Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/BnHU_9oB_ewnVOgPSPpU2bWe8Zk.roa
File: BnHU_9oB_ewnVOgPSPpU2bWe8Zk.roa (raw, json)
Hash identifier: go8wZXjflDuAlY6EuMTLQuty8jZX31nqsRbiTUQs4zs=
Subject key identifier: 06:71:D4:FF:DA:01:FD:EC:27:54:E8:0F:48:FA:54:D9:B5:9E:F1:99
Certificate issuer: /CN=9955c5a7137eb5d47ea24e17d27fa92d0b42fbd8
Certificate serial: 01941F8CAA556EDBCAACE0D5EC95FD326AA3
Authority key identifier: 99:55:C5:A7:13:7E:B5:D4:7E:A2:4E:17:D2:7F:A9:2D:0B:42:FB:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mVXFpxN-tdR-ok4X0n-pLQtC-9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/BnHU_9oB_ewnVOgPSPpU2bWe8Zk.roa
Signing time: Wed 01 Jan 2025 01:48:19 +0000
ROA not before: Wed 01 Jan 2025 01:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12361
IP address blocks: 62.74.0.0/16 maxlen: 24
62.74.0.0/17 maxlen: 22
62.74.128.0/17 maxlen: 17
77.69.38.0/24 maxlen: 24
185.158.220.0/22 maxlen: 22
185.158.220.0/23 maxlen: 23
185.158.222.0/23 maxlen: 23
195.46.0.0/19 maxlen: 24
195.46.0.0/20 maxlen: 20
195.46.16.0/20 maxlen: 24
195.97.52.0/24 maxlen: 24
213.249.0.0/18 maxlen: 18
213.249.0.0/19 maxlen: 19
213.249.0.0/21 maxlen: 21
213.249.32.0/19 maxlen: 19
213.249.40.0/24 maxlen: 24
213.249.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/mVXFpxN-tdR-ok4X0n-pLQtC-9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:aa:55:6e:db:ca:ac:e0:d5:ec:95:fd:32:6a:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9955c5a7137eb5d47ea24e17d27fa92d0b42fbd8
Validity
Not Before: Jan 1 01:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0671d4ffda01fdec2754e80f48fa54d9b59ef199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:30:8f:e7:db:4c:2c:98:2c:54:8f:4a:87:6d:
b3:a0:d5:20:4c:6d:a1:31:e9:98:c9:58:07:44:1b:
a7:93:15:9a:c1:99:57:44:bc:90:e1:c8:26:98:ee:
97:c2:56:61:51:8f:55:07:a0:c1:c7:17:4d:e0:3d:
e6:f1:7f:4d:6b:69:61:b9:49:93:fb:e2:65:ba:9b:
d7:65:62:9f:ee:09:d1:14:6d:ff:71:46:89:29:1b:
12:16:e3:2c:58:b0:c9:93:1b:ab:c7:97:f3:46:23:
54:51:ee:90:6c:93:d6:61:28:c7:2e:06:32:8d:43:
fe:44:15:76:1d:92:26:07:96:58:0e:40:5c:3a:b2:
03:c1:f5:07:97:eb:ac:e6:91:58:9b:0c:fc:26:b5:
ce:67:28:98:34:9f:14:89:70:54:b2:a0:d1:5e:8e:
3f:9d:f6:d3:54:4d:db:97:59:23:c4:a8:b1:49:d4:
1b:eb:97:1f:f9:b3:95:b1:2c:b7:23:06:1d:df:44:
f5:ec:a4:56:1e:ef:47:8f:8f:e7:e4:c4:35:cb:89:
9b:61:4b:28:92:e9:4a:e6:99:13:c4:a3:db:52:a0:
98:c9:d7:82:b1:cf:c5:c4:f0:2e:9d:07:f0:bc:ae:
28:79:82:ae:19:a0:6f:23:e8:23:86:42:f7:77:e9:
93:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:71:D4:FF:DA:01:FD:EC:27:54:E8:0F:48:FA:54:D9:B5:9E:F1:99
X509v3 Authority Key Identifier:
keyid:99:55:C5:A7:13:7E:B5:D4:7E:A2:4E:17:D2:7F:A9:2D:0B:42:FB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mVXFpxN-tdR-ok4X0n-pLQtC-9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/BnHU_9oB_ewnVOgPSPpU2bWe8Zk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.74.0.0/16
77.69.38.0/24
185.158.220.0/22
195.46.0.0/19
195.97.52.0/24
213.249.0.0/18
Signature Algorithm: sha256WithRSAEncryption
98:ea:c7:43:26:fe:ed:83:a1:fa:14:0a:08:29:c1:6c:b4:67:
e7:0b:17:03:88:00:77:d2:3f:dd:3c:94:40:46:78:18:d6:68:
96:b6:06:21:67:bc:f1:01:4b:40:40:2c:dc:69:0f:2a:d4:8a:
fd:b4:b8:5b:28:06:5b:9c:fb:be:0b:85:da:fd:64:a5:60:6a:
e7:2e:0a:68:a9:eb:2b:95:e6:fa:00:a0:76:8f:db:cc:7b:fe:
d8:db:a8:99:29:24:45:e7:d1:f1:95:ae:eb:01:94:c9:02:92:
e4:39:17:99:00:e9:e0:2a:fa:9a:6f:81:8b:f3:bc:a9:c9:51:
80:65:18:1c:3f:47:8c:39:55:02:28:80:c5:5f:3c:f8:04:80:
84:02:ba:37:9b:b1:38:85:df:90:89:be:20:a2:9a:c5:e7:32:
38:05:10:8d:dd:8e:2b:a0:d9:bf:2d:b3:a2:e8:ef:b3:45:8b:
73:69:6a:45:3e:fb:0a:c4:06:56:1c:88:f9:81:24:db:65:04:
40:00:05:19:75:f2:3d:e6:cb:3d:51:ff:46:d7:93:1c:7c:62:
2d:81:7b:ed:81:58:4d:57:78:24:f9:7d:24:f5:7e:30:56:3e:
f2:a5:05:cb:1f:e3:3b:aa:40:98:52:79:25:be:f1:ac:e3:0d:
b3:2f:e4:93
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAZQfjKpVbtvKrODV7JX9MmqjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5NTVjNWE3MTM3ZWI1ZDQ3ZWEyNGUxN2QyN2ZhOTJkMGI0
MmZiZDgwHhcNMjUwMTAxMDE0ODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjcxZDRmZmRhMDFmZGVjMjc1NGU4MGY0OGZhNTRkOWI1OWVmMTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozCP59tMLJgsVI9Kh22zoNUgTG2h
MemYyVgHRBunkxWawZlXRLyQ4cgmmO6XwlZhUY9VB6DBxxdN4D3m8X9Na2lhuUmT
++JlupvXZWKf7gnRFG3/cUaJKRsSFuMsWLDJkxurx5fzRiNUUe6QbJPWYSjHLgYy
jUP+RBV2HZImB5ZYDkBcOrIDwfUHl+us5pFYmwz8JrXOZyiYNJ8UiXBUsqDRXo4/
nfbTVE3bl1kjxKixSdQb65cf+bOVsSy3IwYd30T17KRWHu9Hj4/n5MQ1y4mbYUso
kulK5pkTxKPbUqCYydeCsc/FxPAunQfwvK4oeYKuGaBvI+gjhkL3d+mTSwIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFAZx1P/aAf3sJ1ToD0j6VNm1nvGZMB8GA1UdIwQY
MBaAFJlVxacTfrXUfqJOF9J/qS0LQvvYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVZYRnB4Ti10ZFItb2s0WDBuLXBMUXRDLTlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy85NDUzYTAtZTY1NS00ODBlLWI2YTkt
ZTM5NTI0ZTdhNmVkLzEvQm5IVV85b0JfZXduVk9nUFNQcFUyYldlOFprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy85NDUzYTAtZTY1NS00ODBlLWI2YTktZTM5NTI0ZTdhNmVk
LzEvbVZYRnB4Ti10ZFItb2s0WDBuLXBMUXRDLTlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzApBAIAATAjAwMAPkoDBABN
RSYDBAK5ntwDBAXDLgADBADDYTQDBAbV+QAwDQYJKoZIhvcNAQELBQADggEBAJjq
x0Mm/u2DofoUCggpwWy0Z+cLFwOIAHfSP908lEBGeBjWaJa2BiFnvPEBS0BALNxp
DyrUiv20uFsoBluc+74Lhdr9ZKVgaucuCmip6yuV5voAoHaP28x7/tjbqJkpJEXn
0fGVrusBlMkCkuQ5F5kA6eAq+ppvgYvzvKnJUYBlGBw/R4w5VQIogMVfPPgEgIQC
ujebsTiF35CJviCimsXnMjgFEI3djiug2b8ts6Lo77NFi3NpakU++wrEBlYciPmB
JNtlBEAABRl18j3myz1R/0bXkxx8Yi2Be+2BWE1XeCT5fST1fjBWPvKlBcsf4zuq
QJhSeSW+8azjDbMv5JM=
-----END CERTIFICATE-----
Generated at Sun Feb 2 10:02:55 2025 by rpki-client