Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/B_BBQaqQOZZdiFqzJdt68RGvVTU.roa
File: B_BBQaqQOZZdiFqzJdt68RGvVTU.roa (raw, json)
Hash identifier: p8nyxzChdTcqx5QWY5bjhUZqFlEO6HaoHatKb5Ff2uw=
Subject key identifier: 07:F0:41:41:AA:90:39:96:5D:88:5A:B3:25:DB:7A:F1:11:AF:55:35
Certificate issuer: /CN=bfd09a87743817c56f8088007a5746eb69ff2e30
Certificate serial: 01942067CD4113C933F1EF3E60AEA4177765
Authority key identifier: BF:D0:9A:87:74:38:17:C5:6F:80:88:00:7A:57:46:EB:69:FF:2E:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/B_BBQaqQOZZdiFqzJdt68RGvVTU.roa
Signing time: Wed 01 Jan 2025 05:47:41 +0000
ROA not before: Wed 01 Jan 2025 05:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5602
IP address blocks: 185.82.224.0/22 maxlen: 22
2a05:9540::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:cd:41:13:c9:33:f1:ef:3e:60:ae:a4:17:77:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd09a87743817c56f8088007a5746eb69ff2e30
Validity
Not Before: Jan 1 05:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07f04141aa9039965d885ab325db7af111af5535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ce:4a:60:0f:7d:da:1a:ff:53:a0:ac:b3:f4:
f8:44:a0:0c:f5:76:cb:ff:27:12:c7:e8:bd:2a:8c:
2a:82:7c:92:94:f5:66:3d:03:df:6a:4e:cb:06:fa:
0d:73:b0:18:2a:68:e5:d4:21:37:92:21:95:53:10:
96:47:7b:05:cd:b7:a3:3b:a4:af:e6:0b:40:b4:f8:
1a:7a:cf:de:69:74:14:6d:87:c3:7b:b5:e7:18:91:
f8:88:f8:26:79:e3:4c:95:a4:b5:51:e5:ba:b0:76:
45:1e:ee:88:7f:4d:92:b4:aa:a0:92:7f:ce:e4:2c:
db:9f:09:e4:9a:31:2b:b8:36:c7:97:bb:31:6d:bb:
e9:31:63:4f:eb:2d:70:da:7e:c7:65:ff:a0:ca:db:
86:6b:ee:6b:52:f8:2a:fd:e3:92:af:cf:c7:5b:cb:
ee:47:01:ec:71:e3:61:80:a7:0e:42:a6:06:97:2f:
e2:ed:8f:4f:3c:10:62:76:11:72:17:7f:0a:d1:39:
c9:eb:34:14:98:24:7c:8d:32:5f:2c:cd:93:4c:e1:
34:45:06:d7:41:b3:a3:5e:4a:b2:e6:ee:a9:c4:94:
f4:f5:c9:8c:bb:ca:ab:1e:fb:0e:8d:4b:8b:01:49:
f8:50:76:30:eb:1d:93:64:64:02:0f:44:34:5c:eb:
5c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F0:41:41:AA:90:39:96:5D:88:5A:B3:25:DB:7A:F1:11:AF:55:35
X509v3 Authority Key Identifier:
keyid:BF:D0:9A:87:74:38:17:C5:6F:80:88:00:7A:57:46:EB:69:FF:2E:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/B_BBQaqQOZZdiFqzJdt68RGvVTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.224.0/22
IPv6:
2a05:9540::/29
Signature Algorithm: sha256WithRSAEncryption
2c:29:03:47:f0:6c:78:2d:bb:fd:7a:bd:fc:a2:0f:1c:31:22:
f4:5b:3b:f4:0b:97:96:5c:ff:af:cf:16:37:55:98:9a:56:9d:
9c:8b:d1:3c:62:43:a7:81:4b:19:3f:1f:47:4a:14:2f:43:b2:
98:4e:a1:ec:73:ca:29:cd:87:33:6a:81:ff:ce:bb:86:43:13:
af:e8:5e:84:d4:a7:4a:55:49:1f:83:1c:85:a5:a3:f6:23:c9:
60:08:6f:fd:42:7d:6a:3c:95:21:d1:02:f6:69:fd:35:a2:90:
48:31:8d:c0:e3:7a:e1:fe:4c:ac:b3:ac:6c:56:9c:90:ad:36:
e6:66:8d:06:89:25:3d:82:61:07:92:b4:3a:1e:58:ad:34:57:
de:fb:14:74:8f:55:d5:2e:91:7a:dc:9e:bd:15:08:b8:f4:20:
66:36:cc:a8:a5:80:0f:92:4d:20:7f:15:56:8c:b3:88:9b:20:
8e:fb:27:bb:9a:2b:eb:67:7b:56:91:87:09:7c:9c:05:dd:9b:
0c:f1:fe:de:e4:16:b7:89:25:60:a6:f8:72:38:0f:84:74:6b:
4d:42:dd:e8:13:db:0b:70:a9:6f:9a:4f:46:a3:4b:02:4c:12:
67:3a:97:40:da:6d:88:17:d1:dd:23:05:a5:03:8f:df:aa:b6:
a8:be:a2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 00:58:42 2025 by rpki-client