Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BXaZelrYFdJvNqOdLiZPisxY7Uk.roa
File: BXaZelrYFdJvNqOdLiZPisxY7Uk.roa (raw, json)
Hash identifier: 67k1me2SgwY24GHhzeZvCPBUVpU7Aig03bpTpS4se2U=
Subject key identifier: 05:76:99:7A:5A:D8:15:D2:6F:36:A3:9D:2E:26:4F:8A:CC:58:ED:49
Certificate issuer: /CN=042d9f4d6aff383c59e9de7802dbee024ee887dc
Certificate serial: 01969042AB16570ACDCD7FAD8EACA5CF506B
Authority key identifier: 04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BXaZelrYFdJvNqOdLiZPisxY7Uk.roa
Signing time: Fri 02 May 2025 09:10:10 +0000
ROA not before: Fri 02 May 2025 09:10:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8529
IP address blocks: 82.178.32.0/24 maxlen: 24
82.178.33.0/24 maxlen: 24
82.178.158.0/23 maxlen: 23
82.178.158.0/24 maxlen: 24
82.178.159.0/24 maxlen: 24
134.0.216.0/22 maxlen: 24
134.0.220.0/22 maxlen: 24
151.248.96.0/20 maxlen: 24
185.200.124.0/24 maxlen: 24
185.200.125.0/24 maxlen: 24
185.200.126.0/24 maxlen: 24
185.201.192.0/22 maxlen: 24
213.202.0.0/21 maxlen: 24
2a02:f040::/29 maxlen: 48
2a14:1000::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:42:ab:16:57:0a:cd:cd:7f:ad:8e:ac:a5:cf:50:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=042d9f4d6aff383c59e9de7802dbee024ee887dc
Validity
Not Before: May 2 09:10:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0576997a5ad815d26f36a39d2e264f8acc58ed49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ec:35:f8:3d:0f:a5:2d:4e:3f:dc:b8:ec:42:
11:50:aa:17:c1:0d:3e:ee:d2:ff:60:f8:b9:cb:86:
d2:01:36:c6:5a:b8:a9:77:47:c5:46:3e:43:5c:e1:
a5:0a:82:72:c4:8b:c0:81:2d:aa:92:0d:22:fa:e6:
f6:05:eb:be:00:49:78:61:dd:2e:bf:eb:90:c6:06:
b7:80:3a:d1:92:52:67:45:85:27:3a:e7:9d:3e:c3:
f8:27:c1:fc:8b:33:69:fa:cc:35:1b:d4:a7:88:e7:
a1:c5:e6:5e:ce:bd:e6:6e:6c:cf:90:c8:47:f6:c8:
c9:8e:77:5d:ce:ab:2c:75:c6:b5:2f:01:34:3f:25:
ba:95:d0:7d:17:9e:00:fb:a9:ab:c4:bd:d3:b5:2c:
7b:c2:fe:34:1d:13:7e:83:da:ae:1b:fa:c2:d3:fa:
b0:1d:47:e6:24:f5:f3:95:41:d5:3b:f1:1d:3c:51:
76:bd:1a:c0:b6:b2:52:cc:23:69:18:0d:60:9a:03:
97:cc:47:45:9c:2d:94:7c:7a:ce:b1:b0:4e:8b:dd:
0a:55:af:50:37:b4:23:7e:88:42:ea:fb:d5:21:85:
4d:83:ce:69:4e:6b:69:87:a4:89:d0:0a:ce:80:59:
7a:1c:6d:25:91:21:9d:84:c1:45:f7:79:96:d9:f1:
32:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:76:99:7A:5A:D8:15:D2:6F:36:A3:9D:2E:26:4F:8A:CC:58:ED:49
X509v3 Authority Key Identifier:
keyid:04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BXaZelrYFdJvNqOdLiZPisxY7Uk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.178.32.0/23
82.178.158.0/23
134.0.216.0/21
151.248.96.0/20
185.200.124.0-185.200.126.255
185.201.192.0/22
213.202.0.0/21
IPv6:
2a02:f040::/29
2a14:1000::/29
Signature Algorithm: sha256WithRSAEncryption
6d:b9:95:0d:1b:e2:e8:f9:92:88:99:de:19:29:f1:e6:6d:16:
55:7d:37:3b:3a:80:76:28:2c:b2:78:e8:2e:e3:1d:65:06:67:
b1:57:1a:32:8a:fe:00:c6:22:cc:59:d5:9d:12:f7:bf:b0:7c:
0f:8a:d1:e6:99:8c:0b:44:a7:5d:20:f2:8c:b2:ef:20:d9:07:
b5:98:12:7f:b3:9e:6a:8d:6b:ea:64:2f:75:08:02:f7:ce:ea:
4c:74:fb:05:2f:03:ab:dc:b2:e7:cd:05:5e:fa:d4:2e:64:49:
31:66:01:32:de:3d:08:28:99:b8:b1:de:4d:6a:70:71:13:07:
4f:47:8b:ac:92:f6:92:fd:cb:b7:cd:f8:5e:dc:de:05:4c:47:
e4:2c:ff:cc:7e:fb:84:c6:ab:4a:7b:6c:70:ff:60:a0:15:ba:
37:e6:56:af:ba:92:5a:cb:af:0f:3d:be:de:db:b8:bb:de:b1:
32:20:54:a4:0a:0a:13:30:56:c6:06:27:2b:d8:77:61:51:4a:
73:ce:74:aa:2c:07:19:81:2e:3f:46:18:05:d6:3a:d1:e4:7a:
a1:f5:72:cc:4b:8a:a3:c9:5c:5d:3c:a1:7b:40:7a:88:32:92:
9a:cb:d5:b2:18:96:33:9e:fd:22:6f:f5:99:81:73:89:77:64:
cf:43:40:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:22:06 2025 by rpki-client