Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/BXsWIMS27-emUbxg3N856ta0Zhs.roa
File: BXsWIMS27-emUbxg3N856ta0Zhs.roa (raw, json)
Hash identifier: VLEvZClMBOllgwcFIEd17EnHHY/+y56YDL+ioA9gy2o=
Subject key identifier: 05:7B:16:20:C4:B6:EF:E7:A6:51:BC:60:DC:DF:39:EA:D6:B4:66:1B
Certificate issuer: /CN=2940b694bba095344e4bdb99f51e1f1023be57ce
Certificate serial: 01941F8C5EFF8FD2B068A9352167BEB8F020
Authority key identifier: 29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/BXsWIMS27-emUbxg3N856ta0Zhs.roa
Signing time: Wed 01 Jan 2025 01:48:00 +0000
ROA not before: Wed 01 Jan 2025 01:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31138
IP address blocks: 83.217.0.0/22 maxlen: 22
2a00:d8c0::/48 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:5e:ff:8f:d2:b0:68:a9:35:21:67:be:b8:f0:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2940b694bba095344e4bdb99f51e1f1023be57ce
Validity
Not Before: Jan 1 01:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=057b1620c4b6efe7a651bc60dcdf39ead6b4661b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b0:32:bf:c8:00:f1:b6:d7:37:18:fc:89:eb:
27:70:0c:f8:b4:39:08:06:0c:95:61:b4:a5:e5:f5:
91:cb:17:e4:43:c2:4b:24:19:5c:93:7f:2f:e2:3f:
dd:89:a7:0d:90:ad:5d:b6:fc:d4:0d:1a:a1:42:94:
c2:cd:ab:24:fe:54:62:dc:f4:d6:9d:63:f9:5d:0c:
a0:08:9a:2e:53:a5:55:93:39:62:ab:3a:9d:ce:d7:
28:b4:68:81:ed:22:e3:06:1d:29:a3:c2:a7:f1:d6:
27:57:d4:8b:52:ea:9b:a3:22:dd:04:a8:d3:72:ed:
64:03:b2:67:76:1f:48:89:53:2a:c6:f0:c7:46:d1:
4b:5b:aa:39:7c:a2:87:3e:93:e9:5b:da:0b:06:9e:
d3:32:36:92:f2:dd:32:d7:25:b1:ed:01:69:94:9b:
86:a2:86:31:b6:0c:ec:03:47:f1:b8:a7:83:b7:ef:
29:fb:31:a9:0c:d6:ba:33:d0:0e:87:b1:38:49:48:
ca:e5:27:62:21:1c:79:1f:e1:bf:4e:dd:51:bd:37:
f9:69:f2:98:27:42:c9:b0:7d:a9:9e:f6:08:61:f3:
fc:d3:48:aa:03:18:1e:a3:e4:e5:20:8c:fa:f1:e1:
2d:82:3b:47:fe:fa:f1:f2:98:33:bc:cc:8f:60:cf:
3c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:7B:16:20:C4:B6:EF:E7:A6:51:BC:60:DC:DF:39:EA:D6:B4:66:1B
X509v3 Authority Key Identifier:
keyid:29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/BXsWIMS27-emUbxg3N856ta0Zhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.217.0.0/22
IPv6:
2a00:d8c0::/48
Signature Algorithm: sha256WithRSAEncryption
8c:e5:92:63:1f:5e:16:a6:58:4c:b4:d1:ed:36:7c:6c:07:09:
4a:77:2c:a7:df:4a:ce:c4:b3:5e:9d:1d:53:78:16:79:92:d8:
b1:ff:7f:5c:77:8e:49:8e:48:e1:d7:3a:92:ce:a7:a1:b9:ba:
37:65:4b:21:d0:82:4d:61:9f:02:b4:c5:7d:ee:be:a2:fc:a8:
e8:67:67:05:2e:65:f5:ad:63:c1:4e:5c:f4:47:91:e8:0d:58:
53:86:9a:88:88:6f:68:ce:4b:6d:61:72:87:3f:3f:bf:2d:84:
7c:a2:42:0d:0b:aa:1b:6f:ba:3a:54:4d:18:80:d9:08:e0:c6:
d1:91:38:b1:46:44:60:57:53:8e:06:74:ef:ce:44:4b:33:d5:
eb:4d:27:af:67:8e:b8:f3:e5:a2:79:43:be:79:0a:0b:e8:15:
30:b6:57:a1:60:e6:67:81:e3:be:d2:30:16:92:68:a9:89:d3:
30:d6:ae:f9:d9:29:ad:2b:0e:1c:02:23:66:f5:c0:76:c3:6f:
3b:45:46:f7:90:aa:fe:46:83:21:2a:ec:46:ee:83:b4:05:e5:
ab:83:64:25:3c:41:44:8d:37:34:19:8d:81:82:62:ac:f4:a3:
46:88:d9:40:86:90:32:88:57:a3:c7:62:56:d5:31:a1:15:5c:
0b:f2:8e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:21 2025 by rpki-client