Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/BGu53Mnt6YnfcS4G3l8YVZ-mfTw.roa
File: BGu53Mnt6YnfcS4G3l8YVZ-mfTw.roa (raw, json)
Hash identifier: QzO5j9RPktNq5NXFjAY7mK7/e0HDOPdGV4+293fHloM=
Subject key identifier: 04:6B:B9:DC:C9:ED:E9:89:DF:71:2E:06:DE:5F:18:55:9F:A6:7D:3C
Certificate issuer: /CN=f454f84f78085f8ea03a49689cbe372e74ac153c
Certificate serial: 0194266BC6EAB973350C4E314784168B1282
Authority key identifier: F4:54:F8:4F:78:08:5F:8E:A0:3A:49:68:9C:BE:37:2E:74:AC:15:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9FT4T3gIX46gOklonL43LnSsFTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/BGu53Mnt6YnfcS4G3l8YVZ-mfTw.roa
Signing time: Thu 02 Jan 2025 09:49:44 +0000
ROA not before: Thu 02 Jan 2025 09:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39647
IP address blocks: 194.30.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9FT4T3gIX46gOklonL43LnSsFTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:c6:ea:b9:73:35:0c:4e:31:47:84:16:8b:12:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f454f84f78085f8ea03a49689cbe372e74ac153c
Validity
Not Before: Jan 2 09:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=046bb9dcc9ede989df712e06de5f18559fa67d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:3d:1f:69:cb:b6:8e:75:fa:5a:37:15:4b:7a:
bb:de:a8:6c:c1:ef:2c:55:87:ad:65:38:3c:d5:b2:
e3:7a:be:4d:ac:59:d1:eb:0c:4b:3a:2c:b4:e1:22:
50:fd:21:bf:07:b1:0e:a7:a9:55:ad:0d:71:d0:8f:
94:d5:4e:73:78:8f:c1:4e:67:5e:89:6f:8b:a9:ad:
01:57:6a:ab:fe:fd:9c:27:6c:0d:d5:22:13:0b:d7:
5f:dd:02:e3:67:ae:05:03:d2:d9:3c:86:30:8c:87:
2c:e6:9c:1d:36:f5:82:7a:44:01:57:30:0f:cd:ff:
8d:c4:ad:44:84:70:a1:e4:48:19:d0:0a:bf:82:d0:
2d:4a:65:66:c7:aa:66:3a:1e:98:e7:8b:91:83:71:
45:27:1b:eb:1a:03:a4:a9:27:0a:43:19:01:f8:4d:
e3:26:02:ed:b7:f0:62:be:68:b1:a0:e3:aa:07:5f:
01:dc:99:c9:02:c2:9d:b6:8a:5a:7f:72:9a:a2:12:
23:71:23:fc:ef:48:e0:25:e6:d0:e7:e3:25:eb:f9:
33:29:a1:51:17:fa:e0:00:c1:e4:aa:f0:ec:1e:53:
a4:07:23:3f:2a:b5:41:aa:65:c1:c0:75:08:a9:dd:
ea:70:48:69:a0:7e:12:88:ad:e1:c3:ec:44:56:bc:
2b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:6B:B9:DC:C9:ED:E9:89:DF:71:2E:06:DE:5F:18:55:9F:A6:7D:3C
X509v3 Authority Key Identifier:
keyid:F4:54:F8:4F:78:08:5F:8E:A0:3A:49:68:9C:BE:37:2E:74:AC:15:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9FT4T3gIX46gOklonL43LnSsFTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/BGu53Mnt6YnfcS4G3l8YVZ-mfTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.30.175.0/24
Signature Algorithm: sha256WithRSAEncryption
11:7d:09:0a:89:c2:d2:3b:4e:49:4d:b4:40:5b:23:72:e1:8c:
f5:7b:29:87:a8:c0:be:04:03:67:cd:45:82:00:6c:fd:cc:91:
8b:5c:50:e8:85:0a:2d:df:05:00:0a:c1:7b:9b:0a:87:de:bb:
ba:5b:f7:47:ca:21:e6:6d:08:5d:b5:91:f6:6a:10:b7:06:54:
fe:8b:21:95:da:71:bd:bb:7f:06:43:47:0e:8b:ae:05:df:f5:
f4:41:49:11:7d:f2:3a:c1:87:0e:4a:32:ac:fd:f6:46:de:2d:
f5:0f:cf:08:38:dd:a1:f2:c8:56:78:25:c4:21:6b:27:5d:26:
ce:ae:1d:15:22:ea:d2:4b:99:b0:9e:b7:3e:e2:3c:e2:2e:e8:
1d:00:2f:14:e2:bd:91:3d:8f:b3:a9:6a:8b:c4:6b:f0:fc:39:
c6:e9:3f:5e:b9:eb:a1:8d:f2:09:42:c8:1f:1b:3a:98:d5:95:
c6:f6:7c:4d:da:0a:a5:d7:e4:42:e4:0d:02:77:2b:9c:8e:81:
97:e3:26:d7:15:d0:30:2e:f1:35:a6:25:7b:c6:ba:94:8e:72:
56:6c:59:72:e1:92:2f:f1:cf:9c:d3:7e:fc:57:8e:03:58:84:
d1:a9:3e:62:2a:42:9b:64:d0:4d:c4:7c:ed:25:e4:c8:30:86:
5b:db:39:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:21 2025 by rpki-client