Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/BgzMnylry-Pwlcestj4VVhbKd_I.roa
File: BgzMnylry-Pwlcestj4VVhbKd_I.roa (raw, json)
Hash identifier: btRHIm1UQTqyJAGZlSzutNyOu9ifkelj+z5e1NbpQW8=
Subject key identifier: 06:0C:CC:9F:29:6B:CB:E3:F0:95:C7:AC:B6:3E:15:56:16:CA:77:F2
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019638ED7E42E45BE02D6CC4CF1E5C42504F
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/BgzMnylry-Pwlcestj4VVhbKd_I.roa
Signing time: Tue 15 Apr 2025 10:10:10 +0000
ROA not before: Tue 15 Apr 2025 10:10:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212084
IP address blocks: 193.183.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:38:ed:7e:42:e4:5b:e0:2d:6c:c4:cf:1e:5c:42:50:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Apr 15 10:10:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=060ccc9f296bcbe3f095c7acb63e155616ca77f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:bd:c3:84:d9:04:fe:4d:5a:26:cb:b4:50:3a:
f7:14:33:ef:8e:0d:ff:52:b8:a8:f0:a4:83:74:96:
6b:79:52:73:a5:0d:af:50:36:e5:8f:d1:17:4a:da:
b7:d8:d1:a6:e1:f1:13:d5:69:8a:12:b6:dc:d9:f8:
12:a7:68:2d:08:c3:f4:e4:a4:82:9d:f4:db:31:6e:
fe:a2:24:08:25:fc:32:f2:b9:90:4e:d4:07:05:45:
6e:2e:ac:2a:62:a5:f1:ca:f6:a2:1c:db:90:3c:78:
3d:3e:76:ef:af:ed:1e:fa:b6:66:5d:30:43:d6:c9:
53:a1:17:62:69:3e:ee:c0:cc:5e:21:db:70:ed:f6:
1e:7f:34:0c:17:33:2b:f5:d7:4f:4f:26:71:86:d5:
e9:4a:53:f2:d5:39:0e:d4:bc:00:c1:d1:08:8e:05:
e0:cc:9e:c1:c1:79:fe:55:11:3f:f6:83:08:e3:24:
65:d2:c2:e7:a1:f4:90:77:69:d7:9d:29:6d:d6:a0:
a0:05:eb:9b:2b:67:d8:9b:b9:da:c5:e1:8f:67:72:
cd:f3:1c:4c:be:f6:01:ea:67:8b:28:53:87:20:4f:
64:40:49:da:52:4c:2c:b2:1b:a6:4c:6a:2f:68:c7:
82:2e:19:30:7a:0c:4f:d3:0a:46:7a:19:a2:85:5d:
32:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:0C:CC:9F:29:6B:CB:E3:F0:95:C7:AC:B6:3E:15:56:16:CA:77:F2
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/BgzMnylry-Pwlcestj4VVhbKd_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.183.143.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:c2:64:eb:e5:ad:3f:68:6f:f4:6a:4e:38:13:a1:e6:88:d4:
0c:b4:3c:f6:18:9e:7d:48:6c:9b:d6:b1:07:7b:00:86:e8:b0:
32:f7:5a:39:ae:80:03:67:23:32:e6:14:24:e6:3a:56:4b:84:
fd:29:b9:12:6f:22:27:67:6e:1d:2f:9d:09:5f:36:04:0d:86:
91:c0:1f:7d:65:df:f7:2a:69:37:b0:60:ca:80:89:8b:8b:f6:
11:a1:5a:1e:0e:7a:e4:39:67:f3:0c:f6:f1:cf:c1:55:e4:6f:
2e:c4:a4:b4:3d:75:d3:2e:c4:81:a5:47:3f:81:78:05:d4:d3:
b3:c0:48:90:c0:7e:99:c1:2c:86:c8:3b:2b:87:39:72:d1:64:
40:67:61:02:72:63:38:04:1f:45:e2:f9:0d:4b:81:ac:46:71:
c8:2f:de:25:e7:a9:47:1f:31:bf:0f:c4:11:59:69:f7:42:a5:
c0:7a:18:aa:9a:d7:2c:37:ae:4e:d8:c0:52:9a:52:c9:c3:1b:
e9:e2:90:f5:31:74:80:e9:45:75:33:12:ad:f1:78:d4:fb:a6:
1e:e7:b0:3c:a3:66:6f:ec:bc:fe:0d:f2:04:3a:b1:d1:8e:32:
fe:b0:97:4c:7b:b6:5c:32:92:a2:b8:e9:13:53:63:e9:ac:cc:
92:22:f4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:07:47 2025 by rpki-client