Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/bJcL6HKHzx_buttCVemxibVob8I.roa
File: bJcL6HKHzx_buttCVemxibVob8I.roa (raw, json)
Hash identifier: SZzL/dyPEP686vzDaCbFGCfM1yIt57MdnV4SlZPjn8Y=
Subject key identifier: 6C:97:0B:E8:72:87:CF:1F:DB:BA:DB:42:55:E9:B1:89:B5:68:6F:C2
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 0194282423F057087F6835CE0427F355EE70
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/bJcL6HKHzx_buttCVemxibVob8I.roa
Signing time: Thu 02 Jan 2025 17:50:44 +0000
ROA not before: Thu 02 Jan 2025 17:50:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39135
IP address blocks: 94.72.156.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 05:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:23:f0:57:08:7f:68:35:ce:04:27:f3:55:ee:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 2 17:50:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c970be87287cf1fdbbadb4255e9b189b5686fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:32:f7:2d:dc:70:3e:f4:f4:88:ee:99:e1:0f:
8c:ea:96:2a:26:84:0e:f4:d7:80:c8:29:f9:38:9c:
89:db:aa:ef:25:4b:6d:57:0a:a7:c1:31:e3:62:25:
d9:6b:9a:fa:9f:31:8f:70:a6:4e:14:7b:0f:50:76:
ca:3f:e4:12:59:88:0f:d2:6f:78:39:ef:86:b5:87:
cf:34:ba:ef:f1:81:9f:62:de:6c:06:87:0d:48:88:
a3:ce:08:41:9c:b3:e3:c5:07:9a:21:f0:39:a6:28:
07:b6:72:2e:3a:0a:c6:f8:33:74:db:5f:27:63:42:
d9:57:66:31:73:18:56:b2:d3:d8:d6:a1:34:b0:4a:
d1:58:70:aa:38:ec:10:74:57:2a:09:30:fa:9d:26:
27:06:ca:c5:e1:24:9f:1d:5f:ea:12:b5:c6:be:fd:
89:18:1b:7a:80:d7:53:cf:72:b2:95:82:b2:3a:60:
6b:7e:7c:ec:dc:d7:a8:8c:8c:f7:59:9c:ca:69:ce:
03:83:c6:61:a3:06:aa:99:96:c7:34:95:58:7f:ce:
e0:ed:e8:4a:18:6e:94:94:d2:53:f0:f6:c8:56:f2:
48:c7:ff:e7:67:54:f5:b8:8f:ba:e1:dc:6f:ec:bd:
1b:13:18:03:b3:4e:12:3c:af:36:67:c8:a7:59:41:
a4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:97:0B:E8:72:87:CF:1F:DB:BA:DB:42:55:E9:B1:89:B5:68:6F:C2
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/bJcL6HKHzx_buttCVemxibVob8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.72.156.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:cf:ea:4c:5d:76:b5:d2:21:3f:88:c6:a0:62:17:d0:c0:53:
f3:67:a5:c0:40:c1:ad:6d:cf:2f:36:34:33:e3:d1:34:e1:0e:
62:82:5c:cb:ba:22:6b:9f:8f:4c:e9:81:55:e7:40:21:a2:2e:
f1:d0:56:45:48:10:b7:d1:31:44:5a:8c:f0:ae:a0:e0:24:64:
93:e2:69:0c:3b:8e:5d:0d:36:e3:2b:b2:a6:76:f7:7c:ca:65:
ca:f1:6c:fe:f2:90:c1:d7:05:44:ba:d2:c0:bb:2d:a2:d0:5f:
fa:9d:94:b7:6b:38:85:fb:92:7c:2f:05:82:6e:e0:97:03:ac:
88:3f:71:29:6d:34:27:39:69:21:8d:ea:91:c9:95:2d:ce:93:
da:83:0c:cc:6d:f7:ca:50:8d:2b:38:64:eb:da:b8:b5:61:ba:
a3:ac:6c:d5:23:97:8d:44:c6:40:67:e0:53:e7:c8:56:bf:26:
c3:1a:8b:51:c8:68:6b:d8:51:a6:de:74:6d:be:62:41:db:8b:
f9:92:30:74:ac:46:f9:9d:42:6a:f6:23:17:58:2d:17:2d:d8:
d0:45:06:68:b1:e0:0c:65:c6:28:ba:79:ba:2c:5b:64:26:95:
0f:12:e9:73:50:20:be:fb:5c:8c:6c:ac:9a:6d:b1:99:13:d6:
7b:02:32:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:07:26 2025 by rpki-client