Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/BZBW5YOkIp9LbtIp95M8WoQVxcY.roa
File: BZBW5YOkIp9LbtIp95M8WoQVxcY.roa (raw, json)
Hash identifier: X42F21g8cnpx/mEkXiPNfQhd+7IgYORDgkACnwHFRjA=
Subject key identifier: 05:90:56:E5:83:A4:22:9F:4B:6E:D2:29:F7:93:3C:5A:84:15:C5:C6
Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Certificate serial: 0198A787B1D82216016C05D7A30F06547C73
Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/BZBW5YOkIp9LbtIp95M8WoQVxcY.roa
Signing time: Thu 14 Aug 2025 07:42:24 +0000
ROA not before: Thu 14 Aug 2025 07:42:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 27463
IP address blocks: 84.247.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a7:87:b1:d8:22:16:01:6c:05:d7:a3:0f:06:54:7c:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Validity
Not Before: Aug 14 07:42:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=059056e583a4229f4b6ed229f7933c5a8415c5c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bc:b9:4c:ee:94:21:9b:2f:73:f7:5a:91:ce:
63:16:b8:9d:68:f5:be:a7:95:48:09:38:64:41:f3:
b2:43:a2:41:c3:00:b7:cd:ea:f4:0d:41:bc:c0:ae:
b3:0f:42:46:66:93:14:f8:9a:53:42:6c:db:f6:71:
5a:d2:7d:41:62:b9:c8:18:6b:ce:a4:26:63:e4:1d:
02:38:25:2b:0b:b7:72:20:02:3e:04:6f:a4:a4:cd:
6f:11:31:f8:bd:7c:16:b1:c8:a1:dc:5b:09:fe:e9:
11:71:9c:9e:8c:13:30:7b:19:3f:ab:6e:c3:a8:46:
75:5c:ec:47:df:d6:c7:53:1a:cd:30:32:8e:38:96:
58:f0:b7:dd:5f:f2:e6:cb:04:98:e4:10:c0:9d:d4:
9d:8b:87:59:a6:f1:8a:02:08:18:c0:9e:e3:c9:16:
a7:95:90:1c:ff:1a:1e:f9:d8:ba:02:87:84:31:f9:
eb:31:59:f0:19:d8:cf:4e:30:05:b0:88:49:bd:43:
65:36:51:65:8f:ec:f0:2f:a0:18:ea:0d:62:34:b5:
10:3b:46:34:e0:93:82:d1:25:77:62:96:a3:b3:20:
da:ea:8a:7c:38:c5:16:7d:a1:78:67:3c:09:90:30:
ea:60:0c:2d:06:b7:59:f3:16:84:c8:86:3b:e3:ad:
77:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:90:56:E5:83:A4:22:9F:4B:6E:D2:29:F7:93:3C:5A:84:15:C5:C6
X509v3 Authority Key Identifier:
keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/BZBW5YOkIp9LbtIp95M8WoQVxcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.75.0/24
Signature Algorithm: sha256WithRSAEncryption
01:7c:d3:6d:86:d8:95:1b:58:98:38:8f:4a:e4:75:4a:d1:9b:
e0:2f:0f:95:69:76:c9:49:33:86:41:9f:5a:80:7f:b0:cf:47:
6d:e5:bf:bd:f4:d0:ac:25:61:d4:fb:0d:1b:f9:9b:19:03:c3:
bb:a2:60:94:d7:56:20:b9:9a:f7:13:fa:a3:aa:59:81:24:f4:
59:54:91:d4:19:d8:b0:b5:0d:f3:ab:5c:11:26:bd:10:30:8f:
a7:f5:a5:53:7e:3a:2f:e7:5b:94:7b:30:ad:75:8d:91:ca:83:
1c:bf:b9:68:e6:6b:f2:ad:db:85:cd:0b:e9:13:da:d3:4a:d8:
a7:68:7a:d0:16:45:71:92:63:50:e8:1e:9c:51:eb:3e:aa:ac:
1e:6f:4e:65:92:de:c2:5d:46:b6:9f:a0:af:82:f0:43:6e:61:
40:13:36:24:fc:3e:ef:b4:73:84:e0:99:4c:a1:b3:e2:f8:d5:
ca:60:cf:d8:c9:5e:34:98:c5:c5:60:ff:d5:2f:09:83:b1:71:
4d:ab:14:77:c9:10:37:18:ed:1b:c5:e1:fb:bc:f1:22:ae:fd:
ec:ce:58:0b:ca:28:ee:ca:c8:42:5f:6a:c8:84:17:3c:6a:cf:
96:d4:76:43:0a:b1:c3:88:c1:ee:89:88:54:51:fc:92:7b:d0:
ec:9c:20:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:43:07 2025 by rpki-client