Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/Bx14mrPyOkGCiRnCoQiK8xyZi2Q.roa
File: Bx14mrPyOkGCiRnCoQiK8xyZi2Q.roa (raw, json)
Hash identifier: C2g4als5ZUHI2t4/02+/9yFNtLBjw/6au4Fyo7199Fw=
Subject key identifier: 07:1D:78:9A:B3:F2:3A:41:82:89:19:C2:A1:08:8A:F3:1C:99:8B:64
Certificate issuer: /CN=bfaea358aeeeb7d0b9e0f93d23f67d29a7ec62c8
Certificate serial: 01946A2DAF95A53F0E2701422ECF2DC59B1A
Authority key identifier: BF:AE:A3:58:AE:EE:B7:D0:B9:E0:F9:3D:23:F6:7D:29:A7:EC:62:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/Bx14mrPyOkGCiRnCoQiK8xyZi2Q.roa
Signing time: Wed 15 Jan 2025 13:36:06 +0000
ROA not before: Wed 15 Jan 2025 13:36:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1820
IP address blocks: 146.19.54.0/24 maxlen: 32
194.246.120.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 16:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6a:2d:af:95:a5:3f:0e:27:01:42:2e:cf:2d:c5:9b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfaea358aeeeb7d0b9e0f93d23f67d29a7ec62c8
Validity
Not Before: Jan 15 13:36:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=071d789ab3f23a41828919c2a1088af31c998b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e5:b7:08:b4:c4:22:23:61:30:3d:86:d2:ad:
46:9d:9c:72:ad:82:8c:a4:24:71:48:ac:7f:ea:5c:
3d:2b:5f:63:72:24:39:b9:0a:ec:38:c4:5b:4b:24:
7f:92:5d:9b:95:6c:05:1e:4f:f4:7f:6f:c5:8c:df:
11:7f:04:a2:40:be:5b:27:5e:53:07:d9:ca:86:35:
37:9a:ec:f3:4a:5e:0b:99:1b:70:b6:51:a0:cf:ff:
93:50:2b:42:78:f3:45:22:02:d5:ac:03:74:10:45:
2b:cc:4b:03:d1:56:d6:39:e8:54:36:58:a5:78:5b:
b1:d1:18:fd:dc:bd:70:cb:e6:8e:28:c1:4d:23:ae:
af:09:49:48:91:c5:4d:35:34:4a:57:10:88:e6:82:
25:b0:fa:89:16:19:ec:71:f2:fc:21:95:d5:46:95:
00:11:98:ca:32:f3:50:61:c2:88:22:b5:86:da:55:
6e:32:93:c3:0b:ff:f1:2c:83:e0:b3:9b:0e:08:21:
40:b0:ab:ed:1a:c2:7f:d2:81:22:09:e9:a2:60:51:
9c:e4:fa:38:13:f5:f6:83:15:14:4a:83:6e:4b:5e:
bf:89:c8:6d:e3:08:55:0c:2e:61:eb:0d:7e:16:4b:
24:87:be:0b:08:0a:59:22:5d:30:cd:ea:1d:14:75:
9e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1D:78:9A:B3:F2:3A:41:82:89:19:C2:A1:08:8A:F3:1C:99:8B:64
X509v3 Authority Key Identifier:
keyid:BF:AE:A3:58:AE:EE:B7:D0:B9:E0:F9:3D:23:F6:7D:29:A7:EC:62:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/Bx14mrPyOkGCiRnCoQiK8xyZi2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.54.0/24
194.246.120.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:c0:e3:29:10:09:6c:ab:18:73:1e:65:09:15:fa:b9:89:63:
bd:7e:a4:df:6e:63:1c:23:2a:63:03:02:fe:7f:b6:db:1b:c7:
8d:ba:ef:fb:aa:53:75:86:b7:c2:82:51:01:7f:93:30:0c:00:
19:cb:57:75:67:bf:85:81:a7:eb:36:d1:57:a4:ca:83:d4:6b:
14:d4:3e:4c:d5:84:30:85:ca:a0:31:f1:3a:4b:0f:94:14:8c:
59:b6:8c:a8:1e:dd:2e:c5:ff:5d:48:bf:0a:8b:7a:83:2d:a0:
36:d1:cb:1f:31:4a:8d:6a:88:4c:b4:b7:49:4c:2f:71:e0:6b:
1e:da:6e:df:17:1b:06:64:e6:b5:f7:0e:fc:28:0e:7e:84:cd:
14:fb:7b:94:57:28:f2:96:2a:0e:51:aa:70:0e:c5:4d:bc:99:
1e:8c:f2:22:4a:bb:19:b5:e6:5c:f6:19:18:6d:48:69:15:2d:
22:0e:3b:b9:6d:ca:e8:de:b9:cd:98:c7:9f:c6:37:05:7a:1e:
6e:eb:aa:34:a8:f8:13:5e:f3:e9:a0:30:65:67:54:2f:38:9b:
df:68:ab:f5:59:0c:57:b4:b8:b9:0e:74:09:bc:fb:27:99:36:
0a:07:a1:30:ad:c3:6c:7d:d8:cb:d9:8a:2f:fe:15:62:b1:80:
7d:c0:f9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 00:16:48 2025 by rpki-client