Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/bujGm6GH7mncfnxw5jTViL-bAwE.roa
File: bujGm6GH7mncfnxw5jTViL-bAwE.roa (raw, json)
Hash identifier: p2zIVwjY93QiNgpvPIwoy5vB+KV3M+ELyrgfIsjTSIs=
Subject key identifier: 6E:E8:C6:9B:A1:87:EE:69:DC:7E:7C:70:E6:34:D5:88:BF:9B:03:01
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 01941F8CADEBB51D960DF4D70C66ADA29E4C
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/bujGm6GH7mncfnxw5jTViL-bAwE.roa
Signing time: Wed 01 Jan 2025 01:48:20 +0000
ROA not before: Wed 01 Jan 2025 01:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50977
IP address blocks: 109.107.96.0/19 maxlen: 24
185.96.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:ad:eb:b5:1d:96:0d:f4:d7:0c:66:ad:a2:9e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 1 01:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ee8c69ba187ee69dc7e7c70e634d588bf9b0301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:6c:48:85:b2:61:98:17:33:22:03:72:9e:fe:
2e:d4:3a:82:f3:af:3c:de:20:8d:dd:21:45:4b:17:
3e:2c:99:35:32:d8:40:6b:54:9b:3e:06:71:f1:32:
ab:8c:99:f7:69:12:43:98:81:2b:c5:ee:16:25:16:
58:cc:cf:a6:37:0a:80:68:5f:d9:b8:f8:b5:4b:a0:
f7:08:4e:2f:10:4f:15:21:c5:7f:68:09:41:6e:ec:
8b:24:41:72:11:0b:7b:d5:b8:20:33:f5:ad:bb:f4:
25:04:ea:0a:ce:ef:e3:0c:61:58:12:0d:b4:8b:03:
17:6c:86:3e:68:ca:f8:63:69:0c:b3:93:c5:dd:4d:
3e:06:b9:45:46:5e:1c:8f:61:40:42:9e:c6:07:2e:
b4:aa:5e:5f:56:93:fb:d1:40:99:6b:b1:b0:db:d3:
fd:28:ca:4b:73:ff:0a:31:db:98:07:66:d9:3e:9c:
31:37:3e:26:3f:f1:89:32:19:e3:ae:ff:80:0f:e4:
25:f0:01:fe:42:b6:78:91:78:ab:25:0b:b1:00:b9:
41:bb:59:15:bf:48:78:f6:27:51:2d:ed:d4:28:ac:
24:24:34:f6:b1:13:43:57:55:f9:77:14:d4:c0:b3:
29:14:79:35:68:1d:5d:3b:b5:04:99:49:df:d8:49:
37:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E8:C6:9B:A1:87:EE:69:DC:7E:7C:70:E6:34:D5:88:BF:9B:03:01
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/bujGm6GH7mncfnxw5jTViL-bAwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.96.0/19
185.96.24.0/22
Signature Algorithm: sha256WithRSAEncryption
ba:2b:3c:55:03:9a:c2:2f:ca:36:88:34:45:60:6f:f4:f2:02:
38:81:1f:2b:49:1f:2e:21:6a:75:a1:d1:20:e1:98:20:6a:9e:
6e:59:cd:c1:9f:52:c4:ef:06:a5:d9:4d:1c:2b:ca:62:ca:44:
c3:5a:d2:ee:04:70:f2:29:e8:cb:50:be:a0:69:ea:b1:4e:08:
83:88:7f:1a:0c:15:1a:a3:eb:98:f4:48:7a:86:7c:c2:ae:bc:
c8:e5:1a:7a:3d:e5:f2:c6:1e:72:15:ef:2d:1c:f9:87:64:58:
d7:d1:e0:cd:0a:9c:dc:97:c7:a4:fd:e2:84:37:02:c5:63:3c:
ad:46:98:37:93:fb:12:0d:9d:63:65:24:7d:db:b7:11:7f:d6:
7f:a2:c3:9f:2a:f2:7d:c8:81:24:80:be:66:ce:55:75:1b:8a:
cb:ea:ed:03:5c:2d:77:5a:34:3e:3d:ec:36:ed:bd:fb:66:26:
c7:62:4a:97:4a:11:dc:5b:95:d0:c3:2d:e2:0d:bf:9a:f4:8c:
7d:76:88:18:b5:af:92:69:aa:9d:a0:4a:dd:ee:46:ae:cc:0e:
cc:d3:b6:85:e7:9d:73:8f:d8:4e:91:66:6a:58:2b:75:af:48:
40:e0:57:fe:0c:73:fb:c1:ca:81:bd:93:e0:55:f0:43:66:88:
d3:d8:4b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:41:37 2025 by rpki-client