Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BkFJ8mbP64fvIWj3YOZAx-Ty58Q.roa
File: BkFJ8mbP64fvIWj3YOZAx-Ty58Q.roa (raw, json)
Hash identifier: i56tI2Jr3/f+SnU+trhqqGSN+HLMlyPnA4UnWX5rV40=
Subject key identifier: 06:41:49:F2:66:CF:EB:87:EF:21:68:F7:60:E6:40:C7:E4:F2:E7:C4
Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial: 01979E6FE7D1E46209EAFBA39F8B9CA765A1
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BkFJ8mbP64fvIWj3YOZAx-Ty58Q.roa
Signing time: Mon 23 Jun 2025 20:17:03 +0000
ROA not before: Mon 23 Jun 2025 20:17:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214366
IP address blocks: 188.209.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft
rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 19:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9e:6f:e7:d1:e4:62:09:ea:fb:a3:9f:8b:9c:a7:65:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Validity
Not Before: Jun 23 20:17:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=064149f266cfeb87ef2168f760e640c7e4f2e7c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d4:81:19:08:cd:e7:29:95:4e:1f:d7:40:10:
69:69:65:c6:6e:80:92:cd:46:0b:c9:1f:f6:3d:32:
9f:27:ba:a4:b6:7f:26:3b:08:71:1d:62:c4:bd:b2:
bc:d5:d9:2a:81:4e:93:fb:01:1c:dc:4c:8f:1e:dc:
8c:68:84:27:36:c1:0a:c3:c2:27:4c:8c:26:fd:e3:
68:3e:35:de:db:4e:f8:0d:b2:4b:26:9b:b3:fa:33:
bf:d1:da:cb:48:c0:52:d5:5b:fa:99:ed:84:10:d5:
93:09:49:f7:3f:45:60:0e:6c:0d:af:6e:58:2c:68:
14:0b:91:d9:04:16:fc:e5:af:53:31:73:73:f9:4b:
48:bb:05:de:60:6a:56:bf:87:0f:75:95:01:e7:9f:
46:67:c9:43:c4:91:7e:2d:4e:20:2f:33:e9:36:67:
51:bb:c7:70:d5:89:18:54:c4:8b:c8:84:6a:2a:fd:
95:a3:dd:67:0e:f6:e8:68:32:15:64:a7:f7:c9:2c:
66:ca:c0:d2:b7:04:fa:39:f3:c9:a8:8b:77:07:72:
d6:a3:de:13:c3:c8:d4:2e:b9:dc:20:d7:a0:bc:d4:
fe:d5:f3:f0:54:e1:43:f4:85:c5:dd:b8:57:ce:7a:
b4:0e:97:4e:04:2e:90:fd:e6:3b:45:f5:53:68:ff:
64:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:41:49:F2:66:CF:EB:87:EF:21:68:F7:60:E6:40:C7:E4:F2:E7:C4
X509v3 Authority Key Identifier:
keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BkFJ8mbP64fvIWj3YOZAx-Ty58Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.131.0/24
Signature Algorithm: sha256WithRSAEncryption
88:80:7e:d8:30:e6:28:31:d0:61:f8:c8:1c:61:7c:f2:27:a0:
f2:76:89:26:2e:f9:0a:72:cd:a1:21:20:d8:f1:1c:0f:8c:47:
4e:1b:ce:4f:c2:18:93:fe:72:7d:98:3d:7d:e2:02:c5:fa:53:
f2:dd:70:bb:56:4b:b0:2f:76:e9:39:30:a3:2d:e8:08:40:ab:
5b:ca:71:cf:00:0f:de:bb:ec:e8:eb:46:16:3f:36:c7:30:34:
e3:5f:e5:38:a1:f6:38:a5:b6:ac:43:be:22:aa:ec:02:da:a9:
1b:38:95:75:e1:84:c4:8a:24:85:be:71:e4:17:3e:12:e2:78:
98:b3:cc:dd:f0:44:0d:6b:1a:77:4d:a4:44:a6:48:50:43:8e:
89:f8:0a:e2:4e:bc:b7:ef:7a:fb:30:20:d6:04:ad:53:e8:d1:
85:b8:75:73:31:66:55:36:3f:62:89:2a:70:60:77:08:d6:17:
ec:45:ca:27:0e:83:0f:78:fa:ae:9f:d8:fd:72:1b:b5:79:50:
91:f8:64:e4:fd:de:31:9f:fc:25:b6:1d:f4:97:52:99:4c:6e:
46:80:85:57:d8:be:62:b4:c2:da:7f:02:3e:36:6b:7e:2b:ff:
a5:c5:13:7f:21:24:f7:f1:50:a3:3e:19:89:a3:b8:3e:41:04:
3c:3d:cd:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 04:23:59 2025 by rpki-client