98:
2e:52:6a:0a:aa:57:f5:c3:89:c6:3e:d9:ae:54:f3:
4f:46:86:ba:19:88:ba:fe:9f:8f:6f:55:98:42:5a:
f1:20:b9:85:6e:3a:3c:11:32:9d:85:1d:0d:25:37:
c1:82:83:79:f5:af:32:8c:73:b6:90:ab:14:27:81:
1e:24:3f:42:7a:f7:a2:96:a3:1c:28:18:43:22:24:
01:5a:d2:49:51:73:e9:69:99:7e:30:2d:c2:04:7c:
5c:c5:38:14:3d:a6:df:a5:b1:cd:f6:37:04:0d:85:
97:a2:c1:4e:a4:13:09:cf:66:82:49:53:65:75:ce:
8f:49:87:e4:b5:30:eb:ed:2c:f1:84:85:e9:fa:ec:
1f:4c:95:87:81:2a:c6:11:c7:7c:89:86:17:c0:5e:
17:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:EF:9B:CD:6D:95:E4:77:D9:9E:90:D6:08:E6:51:44:48:F4:FD:A0
X509v3 Authority Key Identifier:
keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/BO-bzW2V5HfZnpDWCOZRREj0_aA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.96.0/24
Signature Algorithm: sha256WithRSAEncryption
23:3e:e6:b9:6a:b9:5f:de:b2:68:19:f3:15:23:cc:8a:5b:b6:
07:f1:bc:f1:1c:8e:bc:b1:66:dc:6b:1e:ee:67:1b:40:c3:48:
17:ee:8d:52:5f:6f:aa:bf:41:61:43:7a:e7:9a:6e:3f:fa:c5:
46:37:da:ef:cc:d1:1b:11:4e:f9:6d:71:34:13:cc:3a:98:85:
6a:05:9a:e8:bc:26:46:23:56:1a:5d:f0:9c:13:09:4c:2a:70:
c2:2e:fe:d2:38:09:b6:64:b0:32:af:fa:05:ad:0c:3f:00:1b:
e2:49:74:6d:2e:16:56:29:41:9d:f6:19:be:a8:41:60:1b:8b:
f8:84:90:76:84:f9:64:a8:a3:5f:79:4c:2d:f9:1e:80:6c:3d:
56:25:fc:6e:7f:e3:96:ab:c5:e6:71:f1:4e:9c:f2:ef:58:f9:
84:a4:e2:47:2e:a8:11:97:2d:00:6e:b1:93:1d:c5:32:7c:16:
f4:89:3b:25:03:7b:13:77:a3:26:dc:15:68:11:89:0f:db:7c:
3d:c1:39:1e:64:03:fc:4c:92:15:e1:53:fd:45:b1:92:e7:fa:
1f:57:1d:de:e9:4d:c6:86:09:ad:6e:25:95:d5:14:58:74:8b:
5c:95:cb:b9:32:5d:b7:80:de:5a:9c:a4:8e:7f:e3:65:a2:f8:
76:b5:a7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:49:15 2025 by rpki-client