Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ddda5e-feef-4763-88da-8bc825c3a324/1/Bpr6Qvj5OyKiNqO-rCtVnSoVQKc.roa
File: Bpr6Qvj5OyKiNqO-rCtVnSoVQKc.roa (raw, json)
Hash identifier: rShu+uGIS7O+WS0HosUhtK5bqnAwnC1dDKNWKniaFQo=
Subject key identifier: 06:9A:FA:42:F8:F9:3B:22:A2:36:A3:BE:AC:2B:55:9D:2A:15:40:A7
Certificate issuer: /CN=541fc54762cfe92d76c2f4c6af8999cbccf6bb67
Certificate serial: 01967F816C0EB60CFAB97A7E213D6FF8E8CB
Authority key identifier: 54:1F:C5:47:62:CF:E9:2D:76:C2:F4:C6:AF:89:99:CB:CC:F6:BB:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VB_FR2LP6S12wvTGr4mZy8z2u2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ddda5e-feef-4763-88da-8bc825c3a324/1/Bpr6Qvj5OyKiNqO-rCtVnSoVQKc.roa
Signing time: Tue 29 Apr 2025 03:05:10 +0000
ROA not before: Tue 29 Apr 2025 03:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205809
IP address blocks: 66.203.126.0/23 maxlen: 24
94.24.36.0/23 maxlen: 24
162.208.16.0/24 maxlen: 24
185.206.24.0/22 maxlen: 24
2a0b:e40::/29 maxlen: 48
2a0b:e43::/40 maxlen: 40
2a0b:e44::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ddda5e-feef-4763-88da-8bc825c3a324/1/VB_FR2LP6S12wvTGr4mZy8z2u2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ddda5e-feef-4763-88da-8bc825c3a324/1/VB_FR2LP6S12wvTGr4mZy8z2u2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/VB_FR2LP6S12wvTGr4mZy8z2u2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:81:6c:0e:b6:0c:fa:b9:7a:7e:21:3d:6f:f8:e8:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=541fc54762cfe92d76c2f4c6af8999cbccf6bb67
Validity
Not Before: Apr 29 03:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=069afa42f8f93b22a236a3beac2b559d2a1540a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ca:94:2e:19:7d:16:7f:40:d6:db:91:5a:bf:
47:34:17:e2:cb:21:33:14:6b:00:07:c4:94:86:62:
58:a8:6b:d7:33:dd:d9:21:a0:30:f1:90:7f:c0:1d:
f4:28:93:17:89:0e:36:2b:66:d8:68:28:4f:89:10:
c9:b3:9d:de:93:eb:3c:47:85:36:b3:32:75:09:42:
5c:43:a0:49:b9:5f:f1:79:22:14:67:9f:4e:39:f5:
0f:33:6a:68:38:5d:51:20:48:4d:c7:17:78:ae:45:
6b:aa:d5:2c:ca:91:3d:01:86:38:fc:47:d3:e7:fb:
8d:83:c5:84:dd:4b:ea:40:4b:eb:b2:8b:90:ae:2f:
4f:e2:9a:30:91:d3:f0:12:a4:d4:c8:4f:ab:34:1f:
5b:bf:63:e4:f7:74:a6:93:1a:06:9e:e3:8c:ac:f2:
8e:36:cb:3e:3d:02:16:4b:68:1d:10:ee:90:14:3b:
46:ca:cc:50:5b:8f:83:fc:8b:4a:ae:a7:3e:b6:5f:
2e:94:c1:82:f8:6d:16:c1:5f:fb:29:f9:34:69:01:
3a:b0:e1:d1:62:38:46:0b:eb:24:db:1c:89:ae:6d:
b0:f3:63:01:f2:17:3e:13:37:2d:53:1a:cf:4a:5a:
e6:84:04:72:e5:e9:a3:97:6b:f3:3f:1b:a3:49:05:
75:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:9A:FA:42:F8:F9:3B:22:A2:36:A3:BE:AC:2B:55:9D:2A:15:40:A7
X509v3 Authority Key Identifier:
keyid:54:1F:C5:47:62:CF:E9:2D:76:C2:F4:C6:AF:89:99:CB:CC:F6:BB:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VB_FR2LP6S12wvTGr4mZy8z2u2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ddda5e-feef-4763-88da-8bc825c3a324/1/Bpr6Qvj5OyKiNqO-rCtVnSoVQKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ddda5e-feef-4763-88da-8bc825c3a324/1/VB_FR2LP6S12wvTGr4mZy8z2u2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.203.126.0/23
94.24.36.0/23
162.208.16.0/24
185.206.24.0/22
IPv6:
2a0b:e40::/29
Signature Algorithm: sha256WithRSAEncryption
77:62:0e:29:37:09:81:53:6a:68:a1:6b:b8:63:68:e4:5e:9e:
8c:0d:ff:c3:63:16:96:d3:54:b9:ad:2b:16:28:0c:73:56:c5:
a2:c8:fa:3f:2e:76:83:92:17:a9:ff:23:18:8f:46:0f:f6:2d:
94:c9:42:d5:ac:4c:64:1a:81:44:e8:d6:df:a3:84:89:6f:78:
76:c3:01:61:ca:ed:c5:3b:11:96:74:2d:da:67:ad:ab:69:68:
a5:99:f3:7c:4f:d5:04:35:23:54:16:08:0d:ca:a6:3d:d8:60:
9c:47:b1:23:43:b0:c4:3e:ab:f8:60:19:54:14:1c:bd:d0:30:
fd:a1:41:56:b3:8b:61:88:e9:e2:35:75:07:19:72:1d:84:17:
79:70:93:90:57:d0:25:e2:3f:d7:ed:f4:d1:d9:8a:1e:81:b7:
db:16:75:46:41:c6:cb:22:5c:f6:12:69:3c:18:4d:71:66:54:
ee:df:48:3f:47:ca:d7:9b:44:57:02:de:42:42:da:54:78:d1:
b9:c3:dd:58:90:6b:a5:16:93:a7:65:f7:19:57:09:57:8b:2e:
d1:63:28:35:f1:71:50:ab:3c:42:8e:b5:ef:66:17:6c:05:4f:
f7:51:3a:52:3f:05:6c:b0:39:f1:bf:c9:49:25:74:78:d9:86:
89:0a:bd:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 14:13:31 2025 by rpki-client