Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/BqnvofScUisQsUQed2MQ6B18GAQ.roa
File: BqnvofScUisQsUQed2MQ6B18GAQ.roa (raw, json)
Hash identifier: aF/iFUXhalT+tHSvHf/i2jdL4yddWHGSdcJZMfIy3uE=
Subject key identifier: 06:A9:EF:A1:F4:9C:52:2B:10:B1:44:1E:77:63:10:E8:1D:7C:18:04
Certificate issuer: /CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
Certificate serial: 0194236A032BBF686B97362A6DBE763FCEEF
Authority key identifier: B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/BqnvofScUisQsUQed2MQ6B18GAQ.roa
Signing time: Wed 01 Jan 2025 19:48:57 +0000
ROA not before: Wed 01 Jan 2025 19:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208858
IP address blocks: 45.66.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:03:2b:bf:68:6b:97:36:2a:6d:be:76:3f:ce:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
Validity
Not Before: Jan 1 19:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06a9efa1f49c522b10b1441e776310e81d7c1804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a4:fe:cf:58:1a:a2:55:06:aa:86:af:7c:12:
6c:63:53:30:09:36:67:22:2d:a8:eb:f1:c9:27:ab:
9e:43:ca:5a:de:86:96:b5:3e:97:70:09:b7:7b:7e:
7c:54:d2:78:e0:0b:3a:b8:e7:ac:ad:fd:c9:0f:dd:
b3:a1:c2:a1:98:2b:9f:51:a3:fa:22:cb:0b:f0:1a:
e7:61:89:e1:24:86:06:ae:9d:7a:b5:cd:30:98:6d:
95:d9:0d:32:5a:c0:67:fd:d7:55:c1:86:2e:32:e3:
9a:a1:26:49:89:9e:e1:d9:2a:b2:4c:48:3b:a4:0f:
ad:8c:9b:ae:ab:75:e1:eb:61:5d:6a:dc:1f:27:15:
df:e3:4e:61:2e:21:f9:0d:91:2f:4d:44:7c:de:c6:
46:66:08:6c:32:80:aa:7c:22:b3:8f:4b:2c:fa:16:
1f:88:c8:9c:02:00:ca:b5:55:93:24:c3:dc:e5:cf:
f1:46:b0:90:90:69:58:ea:8c:4d:2d:e0:98:ff:b5:
5b:b7:fd:1c:da:5c:74:ab:1f:c6:95:9d:31:26:28:
70:fd:ab:b6:d4:7b:13:f7:f3:6a:ab:3e:15:f6:f7:
aa:5b:28:cb:d9:60:e2:21:81:b3:01:c8:63:a5:0c:
af:3b:9d:5f:41:27:f4:83:7f:bc:1d:c6:c9:86:ca:
8f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A9:EF:A1:F4:9C:52:2B:10:B1:44:1E:77:63:10:E8:1D:7C:18:04
X509v3 Authority Key Identifier:
keyid:B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/BqnvofScUisQsUQed2MQ6B18GAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.184.0/24
Signature Algorithm: sha256WithRSAEncryption
72:ec:67:df:3b:5b:40:b1:ea:d6:1d:f7:2f:8d:fd:47:bc:32:
7c:30:46:35:97:1a:9b:cc:1a:b1:89:11:8f:4a:f7:00:85:b8:
27:59:19:8c:b1:4c:c0:42:58:9b:f9:04:da:dc:33:fc:2c:66:
45:09:94:c5:32:7a:fa:37:ec:c8:1b:3f:62:b8:4c:43:7b:0c:
ee:c0:ca:f5:5b:b3:f9:86:49:33:14:49:0e:18:e9:56:15:70:
09:2b:37:c1:5c:89:c3:01:09:fb:98:81:35:f9:c9:01:f3:91:
07:5c:69:e3:03:1a:4c:1d:b8:8c:db:ad:1c:ad:bb:d2:df:7c:
7d:33:e0:67:0b:47:8d:57:be:07:e2:61:11:a6:94:ea:82:74:
08:f6:85:d4:7c:e6:ae:d1:df:9c:a6:4c:a7:55:48:22:c9:35:
c3:31:f2:1d:a1:00:39:05:d8:17:bf:9b:7e:86:33:95:b2:3d:
08:eb:07:39:52:f9:b7:e3:28:ea:46:a5:fb:5b:8a:99:28:dd:
2e:f2:40:6a:e5:86:47:a6:26:92:13:22:bd:65:9c:29:13:a4:
3a:c1:b9:0a:65:55:74:0a:84:35:71:fd:0c:c7:87:4e:0c:db:
d5:21:b0:99:b1:02:9d:72:89:c1:42:ae:b9:1a:13:7d:e1:1b:
b7:29:34:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 09:39:27 2025 by rpki-client