Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/bm3jAPSokNwmkDXJzC1yE4mlh8U.roa
File: bm3jAPSokNwmkDXJzC1yE4mlh8U.roa (raw, json)
Hash identifier: Ugi+oeIGdBF2ZuSWBZVXXcNVIbH2fno96x0J1auQtLQ=
Subject key identifier: 6E:6D:E3:00:F4:A8:90:DC:26:90:35:C9:CC:2D:72:13:89:A5:87:C5
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 0194228E004AFD59A31CF5B471C0576117D6
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/bm3jAPSokNwmkDXJzC1yE4mlh8U.roa
Signing time: Wed 01 Jan 2025 15:48:39 +0000
ROA not before: Wed 01 Jan 2025 15:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214532
IP address blocks: 213.21.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 19:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:00:4a:fd:59:a3:1c:f5:b4:71:c0:57:61:17:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Jan 1 15:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e6de300f4a890dc269035c9cc2d721389a587c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ca:a6:80:7c:30:ce:b2:5b:c1:60:55:58:ca:
95:1b:ba:60:80:cc:49:50:17:97:b8:f1:07:91:93:
2b:7c:44:b8:fb:86:17:c0:0f:d3:22:a4:dc:89:a5:
5c:e2:b4:db:40:67:fe:51:87:29:e6:1a:a5:9d:3c:
f2:04:27:57:31:77:e8:26:e7:8e:80:60:53:c0:a2:
8a:41:6d:27:f8:78:8c:59:37:ed:8e:56:38:f5:b9:
7b:15:cb:25:f5:ee:fd:20:e3:5d:72:cc:a3:2e:6f:
2e:e7:cb:bd:03:44:2e:b4:ae:e7:05:1d:6d:1c:4e:
26:b4:88:5f:21:83:62:4a:72:b0:3d:fc:32:60:0c:
f9:68:e2:a8:fb:89:06:ad:6d:d2:70:59:df:e0:e4:
41:8e:3e:77:80:2c:86:cc:6b:d1:4a:6f:4d:44:6e:
7a:49:84:30:eb:ba:a4:88:5e:38:e0:09:1b:eb:3a:
fb:69:23:0b:f1:d6:fe:22:c6:7b:8f:98:02:f1:cd:
d6:c4:dc:24:4c:db:f1:da:ce:31:12:32:b7:de:03:
d9:99:ca:fd:19:11:22:3c:93:1a:0c:4e:92:b3:68:
4a:0e:1a:d9:24:fc:3f:6e:97:ce:a6:56:55:d9:1f:
5f:85:81:ce:b1:21:53:ab:05:42:91:d1:8a:b8:47:
13:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:6D:E3:00:F4:A8:90:DC:26:90:35:C9:CC:2D:72:13:89:A5:87:C5
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/bm3jAPSokNwmkDXJzC1yE4mlh8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.239.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:09:86:61:1d:05:9e:72:80:cf:76:74:64:3b:56:b8:78:74:
5f:d9:b4:4a:79:b9:6f:21:8e:e4:46:da:e2:39:f2:98:76:e1:
40:7d:12:23:0f:92:67:76:51:f2:f8:89:86:ac:38:24:fa:10:
02:d4:0c:52:3d:a8:a1:25:c8:3b:21:be:47:12:ee:30:80:bc:
ef:19:c4:5b:5e:0b:17:66:5d:f5:3a:98:eb:45:66:01:54:4a:
79:0a:58:85:63:12:e0:ce:88:d9:ce:c2:92:8d:38:5f:aa:07:
6f:24:4b:4f:de:a5:5d:5f:ff:1a:e9:99:e1:cd:f3:ad:28:39:
49:56:39:55:24:c9:fb:4d:3e:6a:35:c6:ab:0a:b7:c9:1b:83:
c0:05:c5:78:f7:f4:b3:34:16:8d:e3:11:7b:35:66:8d:16:91:
1c:33:10:d7:6f:80:68:e9:75:04:02:5e:fc:9a:c0:b4:77:0d:
3e:23:a2:56:f8:56:95:ee:8f:4a:85:da:d3:7a:19:cd:41:6f:
7f:44:26:c2:43:28:4b:15:ca:d2:51:d8:07:84:24:df:b7:88:
1f:03:fd:a3:78:fb:c1:e5:71:8e:2e:57:2f:a7:51:33:bb:0c:
8f:5f:47:89:6b:6a:b5:74:de:4c:aa:38:aa:13:7c:65:fd:95:
bc:96:4e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:16:08 2025 by rpki-client