Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/BfAtlz2-agNGvhVzdEANynJeIRE.roa
File: BfAtlz2-agNGvhVzdEANynJeIRE.roa (raw, json)
Hash identifier: FDZ1EUvGopwd4V4kjEC1vsFUApPYB3TkvzMVVz0rGjM=
Subject key identifier: 05:F0:2D:97:3D:BE:6A:03:46:BE:15:73:74:40:0D:CA:72:5E:21:11
Certificate issuer: /CN=5814dbbab63e9117d0b02cbab56639e6fd0d40d9
Certificate serial: 0197B2FE097FB789AED81941829C7A82BD74
Authority key identifier: 58:14:DB:BA:B6:3E:91:17:D0:B0:2C:BA:B5:66:39:E6:FD:0D:40:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WBTburY-kRfQsCy6tWY55v0NQNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/BfAtlz2-agNGvhVzdEANynJeIRE.roa
Signing time: Fri 27 Jun 2025 20:04:42 +0000
ROA not before: Fri 27 Jun 2025 20:04:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203258
IP address blocks: 178.21.32.0/24 maxlen: 24
178.21.33.0/24 maxlen: 24
178.21.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/WBTburY-kRfQsCy6tWY55v0NQNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/WBTburY-kRfQsCy6tWY55v0NQNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WBTburY-kRfQsCy6tWY55v0NQNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b2:fe:09:7f:b7:89:ae:d8:19:41:82:9c:7a:82:bd:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5814dbbab63e9117d0b02cbab56639e6fd0d40d9
Validity
Not Before: Jun 27 20:04:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05f02d973dbe6a0346be157374400dca725e2111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3e:c3:a6:51:16:04:ef:03:ef:36:42:62:d4:
39:70:d1:f0:9e:99:8b:e8:e9:54:02:ae:c8:86:4b:
1b:a7:80:9f:7b:d7:eb:9d:6a:76:2c:e5:80:d6:c8:
eb:cc:ef:32:3c:08:3e:bc:dd:dc:89:38:e2:58:48:
19:8e:b5:5c:8d:87:2c:47:4c:9a:44:06:14:71:7a:
04:aa:52:50:13:95:b7:1a:19:22:b4:24:f9:24:e3:
a5:31:e4:bd:db:4f:54:26:71:54:50:df:fc:99:df:
33:50:dc:62:7e:25:2d:f4:2a:cc:e5:5d:73:a1:86:
38:14:88:f7:3f:3b:d6:49:69:8b:69:7f:40:78:82:
8b:3b:b2:cd:9a:4f:09:dc:48:8a:78:2e:06:e1:ef:
73:67:98:78:8a:5c:46:ae:5b:b7:73:45:a6:bc:61:
2c:11:3f:c9:ec:ee:0f:70:b9:02:d2:4e:ae:49:44:
37:aa:73:e5:24:74:04:b6:22:71:60:a0:15:00:ed:
07:31:78:77:97:82:c1:e5:29:9e:4b:d6:87:9d:8a:
4b:00:38:2a:a4:74:7b:68:36:f6:bf:64:3c:c6:57:
bc:40:8b:ee:8c:5a:80:cf:4e:41:8d:c0:ec:b1:28:
50:13:1a:16:78:a2:34:29:c2:8e:ca:49:2b:4e:41:
ae:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F0:2D:97:3D:BE:6A:03:46:BE:15:73:74:40:0D:CA:72:5E:21:11
X509v3 Authority Key Identifier:
keyid:58:14:DB:BA:B6:3E:91:17:D0:B0:2C:BA:B5:66:39:E6:FD:0D:40:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBTburY-kRfQsCy6tWY55v0NQNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/BfAtlz2-agNGvhVzdEANynJeIRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/WBTburY-kRfQsCy6tWY55v0NQNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.21.32.0/23
178.21.39.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:1a:71:a4:ef:6e:2a:30:fb:a2:35:ff:5f:8f:31:7f:66:69:
38:44:cb:7b:11:e0:ae:55:9b:fb:fa:69:37:7d:47:85:a8:3e:
63:9d:a6:6a:1e:33:3e:33:d1:dc:9a:15:94:d7:aa:8c:68:67:
2a:89:a3:85:30:4b:15:19:fe:e8:b7:ad:4f:aa:8a:09:8a:7a:
b9:1a:0f:e1:3b:fb:d4:b1:31:14:3e:86:a1:51:24:8e:20:19:
2d:38:bc:1c:ac:67:8b:8e:63:0c:a6:9f:1b:2a:e9:36:82:96:
68:38:cf:d1:5b:e9:39:62:e1:16:c2:47:1a:58:fd:b9:e4:36:
01:9d:fd:6b:e4:25:34:05:bd:e7:fb:6a:2f:9a:fd:69:ed:78:
0c:0c:37:af:ef:df:9f:0c:1e:e9:1b:0c:00:7b:97:8e:d7:e1:
64:70:99:4e:38:23:8c:9d:aa:1f:1f:26:86:4e:f7:26:96:ea:
39:31:78:eb:74:b1:9e:72:f2:70:f3:cb:66:d9:7c:18:6f:99:
f1:e4:a7:fc:74:6d:a2:ca:c9:ca:90:6b:1d:ca:6f:41:8b:16:
fb:07:22:ff:49:49:b7:a0:68:d3:e8:f8:c2:d2:75:53:52:51:
4d:59:14:c5:3d:5c:05:25:d1:02:0e:64:c0:72:4e:93:b0:bb:
1f:28:0e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:21:38 2025 by rpki-client