Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/bzs57lv3Qbjc1TLCtfvKYgEau6U.roa
File: bzs57lv3Qbjc1TLCtfvKYgEau6U.roa (raw, json)
Hash identifier: HAYnok72dCcoCWV0+wPH7iuTT6c76+rSS6MIun+rwec=
Subject key identifier: 6F:3B:39:EE:5B:F7:41:B8:DC:D5:32:C2:B5:FB:CA:62:01:1A:BB:A5
Certificate issuer: /CN=bfbb03016c83cea8aa4fa9c36a3643a565cc93e6
Certificate serial: 019424B3D033C30A26430075BA9820ED06D7
Authority key identifier: BF:BB:03:01:6C:83:CE:A8:AA:4F:A9:C3:6A:36:43:A5:65:CC:93:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/bzs57lv3Qbjc1TLCtfvKYgEau6U.roa
Signing time: Thu 02 Jan 2025 01:49:11 +0000
ROA not before: Thu 02 Jan 2025 01:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20676
IP address blocks: 193.100.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 01:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:d0:33:c3:0a:26:43:00:75:ba:98:20:ed:06:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbb03016c83cea8aa4fa9c36a3643a565cc93e6
Validity
Not Before: Jan 2 01:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f3b39ee5bf741b8dcd532c2b5fbca62011abba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:83:6f:ad:e6:b0:7d:2c:be:96:fe:91:dc:98:
5a:b9:30:68:a9:fe:d9:ac:c5:2e:36:87:7c:e9:15:
0b:26:19:ef:13:29:7b:d6:be:74:95:5b:39:d6:33:
e3:3a:f6:0a:0c:d6:82:4a:0f:ff:0c:01:f7:ab:31:
70:2b:31:09:15:84:6e:4f:46:26:07:08:a2:69:4c:
cd:aa:e3:bd:47:01:02:db:b6:ea:f5:67:07:1c:16:
7c:a6:f9:c7:08:95:25:01:79:37:8e:01:d4:92:f1:
90:6c:67:85:21:9a:0c:8f:17:08:ab:3e:32:71:80:
87:26:a4:6f:36:1f:49:18:41:02:50:a4:77:ba:b3:
e3:3d:0e:7e:07:82:8f:73:38:42:e2:5b:46:ca:b5:
f2:ab:59:eb:6b:06:95:53:d0:26:ef:61:1d:d6:f0:
d9:16:7f:54:be:0a:0e:e6:f5:a9:34:06:ac:69:b7:
91:6e:2b:56:53:c9:15:c7:1f:29:d6:c2:8f:05:89:
5f:d0:b9:1e:71:db:0c:5e:88:42:21:8a:2e:d1:67:
39:0d:31:87:28:71:d6:05:c7:f1:ad:b6:ed:0b:30:
2e:bd:f4:dc:c8:b9:cd:2d:53:4c:a5:82:7c:ed:98:
b2:11:66:c7:46:92:b2:7b:d9:94:a9:ec:86:d7:47:
d6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:3B:39:EE:5B:F7:41:B8:DC:D5:32:C2:B5:FB:CA:62:01:1A:BB:A5
X509v3 Authority Key Identifier:
keyid:BF:BB:03:01:6C:83:CE:A8:AA:4F:A9:C3:6A:36:43:A5:65:CC:93:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/bzs57lv3Qbjc1TLCtfvKYgEau6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.100.209.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:96:e8:e9:7e:f5:a8:5e:a4:6d:3c:7e:f6:67:48:64:90:db:
f7:83:0a:d9:aa:bb:f7:cd:f8:9e:45:b1:cc:98:8e:55:6c:1d:
77:bf:e5:a1:a6:22:80:fc:e6:8c:86:44:40:21:c3:2e:fe:31:
df:dd:15:df:2f:bd:4d:6d:df:a1:2c:7c:2b:66:91:8c:ae:71:
ba:27:57:e7:d8:e6:67:1b:bc:fc:07:de:61:11:2b:ac:ed:d0:
df:e2:26:2b:b3:a8:5c:cc:8b:56:4f:31:4b:32:a2:7e:73:f1:
da:8b:3f:91:c5:b5:b1:d8:ef:d6:f8:ac:c0:cf:0e:f4:b3:0b:
55:50:3d:61:b6:b6:fe:26:b6:a9:51:3a:5c:a8:39:67:00:90:
8e:3a:b9:4a:28:c8:01:77:65:ff:c5:5f:ae:2a:4e:ce:e4:b4:
28:21:55:85:fb:c3:1d:e1:41:d7:89:0c:8d:14:8a:ca:ce:5c:
96:d0:13:72:42:47:49:08:3f:14:bf:cf:36:e9:4f:3b:cf:9d:
7b:21:c4:f9:42:ae:9e:6f:ba:c7:4e:63:b0:19:3e:03:8c:e7:
3a:c9:f0:80:23:16:76:22:0c:23:37:36:a9:1a:8e:75:3b:48:
39:39:40:86:b6:12:0f:e3:a3:cc:93:26:1d:08:9a:b5:d3:ed:
db:37:a3:54
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQks9AzwwomQwB1upgg7QbXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmYmIwMzAxNmM4M2NlYThhYTRmYTljMzZhMzY0M2E1NjVj
YzkzZTYwHhcNMjUwMTAyMDE0OTExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjNiMzllZTViZjc0MWI4ZGNkNTMyYzJiNWZiY2E2MjAxMWFiYmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYNvreawfSy+lv6R3JhauTBoqf7Z
rMUuNod86RULJhnvEyl71r50lVs51jPjOvYKDNaCSg//DAH3qzFwKzEJFYRuT0Ym
BwiiaUzNquO9RwEC27bq9WcHHBZ8pvnHCJUlAXk3jgHUkvGQbGeFIZoMjxcIqz4y
cYCHJqRvNh9JGEECUKR3urPjPQ5+B4KPczhC4ltGyrXyq1nrawaVU9Am72Ed1vDZ
Fn9UvgoO5vWpNAasabeRbitWU8kVxx8p1sKPBYlf0LkecdsMXohCIYou0Wc5DTGH
KHHWBcfxrbbtCzAuvfTcyLnNLVNMpYJ87ZiyEWbHRpKye9mUqeyG10fWywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG87Oe5b90G43NUywrX7ymIBGrulMB8GA1UdIwQY
MBaAFL+7AwFsg86oqk+pw2o2Q6VlzJPmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjdzREFXeUR6cWlxVDZuRGFqWkRwV1hNay1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zZjNlNTctMGUwMC00ZjJmLTk3NmIt
NDE0ZjA5YjkyYzE1LzEvYnpzNTdsdjNRYmpjMVRMQ3RmdktZZ0VhdTZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8zZjNlNTctMGUwMC00ZjJmLTk3NmItNDE0ZjA5YjkyYzE1
LzEvdjdzREFXeUR6cWlxVDZuRGFqWkRwV1hNay1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWTRMA0G
CSqGSIb3DQEBCwUAA4IBAQBflujpfvWoXqRtPH72Z0hkkNv3gwrZqrv3zfieRbHM
mI5VbB13v+WhpiKA/OaMhkRAIcMu/jHf3RXfL71Nbd+hLHwrZpGMrnG6J1fn2OZn
G7z8B95hESus7dDf4iYrs6hczItWTzFLMqJ+c/Haiz+RxbWx2O/W+KzAzw70swtV
UD1htrb+JrapUTpcqDlnAJCOOrlKKMgBd2X/xV+uKk7O5LQoIVWF+8Md4UHXiQyN
FIrKzlyW0BNyQkdJCD8Uv8826U87z517IcT5Qq6eb7rHTmOwGT4DjOc6yfCAIxZ2
IgwjNzapGo51O0g5OUCGthIP46PMkyYdCJq10+3bN6NU
-----END CERTIFICATE-----
Generated at Tue Apr 8 10:13:01 2025 by rpki-client