Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/bvgsPr3D5PPxL6J89BfI0hjp6nU.roa
File: bvgsPr3D5PPxL6J89BfI0hjp6nU.roa (raw, json)
Hash identifier: gQ8pHX8IE1KeaNe50ukz0WLLfO6NzXHlCO7loLPh0Ow=
Subject key identifier: 6E:F8:2C:3E:BD:C3:E4:F3:F1:2F:A2:7C:F4:17:C8:D2:18:E9:EA:75
Certificate issuer: /CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Certificate serial: 0194236918FE1EA31B3759C5931C748A8947
Authority key identifier: 46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/bvgsPr3D5PPxL6J89BfI0hjp6nU.roa
Signing time: Wed 01 Jan 2025 19:47:57 +0000
ROA not before: Wed 01 Jan 2025 19:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209961
IP address blocks: 77.246.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:18:fe:1e:a3:1b:37:59:c5:93:1c:74:8a:89:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Validity
Not Before: Jan 1 19:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ef82c3ebdc3e4f3f12fa27cf417c8d218e9ea75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:8d:22:b3:59:ab:61:17:c2:27:7a:e7:f7:bb:
b9:30:95:15:d3:41:af:d4:19:d6:98:99:e0:1f:58:
21:2b:c9:22:6d:9d:92:3d:47:cd:3e:22:b8:b7:6a:
8c:c0:5e:3a:bd:83:1c:d8:83:0e:62:e4:93:cf:f1:
21:1a:6e:3e:7a:ce:d3:13:af:bd:93:97:33:9f:b9:
3c:6f:c3:67:ec:d4:fd:92:f8:45:02:f2:e3:fa:e7:
39:b2:df:d6:4f:9a:ce:a9:99:0e:04:ec:2e:39:cc:
19:3e:a1:d6:18:b3:0e:37:4a:ee:0d:10:97:75:73:
f3:52:42:30:f4:80:21:53:d7:e9:ca:28:32:28:dc:
5a:34:c7:0c:3e:21:e8:6c:7e:89:4c:99:d0:a6:dc:
02:68:2d:52:9c:04:93:c4:4f:3d:d4:b4:4c:b8:04:
6e:ce:39:ae:f9:81:7d:1c:36:f3:f9:46:38:a1:b6:
5c:49:38:15:09:0e:a0:37:98:af:13:ba:95:2c:75:
8a:9e:57:1c:71:6b:8c:1a:f5:b8:f5:f4:c8:88:52:
20:e2:6e:43:2d:01:8c:ff:28:c9:d4:0b:0b:da:39:
af:3c:ca:8b:49:27:11:88:f0:f7:62:79:b6:48:c7:
1b:b5:ac:02:f3:ac:85:e9:d6:d4:87:f7:2c:7d:1c:
ab:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F8:2C:3E:BD:C3:E4:F3:F1:2F:A2:7C:F4:17:C8:D2:18:E9:EA:75
X509v3 Authority Key Identifier:
keyid:46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/bvgsPr3D5PPxL6J89BfI0hjp6nU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.242.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:25:2c:a5:c0:be:99:67:01:86:08:da:66:4f:fa:6e:46:2b:
ee:ca:cd:cd:b7:c7:f9:c4:88:65:1c:c1:6a:9a:58:8f:f6:6f:
50:ad:37:fd:34:65:f2:4b:e6:25:f1:bc:44:64:69:9a:ed:e6:
45:a8:66:30:cf:76:8a:6a:9b:57:61:29:57:73:3f:57:d9:0c:
91:c3:72:a3:a6:30:74:b8:14:d8:d5:67:28:fe:9a:ef:b0:7d:
ba:3b:ec:e1:f3:cc:a6:ec:8d:df:b1:a7:4a:8d:c9:04:83:fe:
b2:4c:83:db:39:fe:7b:f4:f0:5d:97:51:d7:e7:bc:2f:7a:0c:
ff:72:bc:77:d5:32:7e:a5:a4:cb:40:76:56:20:f9:c7:9d:0e:
c6:f7:7f:76:9f:c2:00:50:21:d2:07:81:37:b0:3d:9c:0f:ed:
f4:cf:16:61:ef:aa:f6:80:c0:d6:7d:b2:c5:50:e3:44:95:2f:
97:4e:5d:86:b4:d3:0b:ab:dc:61:ae:f9:26:24:bd:bf:8b:3d:
fd:b9:80:b5:cd:47:3d:44:7e:51:30:27:37:a7:35:12:18:f5:
90:fc:bb:8a:f7:eb:67:3a:4e:f8:a5:9a:4e:4a:77:dd:e6:05:
80:5f:cd:7a:69:88:0f:34:dd:ed:0c:fb:9d:9d:31:e2:9b:60:
d4:1f:ee:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 09:55:29 2025 by rpki-client