Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/BQcLEt_fhF3T8cK9G4llL9qzCF4.roa
File: BQcLEt_fhF3T8cK9G4llL9qzCF4.roa (raw, json)
Hash identifier: HsXDiNZ/6cIaXPnh2ptBxpxCA2P5yT/9b+aknpD6TWU=
Subject key identifier: 05:07:0B:12:DF:DF:84:5D:D3:F1:C2:BD:1B:89:65:2F:DA:B3:08:5E
Certificate issuer: /CN=2557fa956f0f53980d79c32ce1e6e93efd488fd7
Certificate serial: 019422FBAF3F33842AF2BECB286A8EEBC488
Authority key identifier: 25:57:FA:95:6F:0F:53:98:0D:79:C3:2C:E1:E6:E9:3E:FD:48:8F:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVf6lW8PU5gNecMs4ebpPv1Ij9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/BQcLEt_fhF3T8cK9G4llL9qzCF4.roa
Signing time: Wed 01 Jan 2025 17:48:27 +0000
ROA not before: Wed 01 Jan 2025 17:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208118
IP address blocks: 152.89.65.0/24 maxlen: 24
152.89.66.0/24 maxlen: 24
152.89.67.0/24 maxlen: 24
2a09:2e40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/JVf6lW8PU5gNecMs4ebpPv1Ij9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:af:3f:33:84:2a:f2:be:cb:28:6a:8e:eb:c4:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2557fa956f0f53980d79c32ce1e6e93efd488fd7
Validity
Not Before: Jan 1 17:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05070b12dfdf845dd3f1c2bd1b89652fdab3085e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ce:fa:5b:c6:2e:7c:e0:80:b6:1d:59:13:b7:
02:22:21:55:d0:28:25:c8:ac:4f:6f:a0:74:e6:38:
3c:1b:68:0b:3f:20:8e:06:06:5f:cd:14:d6:57:de:
6b:29:7e:ea:29:58:77:8c:a3:16:6f:be:3f:b8:a5:
f2:43:36:ab:f9:6b:21:12:53:cf:cd:af:18:3a:da:
77:0e:bd:96:8c:96:14:ee:75:c6:37:f9:75:e5:b1:
c2:d3:32:90:24:02:00:04:b3:44:6a:cf:be:b0:fe:
9f:95:60:3c:6d:4d:c0:8c:ea:eb:fd:da:37:4f:9c:
14:1c:4b:23:b9:2b:cb:a6:84:64:82:38:f8:49:a5:
48:53:de:32:40:c2:01:ca:0e:c1:10:ee:a4:99:fb:
f8:35:d0:a0:0e:95:fa:b3:8f:76:b9:ad:37:98:69:
77:f4:46:fd:09:3d:dc:ab:78:df:16:c7:04:6f:91:
35:5b:d9:d0:7e:30:49:90:50:20:10:2a:5d:3a:89:
3f:7d:a3:7e:ef:60:08:37:06:7e:62:b8:fb:76:68:
b1:78:8e:ed:30:59:e5:e1:af:cb:9b:a6:60:7a:5f:
42:06:e0:6b:34:ba:ab:59:bb:1c:af:ac:eb:7f:ec:
24:12:48:40:74:28:0b:ac:a9:1a:e4:33:55:11:66:
0d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:07:0B:12:DF:DF:84:5D:D3:F1:C2:BD:1B:89:65:2F:DA:B3:08:5E
X509v3 Authority Key Identifier:
keyid:25:57:FA:95:6F:0F:53:98:0D:79:C3:2C:E1:E6:E9:3E:FD:48:8F:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVf6lW8PU5gNecMs4ebpPv1Ij9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/BQcLEt_fhF3T8cK9G4llL9qzCF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.65.0-152.89.67.255
IPv6:
2a09:2e40::/29
Signature Algorithm: sha256WithRSAEncryption
73:4d:c1:b3:6d:fb:f8:b9:c1:8c:6f:5f:49:3a:25:bc:ef:7c:
90:33:8f:a3:52:c4:1a:a2:cb:e8:bf:f7:ea:ba:3a:3d:f3:25:
67:8b:f3:9b:fc:37:e4:4e:08:35:1c:37:f0:69:e0:8a:1e:e6:
78:bf:6f:0d:fe:c3:fb:7a:0c:05:40:ee:04:d2:cc:93:be:0e:
2b:ae:43:83:94:82:b0:54:8e:ce:6d:de:b2:36:21:b2:48:55:
09:70:da:92:7f:29:3d:16:05:ad:12:da:fc:c6:e5:4e:7a:28:
21:12:25:e8:8a:38:7b:59:f7:db:b8:c5:cd:28:72:fc:f3:f8:
37:98:66:b8:6a:f7:4a:1f:d9:ed:6f:0b:34:fd:e0:a0:12:7a:
4c:e9:1e:5a:b5:c1:d7:ba:7f:89:a9:98:72:65:61:43:ff:f3:
01:63:09:25:0c:d2:23:46:6f:a0:9d:1f:96:ea:60:9a:90:38:
fb:69:ed:ec:d8:b7:37:fd:27:a8:a1:a9:80:e2:cb:02:e3:5b:
dc:15:8f:3a:76:3f:4b:e9:7e:2c:e2:05:23:0f:db:56:85:2e:
2e:d1:e2:53:da:aa:f1:46:2d:bc:aa:60:54:3c:dd:3e:c0:f3:
1e:ca:5e:b6:e3:aa:fd:27:e7:db:4c:81:0f:1f:76:d4:5c:e6:
4e:b7:e3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 21:07:04 2025 by rpki-client