Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/BJtDar4QvQC79Pe6tKfUsBMLdVU.roa
File: BJtDar4QvQC79Pe6tKfUsBMLdVU.roa (raw, json)
Hash identifier: 3c5+oGurAiAxwYeNGOY7HBZQald9OboYUm/lg9Q6aao=
Subject key identifier: 04:9B:43:6A:BE:10:BD:00:BB:F4:F7:BA:B4:A7:D4:B0:13:0B:75:55
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019734A4FFF824F33A77BA459E0811ED2507
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/BJtDar4QvQC79Pe6tKfUsBMLdVU.roa
Signing time: Tue 03 Jun 2025 07:15:18 +0000
ROA not before: Tue 03 Jun 2025 07:15:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198154
IP address blocks: 85.133.199.0/24 maxlen: 24
85.133.221.0/24 maxlen: 24
85.133.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:31:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:34:a4:ff:f8:24:f3:3a:77:ba:45:9e:08:11:ed:25:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jun 3 07:15:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=049b436abe10bd00bbf4f7bab4a7d4b0130b7555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bc:10:c3:5b:54:bd:93:a9:ac:9d:20:23:54:
48:2e:28:13:64:7f:a5:32:3b:bc:7c:6a:17:40:cb:
bb:95:84:37:be:d1:46:5c:f8:80:2b:30:b0:09:30:
70:77:c1:60:aa:a3:99:ed:7d:59:db:5c:c3:78:9f:
80:51:be:41:13:db:8b:b0:c9:02:77:13:4c:52:86:
06:4e:6a:a9:71:18:51:8b:92:2d:d3:3c:a1:e1:d7:
3a:cd:16:b2:7c:b4:e7:14:ef:7b:76:02:82:c9:28:
ef:11:53:cc:93:d4:36:1f:25:3f:c2:ad:2e:bf:43:
ad:6c:4e:92:28:15:2d:ce:5e:41:bf:f2:3e:d2:49:
a2:ed:2b:7b:78:f0:ee:95:ce:7f:62:9c:ce:38:f9:
f5:7c:d0:c6:fc:9d:90:2c:fe:39:41:7e:06:4b:bd:
b8:f0:4f:f9:82:82:69:14:f6:d9:25:5c:3f:c4:c8:
94:16:42:fb:a8:60:ca:f3:3a:9d:1c:3a:83:aa:f5:
5c:94:91:3d:a4:10:64:33:c6:ea:2e:62:f0:c5:19:
d4:eb:35:21:5f:c5:bc:d4:a4:bc:59:5a:f8:da:e8:
35:4d:dc:85:1c:90:72:1a:80:b5:b4:01:21:55:ac:
4b:12:14:2a:26:56:be:bd:31:af:40:6a:5e:82:9a:
99:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:9B:43:6A:BE:10:BD:00:BB:F4:F7:BA:B4:A7:D4:B0:13:0B:75:55
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/BJtDar4QvQC79Pe6tKfUsBMLdVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.199.0/24
85.133.221.0/24
85.133.250.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:40:89:e1:aa:b4:5a:cb:da:53:d8:dd:a4:2c:7a:c7:a8:bf:
6c:d8:ce:43:51:21:61:c2:d4:3b:8a:1a:3a:c9:85:82:98:c2:
69:4e:b2:91:f3:3d:5f:53:73:ac:e1:96:f1:19:60:40:80:84:
90:5a:b7:50:e7:09:26:ba:03:1a:39:f2:31:ad:01:27:dd:43:
c9:99:1f:f6:2e:3c:a0:5b:67:cb:9e:3e:81:a7:b0:94:94:ab:
58:ff:84:23:c2:64:ea:75:5b:ae:08:e5:50:5b:17:3d:af:de:
75:41:09:8d:10:91:11:86:df:e6:78:de:9e:57:e9:9d:94:e2:
58:ae:7c:a1:cc:10:1c:2e:87:7c:d9:cd:49:39:95:fb:b4:64:
92:5e:0f:95:ef:6c:10:f6:08:0d:4e:e0:de:7f:a1:f3:db:62:
6e:44:5c:86:12:44:28:c1:ab:e0:ce:11:af:8e:12:a3:e4:14:
24:1c:26:17:1f:de:91:10:30:15:5a:24:19:ed:89:1d:54:b5:
85:6b:37:a9:1a:d3:81:32:b5:09:42:e0:b8:2e:0f:d8:39:6a:
bf:fc:6f:1e:e8:ff:8c:af:a0:e5:7c:ff:d1:1f:cc:f1:59:cb:
31:27:4e:49:a0:3b:e3:f8:7b:7a:f3:6f:ad:ef:78:f7:b2:ea:
2b:31:64:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:27:22 2025 by rpki-client