Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/BxL_klgWwjdTzU-YHnpZdiQv8ro.roa
File: BxL_klgWwjdTzU-YHnpZdiQv8ro.roa (raw, json)
Hash identifier: tk2wGej5IrtzW95WdrtoXzZ9Z9AtMFL8/c/Zb2mjax4=
Subject key identifier: 07:12:FF:92:58:16:C2:37:53:CD:4F:98:1E:7A:59:76:24:2F:F2:BA
Certificate issuer: /CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Certificate serial: 0196802290F9ACA2A5B1469A53CD609BF64B
Authority key identifier: 7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/BxL_klgWwjdTzU-YHnpZdiQv8ro.roa
Signing time: Tue 29 Apr 2025 06:01:10 +0000
ROA not before: Tue 29 Apr 2025 06:01:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 45.158.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:22:90:f9:ac:a2:a5:b1:46:9a:53:cd:60:9b:f6:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Validity
Not Before: Apr 29 06:01:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0712ff925816c23753cd4f981e7a5976242ff2ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6c:5d:46:df:a6:c6:c1:c9:97:73:7a:1b:e7:
5d:40:8e:d3:0c:b3:5b:ad:95:0c:c5:1c:9b:e9:93:
9a:5e:8b:40:96:5a:a2:9f:c9:92:ea:64:f5:66:02:
09:8a:45:1f:6f:ef:b5:f4:1a:75:1a:b8:39:08:7c:
ec:a8:bf:64:d3:25:ff:c5:03:f2:12:55:13:27:27:
82:0c:38:bb:ed:4b:3e:3f:d7:92:d5:a2:db:0e:02:
5c:55:20:b2:f8:71:81:7c:df:9f:7d:96:2f:5a:e3:
e2:eb:1b:dc:f8:da:ce:13:38:ce:05:3c:51:01:a0:
d1:66:6d:af:9f:c5:f6:bc:00:2d:40:58:ee:bb:5e:
62:64:ab:5b:d0:9a:d5:61:6b:20:96:18:3f:3e:37:
02:aa:63:5b:15:6c:4e:4e:0d:a3:e2:d3:d8:25:98:
09:5d:aa:b6:4b:2a:1e:c8:e2:cd:8b:36:6b:89:7d:
f7:42:dd:07:f9:b1:f8:ca:70:e1:ef:18:9e:65:7c:
c9:96:50:3a:08:10:8d:f9:63:c3:04:26:74:7a:e7:
04:e7:30:d3:1b:97:9f:d1:1c:38:56:5b:4b:9c:42:
9e:da:38:a2:b1:23:2a:74:4c:52:96:c9:14:63:b5:
8f:17:9b:f8:58:be:20:d7:15:6a:29:a9:37:30:2e:
3a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:12:FF:92:58:16:C2:37:53:CD:4F:98:1E:7A:59:76:24:2F:F2:BA
X509v3 Authority Key Identifier:
keyid:7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/BxL_klgWwjdTzU-YHnpZdiQv8ro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.124.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:77:96:ac:27:de:3b:0f:41:0d:4f:ab:66:47:dd:61:f2:f9:
6f:f9:6a:5b:bd:2f:9e:d1:4c:82:9a:1f:79:4e:9b:b7:a6:74:
5c:b3:3b:cc:8a:15:d9:ac:1b:dd:07:87:d5:e4:b2:63:99:dc:
39:84:b0:0f:25:7b:38:46:de:7e:3d:a8:52:9f:dc:72:60:13:
b2:9a:d9:d1:5a:e8:6a:57:16:0a:90:e4:ae:b5:dc:01:fa:c7:
74:eb:de:93:62:4d:0b:91:ac:a8:ee:23:3a:25:0b:b2:d2:56:
95:0f:69:57:3d:f8:94:e2:4d:b8:92:f2:f7:5a:67:f4:1d:33:
f4:64:3e:a4:09:01:40:3f:ee:6c:19:98:c0:4c:0c:39:69:60:
9b:61:4b:73:7d:36:d5:f8:7c:8d:35:54:3b:70:4f:1f:67:4c:
5f:bd:57:db:31:70:8b:88:68:de:68:13:72:be:5e:af:f7:3c:
81:a5:15:13:df:88:59:bc:72:10:4e:ce:93:1d:0a:91:85:29:
68:ff:d9:94:7c:62:14:83:1a:f6:09:44:33:56:b0:1c:03:83:
ab:cd:8f:f4:c4:7a:69:41:82:07:a1:b3:51:19:fb:f4:71:b9:
24:22:2d:52:b5:02:30:dd:6e:a4:b4:c7:5f:27:1f:1b:74:3e:
48:35:f1:6a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZaAIpD5rKKlsUaaU81gm/ZLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmNTE1ZWFkMDk1ZWVkOWFjNGNhYmM1YWI0YWQwYjU4Njdk
OWYwMWIwHhcNMjUwNDI5MDYwMTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzEyZmY5MjU4MTZjMjM3NTNjZDRmOTgxZTdhNTk3NjI0MmZmMmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmxdRt+mxsHJl3N6G+ddQI7TDLNb
rZUMxRyb6ZOaXotAllqin8mS6mT1ZgIJikUfb++19Bp1Grg5CHzsqL9k0yX/xQPy
ElUTJyeCDDi77Us+P9eS1aLbDgJcVSCy+HGBfN+ffZYvWuPi6xvc+NrOEzjOBTxR
AaDRZm2vn8X2vAAtQFjuu15iZKtb0JrVYWsglhg/PjcCqmNbFWxOTg2j4tPYJZgJ
Xaq2SyoeyOLNizZriX33Qt0H+bH4ynDh7xieZXzJllA6CBCN+WPDBCZ0eucE5zDT
G5ef0Rw4VltLnEKe2jiisSMqdExSlskUY7WPF5v4WL4g1xVqKak3MC46GQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAcS/5JYFsI3U81PmB56WXYkL/K6MB8GA1UdIwQY
MBaAFH9RXq0JXu2axMq8WrStC1hn2fAbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjFGZXJRbGU3WnJFeXJ4YXRLMExXR2ZaOEJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy81YzJhNTktNjAyNS00MDBlLWFiMjgt
ZjBhNjI0ZDQwOTEyLzEvQnhMX2tsZ1d3amRUelUtWUhucFpkaVF2OHJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy81YzJhNTktNjAyNS00MDBlLWFiMjgtZjBhNjI0ZDQwOTEy
LzEvZjFGZXJRbGU3WnJFeXJ4YXRLMExXR2ZaOEJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZ58MA0G
CSqGSIb3DQEBCwUAA4IBAQA6d5asJ947D0ENT6tmR91h8vlv+WpbvS+e0UyCmh95
Tpu3pnRcszvMihXZrBvdB4fV5LJjmdw5hLAPJXs4Rt5+PahSn9xyYBOymtnRWuhq
VxYKkOSutdwB+sd0696TYk0Lkayo7iM6JQuy0laVD2lXPfiU4k24kvL3Wmf0HTP0
ZD6kCQFAP+5sGZjATAw5aWCbYUtzfTbV+HyNNVQ7cE8fZ0xfvVfbMXCLiGjeaBNy
vl6v9zyBpRUT34hZvHIQTs6THQqRhSlo/9mUfGIUgxr2CUQzVrAcA4OrzY/0xHpp
QYIHobNRGfv0cbkkIi1StQIw3W6ktMdfJx8bdD5INfFq
-----END CERTIFICATE-----
Generated at Mon May 12 07:17:17 2025 by rpki-client