Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/BvWnnBlWW44V8sVOxm98LqahBBA.roa
File: BvWnnBlWW44V8sVOxm98LqahBBA.roa (raw, json)
Hash identifier: 6mRHK+yOMdXINEIp3lFBzgdVlSN/9ntwMd5HVLaTroY=
Subject key identifier: 06:F5:A7:9C:19:56:5B:8E:15:F2:C5:4E:C6:6F:7C:2E:A6:A1:04:10
Certificate issuer: /CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22
Certificate serial: 01942521FC03E06D4CE401C66DD7934750B5
Authority key identifier: D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/BvWnnBlWW44V8sVOxm98LqahBBA.roa
Signing time: Thu 02 Jan 2025 03:49:31 +0000
ROA not before: Thu 02 Jan 2025 03:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56798
IP address blocks: 212.102.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 18:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:fc:03:e0:6d:4c:e4:01:c6:6d:d7:93:47:50:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22
Validity
Not Before: Jan 2 03:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06f5a79c19565b8e15f2c54ec66f7c2ea6a10410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:da:11:cd:ba:20:07:b9:45:3b:20:72:5f:16:
be:fb:65:be:ea:f0:53:44:94:24:6c:8c:79:4e:c9:
e5:ab:6a:55:36:ec:35:32:05:a2:dd:22:10:83:eb:
df:64:16:bb:fe:45:09:48:4c:09:72:3c:99:13:ec:
ea:21:f3:9a:48:fc:f5:a3:94:47:cf:52:58:da:9b:
f8:5b:d7:6b:5a:34:2d:00:41:42:11:84:c4:d4:93:
36:e4:f5:15:c9:30:1d:a8:23:a1:e5:de:5c:01:72:
1c:e8:3e:b6:34:2e:ed:57:d9:53:ef:38:ff:9b:f1:
62:b1:83:6c:66:b9:e0:bb:a1:0f:ab:30:5c:50:a7:
db:b3:b6:19:70:da:b0:56:4f:13:89:4c:da:b2:60:
2f:e6:7c:c4:e4:fc:3f:81:77:b1:93:e0:7e:e6:35:
ee:07:24:78:aa:2b:e2:d1:87:22:eb:4b:05:db:c1:
b6:b6:ad:5c:6c:de:15:71:87:d7:32:94:14:00:34:
9c:a3:b4:79:35:1a:df:b0:6e:3e:77:af:0a:12:e2:
c2:ce:88:57:aa:7a:9a:2b:ef:b2:2f:26:67:6b:68:
c6:cb:74:1a:6b:bc:63:66:9d:ae:a9:6f:0c:46:08:
b1:74:a6:0b:2c:32:50:71:af:b8:0c:94:c4:b2:18:
d4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F5:A7:9C:19:56:5B:8E:15:F2:C5:4E:C6:6F:7C:2E:A6:A1:04:10
X509v3 Authority Key Identifier:
keyid:D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/BvWnnBlWW44V8sVOxm98LqahBBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.102.126.0/24
Signature Algorithm: sha256WithRSAEncryption
68:34:c1:a3:e2:ac:37:bf:33:6a:83:4b:a9:18:8c:f4:ac:76:
df:83:f1:88:02:cf:94:d4:84:e3:b8:31:d4:1a:f9:13:20:78:
a0:71:d4:9c:c0:be:8d:74:42:24:3c:76:b3:76:ca:e0:cb:87:
03:1a:fa:0e:50:c2:e5:ec:16:75:10:11:5e:ce:c0:6b:8b:38:
b9:9c:45:50:2d:d6:91:8f:e7:38:bc:fd:21:40:eb:54:9c:c9:
0c:03:a7:32:8e:8d:eb:79:52:70:de:f0:05:49:ad:57:fd:5c:
9d:2e:59:db:18:d9:4d:71:4d:ad:33:ce:07:9b:1d:3e:a2:85:
f0:de:28:dc:f0:98:99:e0:bf:cb:b2:ce:4c:77:3a:b8:6c:95:
32:a4:ad:54:58:a1:09:92:2a:c3:cc:0b:80:cb:3d:23:22:3d:
94:37:a4:09:7f:a7:83:06:33:f5:7f:95:e6:a1:fd:ed:21:7e:
d0:90:a3:4e:dc:2a:b0:a9:25:c1:63:07:c5:f4:76:9f:18:4f:
85:4b:13:73:94:e5:c9:4e:da:f1:f3:6b:69:df:07:9e:3b:ae:
41:4c:6e:b0:78:aa:ca:7c:64:3b:30:18:80:73:c8:9b:08:03:
ee:34:dd:77:1a:0c:42:a7:bf:ec:ff:65:e3:ac:ba:fd:97:4e:
38:66:eb:ed
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIfwD4G1M5AHGbdeTR1C1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZmMwYmVjNjBkMGJhY2UxODg5Njc3YmQ5YmI5MDE5MGNj
NGZkMjIwHhcNMjUwMTAyMDM0OTMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNmY1YTc5YzE5NTY1YjhlMTVmMmM1NGVjNjZmN2MyZWE2YTEwNDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNoRzbogB7lFOyByXxa++2W+6vBT
RJQkbIx5Tsnlq2pVNuw1MgWi3SIQg+vfZBa7/kUJSEwJcjyZE+zqIfOaSPz1o5RH
z1JY2pv4W9drWjQtAEFCEYTE1JM25PUVyTAdqCOh5d5cAXIc6D62NC7tV9lT7zj/
m/FisYNsZrngu6EPqzBcUKfbs7YZcNqwVk8TiUzasmAv5nzE5Pw/gXexk+B+5jXu
ByR4qivi0Yci60sF28G2tq1cbN4VcYfXMpQUADSco7R5NRrfsG4+d68KEuLCzohX
qnqaK++yLyZna2jGy3Qaa7xjZp2uqW8MRgixdKYLLDJQca+4DJTEshjU3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAb1p5wZVluOFfLFTsZvfC6moQQQMB8GA1UdIwQY
MBaAFNn8C+xg0LrOGIlne9m7kBkMxP0iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmZ3TDdHRFF1czRZaVdkNzJidVFHUXpFX1NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9iMGQ2ZTYtMmVkNy00OTI4LWFkNjkt
MzQ2OTAzNGZhNDQxLzEvQnZXbm5CbFdXNDRWOHNWT3htOThMcWFoQkJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9iMGQ2ZTYtMmVkNy00OTI4LWFkNjktMzQ2OTAzNGZhNDQx
LzEvMmZ3TDdHRFF1czRZaVdkNzJidVFHUXpFX1NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1GZ+MA0G
CSqGSIb3DQEBCwUAA4IBAQBoNMGj4qw3vzNqg0upGIz0rHbfg/GIAs+U1ITjuDHU
GvkTIHigcdScwL6NdEIkPHazdsrgy4cDGvoOUMLl7BZ1EBFezsBrizi5nEVQLdaR
j+c4vP0hQOtUnMkMA6cyjo3reVJw3vAFSa1X/VydLlnbGNlNcU2tM84Hmx0+ooXw
3ijc8JiZ4L/Lss5Mdzq4bJUypK1UWKEJkirDzAuAyz0jIj2UN6QJf6eDBjP1f5Xm
of3tIX7QkKNO3CqwqSXBYwfF9HafGE+FSxNzlOXJTtrx82tp3weeO65BTG6weKrK
fGQ7MBiAc8ibCAPuNN13GgxCp7/s/2XjrLr9l044Zuvt
-----END CERTIFICATE-----
Generated at Tue Apr 8 03:17:26 2025 by rpki-client