Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/Bm5UACtbnF-zdFYjA8vPOBqvgzc.roa
File: Bm5UACtbnF-zdFYjA8vPOBqvgzc.roa (raw, json)
Hash identifier: TLMH3v0yPGvBQf4sp02A0ciC7nkIzxuyV+cC5oHQvcg=
Subject key identifier: 06:6E:54:00:2B:5B:9C:5F:B3:74:56:23:03:CB:CF:38:1A:AF:83:37
Certificate issuer: /CN=b4a2085c7de3b598216b89fb0f2b1d930de66c19
Certificate serial: 019422FB81C91EFE9F49D9DA56B1B9323C7D
Authority key identifier: B4:A2:08:5C:7D:E3:B5:98:21:6B:89:FB:0F:2B:1D:93:0D:E6:6C:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/Bm5UACtbnF-zdFYjA8vPOBqvgzc.roa
Signing time: Wed 01 Jan 2025 17:48:15 +0000
ROA not before: Wed 01 Jan 2025 17:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205059
IP address blocks: 185.129.16.0/24 maxlen: 24
185.129.17.0/24 maxlen: 24
185.231.108.0/24 maxlen: 24
185.231.109.0/24 maxlen: 24
2a0f:aac0::/48 maxlen: 48
2a0f:aac0:1::/48 maxlen: 48
2a0f:aac0:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:81:c9:1e:fe:9f:49:d9:da:56:b1:b9:32:3c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a2085c7de3b598216b89fb0f2b1d930de66c19
Validity
Not Before: Jan 1 17:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=066e54002b5b9c5fb374562303cbcf381aaf8337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:33:c6:f5:c6:5e:c7:6d:38:e2:b1:4b:a8:e1:
46:83:23:fa:a0:22:84:9d:de:2e:7a:85:39:c9:a0:
13:f5:66:06:63:77:b2:cb:b9:12:86:3b:5b:38:4a:
48:c8:e0:d5:d8:97:e4:f2:fd:19:18:83:ef:78:07:
c7:6f:5e:57:36:bd:16:62:b1:f0:8a:aa:59:af:1b:
49:12:a1:04:15:e6:a5:9d:57:b4:88:40:72:42:9c:
80:a6:75:92:84:3e:75:31:eb:f7:9c:3a:62:ef:13:
ea:fa:9c:ca:82:63:64:89:c4:9c:8d:bf:29:b0:bf:
5e:0f:fb:9f:30:14:fc:4b:22:af:c3:3d:72:78:fc:
11:55:6f:e6:50:73:54:f5:d7:b3:2b:4a:32:53:6f:
4f:bc:7c:11:65:7d:95:fc:69:71:96:be:f7:42:66:
11:25:61:1f:71:ef:c6:95:42:05:b1:ce:ce:4c:33:
5e:22:a4:f8:db:19:93:ea:68:84:29:9a:aa:7c:42:
c2:7d:e2:08:48:a1:e3:6e:74:e8:c0:8d:f1:bb:e9:
90:bb:e6:f1:3c:b1:f9:40:f5:48:51:92:98:af:ac:
d8:0e:14:fc:bb:61:7b:a9:37:a1:69:b1:1e:e1:8d:
2d:63:ab:dc:3f:9d:cf:e2:d5:38:6c:db:8a:70:87:
d7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:6E:54:00:2B:5B:9C:5F:B3:74:56:23:03:CB:CF:38:1A:AF:83:37
X509v3 Authority Key Identifier:
keyid:B4:A2:08:5C:7D:E3:B5:98:21:6B:89:FB:0F:2B:1D:93:0D:E6:6C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/Bm5UACtbnF-zdFYjA8vPOBqvgzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.16.0/23
185.231.108.0/23
IPv6:
2a0f:aac0::-2a0f:aac0:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
89:b6:58:52:09:88:3a:cd:82:b8:f5:9a:c9:c6:4c:75:58:62:
b8:09:c6:b7:4f:e2:5b:f1:92:c7:67:15:7c:14:f0:01:b7:38:
d0:b5:a0:73:0c:81:1e:59:b3:8b:8f:47:e8:47:d8:64:7b:89:
d7:ae:eb:51:99:63:dd:4c:f0:99:21:25:1f:5e:4a:06:03:b8:
ae:a4:62:c2:d0:50:b9:c3:02:b2:b2:73:ae:4c:cf:5d:f8:2e:
05:03:02:95:ab:ed:66:1e:ea:06:91:b3:59:27:23:36:f2:60:
0f:6a:d5:74:d3:fe:d8:3c:0b:20:ed:d9:b1:b4:75:5d:b5:53:
2e:ab:3e:81:05:05:db:ad:c3:24:c1:fa:37:50:a6:ce:a3:c9:
36:bb:af:b8:ad:e6:68:84:be:68:a3:5a:e1:41:e3:d0:1d:e6:
4e:a5:a4:27:04:71:31:67:99:cc:1c:25:df:11:9e:14:38:22:
dc:9b:71:f0:ee:ff:82:39:e5:ef:99:5b:11:cf:b7:59:fb:31:
bf:eb:5b:1c:3a:ec:79:36:fd:3e:de:9e:b3:db:49:aa:c9:9e:
f5:fb:6c:f0:34:d1:5e:49:65:5e:15:26:d6:f4:27:90:e9:9f:
f5:a6:6d:9e:ff:19:6b:53:48:35:99:a9:62:66:4c:d1:8a:aa:
15:2c:43:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:19:55 2025 by rpki-client