Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/Bt61Duabnrfk_tvUxqrlxq35pFs.roa
File: Bt61Duabnrfk_tvUxqrlxq35pFs.roa (raw, json)
Hash identifier: 3mTb4E/hZOVdEv0TkUnMgMT0a7EJ9fK0ZGjFdNjhe4g=
Subject key identifier: 06:DE:B5:0E:E6:9B:9E:B7:E4:FE:DB:D4:C6:AA:E5:C6:AD:F9:A4:5B
Certificate issuer: /CN=c77a76392556118a0ceeb54130669c8e696f155b
Certificate serial: 019421B1BD4B8FD093B4D7F7A21D99DC8387
Authority key identifier: C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/Bt61Duabnrfk_tvUxqrlxq35pFs.roa
Signing time: Wed 01 Jan 2025 11:48:03 +0000
ROA not before: Wed 01 Jan 2025 11:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 559
IP address blocks: 193.222.112.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 20:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:bd:4b:8f:d0:93:b4:d7:f7:a2:1d:99:dc:83:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77a76392556118a0ceeb54130669c8e696f155b
Validity
Not Before: Jan 1 11:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06deb50ee69b9eb7e4fedbd4c6aae5c6adf9a45b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e9:c7:a3:51:b9:90:4d:b7:23:4b:c2:45:9b:
75:8b:11:d6:7b:b1:b4:9e:67:bb:54:7d:fa:ef:88:
64:32:5e:cf:3c:fa:a3:f8:6d:a3:07:64:9e:04:b4:
3b:5b:36:2a:05:00:8c:8a:95:46:24:e8:29:3c:45:
4b:02:18:2b:7f:fe:3c:06:d9:10:6f:24:5f:85:c8:
e5:23:e6:1d:56:b7:48:fd:6c:6e:a2:00:38:8b:6d:
6c:44:4a:0d:33:6e:6d:96:fa:3b:b1:06:9b:da:17:
b8:12:90:bf:c3:39:df:d0:6b:4b:c1:73:fc:f8:63:
c4:a4:cd:a5:08:bc:ee:21:a4:d8:66:fc:f3:2d:bb:
03:3c:c1:35:45:bf:79:15:65:cc:c6:0a:1b:05:ea:
e0:ae:aa:5c:88:27:bc:e9:db:3f:06:5d:61:c3:67:
b1:eb:ab:3a:cb:c3:04:d9:ed:5b:5a:08:cc:01:e4:
bb:e7:6c:77:42:ee:6a:20:d0:2c:73:4a:d1:11:8f:
f6:5d:c1:e3:80:5c:4d:30:03:8c:89:b2:e2:30:93:
e1:3e:09:d7:49:a3:63:58:ef:bd:dd:e7:57:83:47:
09:04:9a:54:f4:a7:d5:77:f5:70:75:fb:d6:f8:3d:
e6:ef:9f:c3:b9:c3:0e:fb:8f:1b:85:5d:6a:c8:49:
fd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:DE:B5:0E:E6:9B:9E:B7:E4:FE:DB:D4:C6:AA:E5:C6:AD:F9:A4:5B
X509v3 Authority Key Identifier:
keyid:C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/Bt61Duabnrfk_tvUxqrlxq35pFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.222.112.0/20
Signature Algorithm: sha256WithRSAEncryption
63:96:28:c0:15:48:4f:d9:8b:7a:52:49:d6:8d:2a:50:d8:ff:
cc:8d:f8:a0:31:36:23:7e:a5:5f:7f:41:39:0c:4d:79:c5:51:
62:94:f9:88:2b:41:ae:e5:14:cb:07:0a:26:f9:e9:a9:a5:20:
2f:ca:23:6e:f0:85:58:7c:e0:b4:92:7a:4e:2b:96:a5:b2:7d:
c5:14:51:02:8a:39:3e:4e:4b:0e:9f:4b:5f:8f:ce:0a:b8:2a:
a7:df:bb:c8:3c:20:b3:b6:1e:cd:81:29:71:8c:52:ae:98:b3:
b7:26:7b:e1:ea:59:34:ea:c0:f3:ed:3d:ec:88:a7:42:a8:65:
fb:02:ac:bc:16:b7:d5:70:94:67:45:09:ad:fe:d9:b5:5a:af:
8d:e1:a9:12:48:cb:a2:be:4f:c6:81:cf:4b:d1:1c:4e:15:05:
b8:20:df:7e:16:ed:54:a7:89:43:2a:d5:b1:5c:a3:28:dd:2b:
4e:9d:48:df:e8:db:f8:64:ce:73:b9:82:2e:f9:de:61:b1:cc:
6c:58:88:1e:d6:c4:8f:9d:73:f5:60:fb:7a:bf:18:df:ce:2d:
cb:b1:49:e0:de:1f:08:0d:88:a5:d4:72:f3:52:63:43:45:32:
35:bc:23:39:0c:16:70:7f:82:1c:53:72:a6:9d:1d:4c:d9:4d:
e1:06:e6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 05:16:58 2025 by rpki-client