Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/BW-ZjApW-eGpyxFEOc0qqC_7S5k.roa
File: BW-ZjApW-eGpyxFEOc0qqC_7S5k.roa (raw, json)
Hash identifier: RqpMiCDIPeUSPd1EPbgHwl0XZwlcr7/eFSWcSxO7pPY=
Subject key identifier: 05:6F:99:8C:0A:56:F9:E1:A9:CB:11:44:39:CD:2A:A8:2F:FB:4B:99
Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Certificate serial: 0196C3FB0657B63B600887D7968130AB7EBF
Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/BW-ZjApW-eGpyxFEOc0qqC_7S5k.roa
Signing time: Mon 12 May 2025 10:12:10 +0000
ROA not before: Mon 12 May 2025 10:12:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213438
IP address blocks: 185.196.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:fb:06:57:b6:3b:60:08:87:d7:96:81:30:ab:7e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Validity
Not Before: May 12 10:12:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=056f998c0a56f9e1a9cb114439cd2aa82ffb4b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b1:a1:5d:11:75:fe:e0:62:f2:fa:78:ea:bd:
0a:80:0b:69:88:a6:af:b1:6a:00:e8:9c:61:e4:9f:
c8:f3:a2:1a:13:4e:84:44:95:d1:41:a5:ba:f6:ed:
22:37:28:c9:15:1d:47:87:3d:b0:e6:96:f7:f5:d1:
39:f1:31:e9:42:e3:69:7e:9e:02:31:69:61:a0:98:
44:0a:7c:9c:15:db:a2:8d:aa:b1:d6:7e:3c:20:70:
2c:01:b5:dd:3e:65:ea:00:7e:8a:59:cf:8f:c7:94:
16:35:1c:9e:ff:bb:ab:9a:43:66:c9:ba:59:20:86:
03:e2:42:5d:4b:09:d2:2f:1f:0e:e1:84:d7:a7:86:
8e:84:bc:89:dd:2e:77:a3:46:fa:3e:6d:54:f7:e6:
83:5a:ad:18:9d:d5:53:24:30:fc:9c:79:1a:45:c0:
a3:f3:35:cb:1d:64:37:e9:f6:2d:b4:4a:d9:5c:93:
39:0a:db:af:3a:bd:08:0c:8a:1b:f2:4d:fd:26:db:
4c:dc:25:eb:c6:b6:be:d4:69:21:1c:8e:6c:b3:08:
81:02:6f:1d:89:2b:9b:6a:6e:f8:26:1c:1f:5f:72:
8a:ff:14:cf:35:13:9a:48:46:98:97:e1:44:e9:af:
51:c0:d7:29:20:84:ed:c2:92:93:55:9f:c6:b3:9b:
b2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:6F:99:8C:0A:56:F9:E1:A9:CB:11:44:39:CD:2A:A8:2F:FB:4B:99
X509v3 Authority Key Identifier:
keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/BW-ZjApW-eGpyxFEOc0qqC_7S5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.220.0/24
Signature Algorithm: sha256WithRSAEncryption
32:81:2e:c2:dc:22:6e:7d:af:12:bd:39:58:69:e4:d3:e7:f3:
6f:76:ba:93:86:ab:ea:a3:33:35:23:0c:39:0e:9f:c8:ed:47:
14:81:95:1b:cf:5c:dd:1e:a4:ad:91:8a:4e:84:12:ec:82:89:
3b:8e:f9:d9:6c:7b:24:fc:15:46:55:84:2a:b6:02:ec:aa:bd:
5b:bb:99:a7:3a:f8:23:e1:e1:bc:34:36:e4:5f:79:0b:d0:db:
f2:86:d3:72:03:7f:e9:b9:f9:73:da:d8:92:d5:11:5e:e3:47:
98:ea:7f:d6:7e:b5:19:23:a9:9f:3b:c4:d3:2d:1a:5b:22:0a:
dd:c7:47:85:37:5c:d6:c2:81:29:c6:bb:0f:80:2a:52:18:62:
9c:88:94:e5:3f:52:23:70:b1:06:54:fb:4c:99:96:b1:8b:81:
80:d5:d6:25:65:a5:60:38:92:d3:d4:2c:ae:ba:56:e4:06:5b:
fb:b6:7e:e0:36:e4:fe:79:5c:92:51:8f:d9:42:c2:4b:46:28:
4c:ba:28:68:f9:29:74:e7:2c:a9:44:50:a1:70:b6:20:3e:38:
5f:b5:68:13:05:40:2a:e6:9b:0e:f8:33:06:cb:45:95:ef:49:
b1:a0:8b:dd:d1:67:c8:c4:1f:51:8a:8c:0d:5b:47:be:4d:21:
f8:41:4e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:11:00 2025 by rpki-client