Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/BQ_7CRByLAUpF1evkSyLCrrovKE.roa
File: BQ_7CRByLAUpF1evkSyLCrrovKE.roa (raw, json)
Hash identifier: uT3RGzji41/DL4m9M7hw+Zpz+kLpotb4EKSd9Zae5tA=
Subject key identifier: 05:0F:FB:09:10:72:2C:05:29:17:57:AF:91:2C:8B:0A:BA:E8:BC:A1
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 0194228DFFA06967B3E390ED12186DE73514
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/BQ_7CRByLAUpF1evkSyLCrrovKE.roa
Signing time: Wed 01 Jan 2025 15:48:38 +0000
ROA not before: Wed 01 Jan 2025 15:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213877
IP address blocks: 213.21.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 19:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:ff:a0:69:67:b3:e3:90:ed:12:18:6d:e7:35:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Jan 1 15:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=050ffb0910722c05291757af912c8b0abae8bca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:bf:c9:f8:3f:24:85:e4:51:a0:a2:a9:2f:16:
50:22:5b:b2:9a:28:5c:c8:c2:51:23:2a:84:6e:e5:
c4:7d:69:30:c1:46:ed:cc:86:91:c7:a6:9a:a3:cf:
55:84:6b:b5:49:82:72:ca:e5:3e:a6:48:6c:05:9b:
aa:3f:38:8c:57:f9:25:d6:8f:31:a6:47:d7:65:82:
13:9a:1a:93:87:3e:53:19:41:01:ed:57:8f:b9:e8:
5e:5f:14:74:9c:79:61:44:19:8a:d5:f5:f5:79:ac:
40:67:e6:e0:aa:db:a4:26:e7:34:1b:cf:63:ea:82:
5e:bd:57:55:bf:3e:35:36:0a:81:b0:0b:be:28:36:
28:de:d6:f1:da:07:a1:3b:60:e0:ee:d3:0a:b7:2d:
3f:e7:fe:2a:d5:be:90:f2:f9:2e:9d:96:9f:7c:2b:
9c:e7:98:8b:b4:ad:bf:10:e4:19:8e:ce:72:a4:5a:
7f:c5:24:d6:42:11:98:32:9c:88:12:12:db:b6:b4:
26:a0:9e:4a:b5:f9:23:64:1b:c4:f1:1f:fc:0a:0e:
6f:19:3f:23:f1:f0:ec:51:51:4c:70:ec:d0:36:17:
61:f4:29:4c:ac:71:3d:64:3d:cc:05:fe:06:ba:09:
68:b2:90:11:27:37:cc:2c:d1:c4:71:08:c5:7f:81:
09:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:0F:FB:09:10:72:2C:05:29:17:57:AF:91:2C:8B:0A:BA:E8:BC:A1
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/BQ_7CRByLAUpF1evkSyLCrrovKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.241.0/24
Signature Algorithm: sha256WithRSAEncryption
56:d7:b0:41:38:e2:57:0c:5f:f2:15:12:bc:ba:ab:36:79:be:
b5:6b:58:58:08:e8:2d:24:88:8e:b8:f9:73:94:21:0c:a5:02:
f0:31:bc:b8:6f:29:0e:19:29:f6:6b:b6:58:ae:19:f1:0a:69:
46:24:cb:d7:4f:7f:7c:e6:a0:d9:67:61:6d:92:b3:bf:eb:3e:
4e:93:79:90:b9:1c:5c:d5:4b:82:01:94:20:27:f3:06:09:12:
61:18:5c:b2:40:df:bc:4c:79:55:23:c3:a9:31:5c:ad:a3:92:
6b:19:9d:13:74:e6:1f:03:33:e0:6f:f5:f0:04:45:e3:ab:87:
98:96:26:de:40:9d:ca:58:ec:3a:cf:42:84:e6:be:20:52:ac:
05:f6:17:e6:01:6a:19:e0:26:ce:9e:b4:96:e7:18:b1:20:e6:
26:77:79:8d:ad:76:be:08:51:42:d2:8b:a3:21:58:b4:bb:96:
0c:9d:63:4f:e3:f8:d0:92:c9:b1:d0:1a:aa:3a:8c:73:93:25:
9b:69:d3:90:f5:4c:ea:d6:6c:dc:b1:61:dc:af:3e:29:89:ec:
04:40:0c:17:6b:79:f2:ab:1d:39:8d:38:af:a7:64:4a:7b:1f:
99:77:37:89:1f:95:7e:6c:dd:ba:3b:2a:b3:5e:29:c9:f2:71:
e3:42:2d:86
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijf+gaWez45DtEhht5zUUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw
MmFjZDkwHhcNMjUwMTAxMTU0ODM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTBmZmIwOTEwNzIyYzA1MjkxNzU3YWY5MTJjOGIwYWJhZThiY2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0r/J+D8kheRRoKKpLxZQIluymihc
yMJRIyqEbuXEfWkwwUbtzIaRx6aao89VhGu1SYJyyuU+pkhsBZuqPziMV/kl1o8x
pkfXZYITmhqThz5TGUEB7VePueheXxR0nHlhRBmK1fX1eaxAZ+bgqtukJuc0G89j
6oJevVdVvz41NgqBsAu+KDYo3tbx2gehO2Dg7tMKty0/5/4q1b6Q8vkunZaffCuc
55iLtK2/EOQZjs5ypFp/xSTWQhGYMpyIEhLbtrQmoJ5KtfkjZBvE8R/8Cg5vGT8j
8fDsUVFMcOzQNhdh9ClMrHE9ZD3MBf4GuglospARJzfMLNHEcQjFf4EJFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAUP+wkQciwFKRdXr5Esiwq66LyhMB8GA1UdIwQY
MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt
MWFmMjQ2NWE4ZWVjLzEvQlFfN0NSQnlMQVVwRjFldmtTeUxDcnJvdktFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmItMWFmMjQ2NWE4ZWVj
LzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1RXxMA0G
CSqGSIb3DQEBCwUAA4IBAQBW17BBOOJXDF/yFRK8uqs2eb61a1hYCOgtJIiOuPlz
lCEMpQLwMby4bykOGSn2a7ZYrhnxCmlGJMvXT3985qDZZ2FtkrO/6z5Ok3mQuRxc
1UuCAZQgJ/MGCRJhGFyyQN+8THlVI8OpMVyto5JrGZ0TdOYfAzPgb/XwBEXjq4eY
libeQJ3KWOw6z0KE5r4gUqwF9hfmAWoZ4CbOnrSW5xixIOYmd3mNrXa+CFFC0ouj
IVi0u5YMnWNP4/jQksmx0BqqOoxzkyWbadOQ9Uzq1mzcsWHcrz4piewEQAwXa3ny
qx05jTivp2RKex+ZdzeJH5V+bN26OyqzXinJ8nHjQi2G
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:28:12 2025 by rpki-client