Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/bgx026u65bEUIofoNprJyhzn_S4.roa
File: bgx026u65bEUIofoNprJyhzn_S4.roa (raw, json)
Hash identifier: mkA02/DFrwmq5MSNIOugSkJaE1Y0Xy5Utto0dixWmsQ=
Subject key identifier: 6E:0C:74:DB:AB:BA:E5:B1:14:22:87:E8:36:9A:C9:CA:1C:E7:FD:2E
Certificate issuer: /CN=4bfc5a29410f1ffcf4de2a5a7058f51620b30b79
Certificate serial: 0194266B695C69C8CDB66B7685F79AB65FA1
Authority key identifier: 4B:FC:5A:29:41:0F:1F:FC:F4:DE:2A:5A:70:58:F5:16:20:B3:0B:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_xaKUEPH_z03ipacFj1FiCzC3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/bgx026u65bEUIofoNprJyhzn_S4.roa
Signing time: Thu 02 Jan 2025 09:49:21 +0000
ROA not before: Thu 02 Jan 2025 09:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212998
IP address blocks: 2001:678:dd4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_xaKUEPH_z03ipacFj1FiCzC3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:69:5c:69:c8:cd:b6:6b:76:85:f7:9a:b6:5f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bfc5a29410f1ffcf4de2a5a7058f51620b30b79
Validity
Not Before: Jan 2 09:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e0c74dbabbae5b1142287e8369ac9ca1ce7fd2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7c:bc:c8:30:31:68:02:df:0a:33:96:6c:d7:
46:ec:c6:c1:56:70:35:e4:0b:5d:34:7c:d0:3c:1b:
06:60:5f:c0:45:07:20:9a:10:cd:37:fa:86:52:99:
1b:c1:d8:2d:d1:54:14:4b:81:a8:7c:0d:6a:6d:62:
21:21:30:e8:ff:7d:4f:02:01:a9:26:aa:f4:ab:30:
88:69:8a:83:e8:06:29:6f:4b:dc:48:4f:12:66:2a:
05:07:2b:47:61:ab:67:0d:48:cb:cc:92:66:a8:67:
9c:a1:ac:6f:e1:a7:9a:72:52:85:4d:3a:b2:01:06:
31:3c:0a:fc:4f:b2:8f:41:9d:4a:3f:e5:9f:82:31:
5b:61:6d:33:e1:6e:0a:58:0e:91:88:c0:27:ce:c4:
78:cc:76:33:66:42:33:f8:0b:cd:03:18:1a:6c:e9:
47:bc:7f:84:a6:ab:03:21:14:ec:83:c0:57:58:15:
99:59:85:e3:a9:9e:c2:d7:b5:3c:6d:d3:dc:a3:26:
95:68:1b:f4:35:f9:48:1e:95:79:27:b6:36:5c:16:
32:81:ec:8a:50:a8:17:58:04:b0:3a:2d:9b:b8:6d:
aa:f2:e5:85:f2:91:c2:17:c9:48:a4:5a:85:34:36:
e8:eb:32:55:ab:4d:7a:2e:d0:5e:46:00:5e:68:3a:
5b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:0C:74:DB:AB:BA:E5:B1:14:22:87:E8:36:9A:C9:CA:1C:E7:FD:2E
X509v3 Authority Key Identifier:
keyid:4B:FC:5A:29:41:0F:1F:FC:F4:DE:2A:5A:70:58:F5:16:20:B3:0B:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_xaKUEPH_z03ipacFj1FiCzC3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/bgx026u65bEUIofoNprJyhzn_S4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:dd4::/48
Signature Algorithm: sha256WithRSAEncryption
71:1a:f8:07:55:0b:35:52:64:d9:47:e4:23:ac:c3:e8:c8:9f:
68:73:1d:ae:2a:8a:e2:25:b3:f7:53:6b:c3:de:4f:e1:93:75:
4a:3d:9d:4a:da:2e:db:93:89:9d:5e:a8:80:c2:19:69:9b:3f:
cb:7b:90:5b:f6:62:b7:c0:11:46:08:dc:df:2d:f7:68:c0:80:
2f:f4:b8:c9:49:1a:2f:cf:20:26:3a:06:a9:52:c6:c1:bf:a5:
de:90:e5:f9:22:9f:61:84:d5:93:52:11:08:ac:41:f6:92:22:
6c:32:5f:67:42:b0:49:01:6b:e1:8d:a5:4b:ed:20:af:8a:64:
01:88:06:1f:fb:e8:83:95:9f:96:71:05:c9:1e:2b:26:6c:4b:
01:11:86:6b:6d:ff:ec:c6:b8:ce:3a:34:2f:51:34:16:49:fc:
3e:42:54:f3:e8:cd:b0:1b:6d:cf:cf:c8:87:d7:aa:45:86:7f:
60:dd:38:03:ab:86:e8:43:52:a6:72:2c:ee:64:5b:0e:75:17:
b6:1a:34:46:ef:70:e2:f8:4b:8a:e1:df:e0:8e:57:85:74:57:
1f:52:e3:3e:b9:dc:3e:d3:b7:65:12:b3:a9:1f:55:70:45:5a:
b9:cf:4b:b8:e5:64:08:84:d2:d1:c3:bc:b8:95:df:ae:68:92:
24:4b:5d:4e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQma2lcacjNtmt2hfeatl+hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZmM1YTI5NDEwZjFmZmNmNGRlMmE1YTcwNThmNTE2MjBi
MzBiNzkwHhcNMjUwMTAyMDk0OTIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTBjNzRkYmFiYmFlNWIxMTQyMjg3ZTgzNjlhYzljYTFjZTdmZDJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqny8yDAxaALfCjOWbNdG7MbBVnA1
5AtdNHzQPBsGYF/ARQcgmhDNN/qGUpkbwdgt0VQUS4GofA1qbWIhITDo/31PAgGp
Jqr0qzCIaYqD6AYpb0vcSE8SZioFBytHYatnDUjLzJJmqGecoaxv4aeaclKFTTqy
AQYxPAr8T7KPQZ1KP+WfgjFbYW0z4W4KWA6RiMAnzsR4zHYzZkIz+AvNAxgabOlH
vH+EpqsDIRTsg8BXWBWZWYXjqZ7C17U8bdPcoyaVaBv0NflIHpV5J7Y2XBYygeyK
UKgXWASwOi2buG2q8uWF8pHCF8lIpFqFNDbo6zJVq016LtBeRgBeaDpbaQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFG4MdNuruuWxFCKH6Daaycoc5/0uMB8GA1UdIwQY
MBaAFEv8WilBDx/89N4qWnBY9RYgswt5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU194YUtVRVBIX3owM2lwYWNGajFGaUN6QzNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8zYjJiZmQtNjBlYi00Y2JmLTlmN2Yt
MTM2MjU3ZTMwNzZlLzEvYmd4MDI2dTY1YkVVSW9mb05wckp5aHpuX1M0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8zYjJiZmQtNjBlYi00Y2JmLTlmN2YtMTM2MjU3ZTMwNzZl
LzEvU194YUtVRVBIX3owM2lwYWNGajFGaUN6QzNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA3U
MA0GCSqGSIb3DQEBCwUAA4IBAQBxGvgHVQs1UmTZR+QjrMPoyJ9ocx2uKoriJbP3
U2vD3k/hk3VKPZ1K2i7bk4mdXqiAwhlpmz/Le5Bb9mK3wBFGCNzfLfdowIAv9LjJ
SRovzyAmOgapUsbBv6XekOX5Ip9hhNWTUhEIrEH2kiJsMl9nQrBJAWvhjaVL7SCv
imQBiAYf++iDlZ+WcQXJHismbEsBEYZrbf/sxrjOOjQvUTQWSfw+QlTz6M2wG23P
z8iH16pFhn9g3TgDq4boQ1KmcizuZFsOdRe2GjRG73Di+EuK4d/gjleFdFcfUuM+
udw+07dlErOpH1VwRVq5z0u45WQIhNLRw7y4ld+uaJIkS11O
-----END CERTIFICATE-----
Generated at Sun Feb 2 08:37:42 2025 by rpki-client