Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/bGJL0vSm419eiAORQ8s7RffPfa8.roa
File: bGJL0vSm419eiAORQ8s7RffPfa8.roa (raw, json)
Hash identifier: vtG180whWB4ivjuHs0qsdR0iXm8Uq7AI54KwR+XOHk8=
Subject key identifier: 6C:62:4B:D2:F4:A6:E3:5F:5E:88:03:91:43:CB:3B:45:F7:CF:7D:AF
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0195EB7C596E59D11B739F4A80FABAB8AD80
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/bGJL0vSm419eiAORQ8s7RffPfa8.roa
Signing time: Mon 31 Mar 2025 09:15:49 +0000
ROA not before: Mon 31 Mar 2025 09:15:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216350
IP address blocks: 192.165.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:eb:7c:59:6e:59:d1:1b:73:9f:4a:80:fa:ba:b8:ad:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Mar 31 09:15:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c624bd2f4a6e35f5e88039143cb3b45f7cf7daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:05:85:f5:67:ed:b0:12:d1:07:77:3b:ee:a0:
30:f1:ff:8b:9c:70:21:e7:09:3e:da:e5:a2:6d:f2:
b8:44:0f:22:6b:43:c5:2f:17:e6:7c:9b:dc:5b:d2:
54:e4:a0:c2:e6:80:cf:69:bb:0e:23:07:51:5d:35:
3f:c1:3a:2f:2a:2a:b6:b6:13:a0:69:13:21:77:1a:
40:ae:5a:24:d6:f6:13:53:e9:78:21:17:ef:d2:c1:
ae:6b:1f:de:92:cf:5c:de:07:a0:2c:e3:b2:39:50:
cd:ff:92:99:03:17:9a:04:9e:71:12:9f:c8:76:45:
fc:cf:a2:ee:52:b6:9a:a3:44:a9:ef:45:9c:90:24:
d1:d1:70:7f:d3:b6:55:74:4d:27:d1:ec:e1:89:93:
e5:aa:2d:25:35:9f:6e:24:c7:a8:d0:7c:87:61:f2:
a4:f1:fa:78:70:e5:2a:27:bb:f8:72:23:ab:2b:53:
80:fc:3c:2d:6b:6e:16:51:9a:d8:9f:98:13:30:c3:
59:bd:4a:08:4d:29:a1:37:c5:38:5b:68:b4:9b:03:
7b:9b:3f:e6:14:65:02:bd:a7:0f:b9:fa:91:d1:16:
24:d9:88:6a:a3:ce:76:bd:2a:bc:b5:fd:c5:0a:77:
1c:f2:c7:cd:56:3d:45:d4:9d:67:b0:fb:57:11:bb:
f1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:62:4B:D2:F4:A6:E3:5F:5E:88:03:91:43:CB:3B:45:F7:CF:7D:AF
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/bGJL0vSm419eiAORQ8s7RffPfa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.165.83.0/24
Signature Algorithm: sha256WithRSAEncryption
71:5b:b4:2e:3a:91:08:70:39:f4:81:98:04:b4:1a:de:88:46:
d4:8d:25:71:a8:a9:5b:28:ce:bd:bf:8f:3b:d1:2b:87:89:37:
77:42:39:4f:07:b2:2a:ab:9b:2d:ec:ff:fa:41:01:df:ba:59:
5e:7f:2e:ad:74:30:24:fb:fc:ef:24:68:46:6e:57:d7:eb:ff:
c0:7e:80:5a:d9:ba:4f:d7:a3:0c:45:e2:82:00:66:57:57:0f:
25:ad:36:ab:be:69:8d:e7:a7:79:e9:e4:e7:8d:fd:72:85:88:
10:c0:9e:e8:fd:62:80:e6:7d:a7:95:2d:b2:0d:f4:f1:b3:77:
66:41:c6:ed:c6:14:d6:dd:a4:51:c2:1e:7d:6d:9a:92:b3:0a:
d8:7c:4d:53:ad:a6:37:60:4e:57:38:8d:cf:0f:5c:26:d3:dc:
98:c2:dd:d5:35:25:8f:d3:3c:c5:75:ac:b5:ea:83:f9:0c:ba:
77:30:68:a6:ef:c9:f2:7e:7d:61:76:52:4c:01:1d:11:ad:6a:
d4:15:a8:b9:bf:9f:0b:96:2d:bc:23:f8:ec:7b:80:a1:08:e9:
07:4a:ce:88:8c:1f:bc:7e:17:44:c6:ab:c8:45:53:be:a2:3c:
28:b1:a8:eb:fc:0c:40:37:12:98:6e:b7:6d:57:9a:72:76:e4:
c8:0f:a6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 14:49:52 2025 by rpki-client