Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/bcR_ET8HkErZ6prtX-7RQwiyat8.roa
File: bcR_ET8HkErZ6prtX-7RQwiyat8.roa (raw, json)
Hash identifier: vZFTeKhiZxiLu5H+MDeCSr2+yQLXQhLQWyk8hFaYfCc=
Subject key identifier: 6D:C4:7F:11:3F:07:90:4A:D9:EA:9A:ED:5F:EE:D1:43:08:B2:6A:DF
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0196B01802A2914116AA5256CB6E51C1EE45
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/bcR_ET8HkErZ6prtX-7RQwiyat8.roa
Signing time: Thu 08 May 2025 13:31:25 +0000
ROA not before: Thu 08 May 2025 13:31:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214417
IP address blocks: 83.219.97.0/24 maxlen: 24
87.121.86.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
141.98.6.0/24 maxlen: 24
176.125.254.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
194.48.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:18:02:a2:91:41:16:aa:52:56:cb:6e:51:c1:ee:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 8 13:31:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6dc47f113f07904ad9ea9aed5feed14308b26adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c8:53:3d:a2:8a:92:3e:e5:da:4c:6d:b7:f9:
9c:07:c7:e0:95:35:e7:de:ec:eb:33:08:ef:0d:95:
13:f3:8b:49:31:7e:9b:d9:3d:4c:26:6e:c8:4a:30:
65:70:11:8d:16:2c:77:78:09:23:5c:d8:99:3d:c0:
7a:22:35:c3:eb:59:2d:29:65:21:c1:27:5b:f8:7b:
31:f4:a7:81:08:a1:f9:56:34:d5:af:50:93:28:16:
f6:94:43:47:1c:3f:49:32:b5:19:7f:3c:d7:f1:24:
70:72:b7:50:86:6f:5f:00:2c:af:30:c9:e1:18:95:
a3:1e:01:57:4b:a3:d9:e2:0c:33:45:15:87:37:66:
8b:c3:28:69:a8:f7:72:92:ed:45:a1:fc:a6:5b:a8:
d6:6a:ca:ce:05:1c:72:9f:82:c6:0f:93:3a:79:51:
79:9d:13:96:e0:6c:5f:97:75:42:48:67:be:40:0b:
f9:8c:77:6a:72:4a:21:54:cc:5b:3f:4c:d8:04:c6:
dd:9b:90:5b:2d:92:5e:91:c1:30:9d:2e:0c:4c:fc:
e0:6b:aa:05:e2:00:8d:ab:f7:e9:98:11:c9:3f:7c:
2f:e0:9b:17:8e:20:48:d6:4c:2c:22:00:19:5f:11:
84:c0:19:cc:3d:bd:73:2d:4d:e5:bd:b8:77:6e:52:
96:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C4:7F:11:3F:07:90:4A:D9:EA:9A:ED:5F:EE:D1:43:08:B2:6A:DF
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/bcR_ET8HkErZ6prtX-7RQwiyat8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.219.97.0/24
87.121.86.0/24
87.121.221.0/24
141.98.6.0/24
176.125.254.0/24
185.252.177.0/24
194.48.250.0/24
Signature Algorithm: sha256WithRSAEncryption
20:48:51:ce:68:26:53:92:35:95:29:c9:57:a0:6f:39:10:36:
00:43:9c:54:c7:6c:32:29:4d:86:08:63:9b:40:ed:22:10:c0:
2e:24:93:b6:f2:4b:29:e9:ac:79:e6:66:19:1e:cf:15:63:3c:
10:42:06:31:2b:53:27:3c:29:21:49:c9:c9:f6:de:2e:1f:ec:
16:75:b4:84:a0:c7:9d:29:86:07:31:17:8d:0b:0c:80:ac:1d:
50:9d:b6:af:3e:ba:e2:92:4c:32:cb:e7:c0:84:1d:84:b8:41:
0b:7f:81:a7:64:40:25:f9:c9:f1:6b:e5:0b:97:a7:0c:ac:1d:
e1:f8:ab:8c:43:20:20:87:29:65:a4:8f:6b:ef:6f:ed:77:52:
29:c2:86:0c:49:74:c1:f0:82:8e:05:b2:ee:fc:78:bd:86:9d:
b7:ee:b1:a0:3e:20:52:b9:da:14:39:22:2f:c3:bc:92:47:c7:
80:ef:73:61:30:79:bf:ce:61:9d:3f:c6:0a:ed:e1:0f:40:97:
cc:a5:e6:9d:08:18:83:59:b3:b2:e1:60:2a:2f:b5:98:af:46:
76:f3:7f:9e:8a:c5:24:a7:50:07:16:10:61:1c:b9:2a:8b:3f:
83:13:6a:dd:70:fa:83:9b:30:e9:9c:d0:1f:85:ce:a1:6a:29:
a2:72:d6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:13:16 2025 by rpki-client