Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/BQA9R1dYbbo9-Y89Nt-rA-IHJCc.roa
File: BQA9R1dYbbo9-Y89Nt-rA-IHJCc.roa (raw, json)
Hash identifier: d/CQ0qpwsR9FeN/OqEgCkr7/i4vsDXRQSIPhgni0mCM=
Subject key identifier: 05:00:3D:47:57:58:6D:BA:3D:F9:8F:3D:36:DF:AB:03:E2:07:24:27
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01977EE617BE4DC9D7528541DCC1B1AD71BA
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/BQA9R1dYbbo9-Y89Nt-rA-IHJCc.roa
Signing time: Tue 17 Jun 2025 17:18:17 +0000
ROA not before: Tue 17 Jun 2025 17:18:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51765
IP address blocks: 45.87.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:e6:17:be:4d:c9:d7:52:85:41:dc:c1:b1:ad:71:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 17 17:18:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05003d4757586dba3df98f3d36dfab03e2072427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c5:44:93:3c:5c:42:89:88:9c:e9:2d:aa:93:
15:86:71:40:31:27:d4:c2:98:25:69:73:20:d4:20:
a6:7d:4e:98:b0:b2:66:d0:c6:57:f2:80:47:ea:84:
cc:ac:bf:3e:0b:fb:cc:c8:6d:6f:b9:42:5b:63:58:
05:54:75:c8:27:3a:04:a9:6a:da:61:81:c7:43:5e:
8f:30:e7:43:24:21:da:3d:9c:cf:8b:1e:ac:78:71:
b3:36:23:ce:48:83:31:2f:bc:18:d2:b3:4e:c6:75:
dc:6e:9b:67:6f:42:82:2c:f1:8b:5b:cf:0e:61:0f:
7f:d1:3a:7d:41:ad:02:f3:af:ae:9e:fd:14:ac:96:
2e:a7:ba:54:c6:95:c4:29:a1:ed:a9:e0:c4:86:e7:
4e:41:01:94:f1:47:70:cd:22:44:55:32:de:39:a3:
3d:34:1e:f0:86:0d:0b:45:97:ad:89:5c:ab:d4:99:
f4:62:64:b7:cd:7f:e4:74:dc:8a:dd:ff:c2:dd:eb:
ae:47:dd:5a:c0:80:2d:4b:35:61:02:57:42:96:c1:
e3:2d:5b:a4:4f:fa:a7:93:54:9a:32:6f:2c:1e:c3:
2b:6c:93:3f:08:da:b6:b3:9e:fe:a8:af:2f:24:63:
28:21:d1:59:81:77:64:b3:62:24:e6:4d:21:bc:26:
9d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:00:3D:47:57:58:6D:BA:3D:F9:8F:3D:36:DF:AB:03:E2:07:24:27
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/BQA9R1dYbbo9-Y89Nt-rA-IHJCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.248.0/24
Signature Algorithm: sha256WithRSAEncryption
19:c6:d6:c3:f9:c3:ba:0f:25:bd:03:b0:57:65:4c:65:33:d1:
0b:0c:64:58:a8:4a:72:dd:ad:b9:8f:4d:d4:a7:7b:8e:9f:57:
5c:17:f2:f4:b4:bf:46:db:e6:1b:81:a9:2a:df:26:c8:64:1e:
1b:38:42:2f:f5:b1:67:05:2d:a9:e2:7c:1e:24:4b:9c:65:c2:
c2:5a:ad:3a:ad:f4:96:e7:71:36:d8:7e:a1:af:bc:95:f9:f5:
2b:d7:cd:e6:ca:f6:8f:be:3a:92:c5:6d:30:3e:47:bb:97:2a:
43:79:7f:ae:f3:89:d7:1a:d0:43:ec:52:08:f7:9e:89:e3:a0:
9a:ad:9b:60:0a:fa:86:7b:2c:a4:96:ad:23:1a:08:1c:c0:bf:
d6:d3:d8:c6:4f:2c:bf:ad:5c:ab:96:71:61:a6:c2:12:72:90:
ca:4c:52:d6:75:93:65:eb:9e:3b:d4:13:46:53:1b:2f:b1:0b:
a0:98:48:bc:2a:d1:74:4c:ab:d4:65:2a:9f:ab:a1:9f:a9:e7:
d6:cf:35:71:11:3e:86:0b:ad:96:a8:d6:d2:fe:42:39:9e:f6:
d5:0d:45:ec:b9:e1:1e:f9:31:7b:29:53:18:cb:f3:72:56:c7:
96:24:9d:b8:6f:70:5d:c9:dc:29:a9:8d:2d:13:c6:16:8c:15:
f5:6c:a4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 12:45:55 2025 by rpki-client