Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/blFPI1QT3vGyXWS1-axkqAT7T1o.roa
File: blFPI1QT3vGyXWS1-axkqAT7T1o.roa (raw, json)
Hash identifier: 9ZF4v61ldXuDLq/JdKEO0mrKJOTY13vVthxskJAXAEM=
Subject key identifier: 6E:51:4F:23:54:13:DE:F1:B2:5D:64:B5:F9:AC:64:A8:04:FB:4F:5A
Certificate issuer: /CN=f57d9c8ffc204b6dbde01205303bdf8b50638aa6
Certificate serial: 0196530358A365B6D1BEC6DE108A273066E9
Authority key identifier: F5:7D:9C:8F:FC:20:4B:6D:BD:E0:12:05:30:3B:DF:8B:50:63:8A:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/blFPI1QT3vGyXWS1-axkqAT7T1o.roa
Signing time: Sun 20 Apr 2025 11:44:10 +0000
ROA not before: Sun 20 Apr 2025 11:44:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49556
IP address blocks: 109.70.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:03:58:a3:65:b6:d1:be:c6:de:10:8a:27:30:66:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57d9c8ffc204b6dbde01205303bdf8b50638aa6
Validity
Not Before: Apr 20 11:44:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e514f235413def1b25d64b5f9ac64a804fb4f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c2:2a:e1:3f:70:a5:2e:be:50:7f:5b:23:ee:
fa:9f:f4:68:d3:ab:f9:10:cf:1a:03:14:2c:a7:67:
34:81:96:f2:22:09:40:9c:7a:f0:c1:52:39:7d:17:
6a:01:9d:7d:1b:30:e8:22:40:aa:0c:00:5c:a3:67:
93:c1:da:b8:6b:25:75:79:df:a8:0e:a3:a9:45:c8:
c9:64:f9:ad:6a:85:6a:ec:14:1f:79:39:0b:bf:22:
5b:73:2a:eb:9a:ff:73:7b:8d:85:27:11:10:fc:33:
17:40:2e:4d:0a:4b:4e:7c:7a:87:23:e9:83:84:0b:
6c:e1:35:92:9c:1f:fc:69:62:e9:a3:16:ef:2a:15:
a7:43:97:da:ce:27:9b:e4:c0:a5:4d:46:6c:e9:3a:
13:06:8f:5a:21:4e:9d:3f:d9:1a:eb:09:9d:9d:c6:
4d:9c:30:87:98:3d:74:3f:ff:30:26:d5:51:85:cf:
f8:07:93:ab:10:6e:0f:3b:04:5b:86:eb:98:a2:b3:
00:90:d6:be:39:47:51:40:dc:67:b8:95:9b:b6:5f:
7a:a8:42:30:58:c0:74:9e:15:0d:79:55:80:97:6a:
c9:95:9c:c7:4c:e6:43:8b:0f:73:c9:54:c3:55:de:
05:80:0c:e0:c8:3d:c8:63:66:96:15:ca:e0:c0:fb:
5a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:51:4F:23:54:13:DE:F1:B2:5D:64:B5:F9:AC:64:A8:04:FB:4F:5A
X509v3 Authority Key Identifier:
keyid:F5:7D:9C:8F:FC:20:4B:6D:BD:E0:12:05:30:3B:DF:8B:50:63:8A:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/blFPI1QT3vGyXWS1-axkqAT7T1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.70.78.0/24
Signature Algorithm: sha256WithRSAEncryption
db:e6:0b:38:ea:95:fb:26:c7:c5:a2:ee:70:f2:b5:f5:77:a2:
cd:92:3b:dc:43:4a:d1:83:78:e1:2f:7c:50:7c:1e:f4:c9:84:
d5:0d:e2:65:8a:67:0b:4e:c3:6e:c5:58:5e:ed:f0:3a:5d:bc:
3b:0f:34:74:58:ae:70:ec:5b:f9:97:1e:20:eb:97:e4:fa:40:
89:aa:20:93:40:89:8f:4c:a9:b4:de:5b:73:d3:eb:14:01:8e:
9e:f2:d7:0f:0d:76:b8:80:8e:e3:76:76:29:95:da:7e:83:8b:
1f:29:3c:de:8b:d2:c3:52:9a:67:b4:87:90:05:d9:85:42:11:
56:e3:b1:b3:09:f6:69:3b:05:82:2f:03:3f:b3:a6:a9:7a:a0:
c5:7e:3e:9d:a8:b7:9d:2d:79:53:e2:d9:7b:f4:44:a5:49:24:
12:89:c4:20:7d:62:27:ca:be:42:b5:d0:21:c4:36:b2:d3:ea:
68:3a:50:62:2f:1b:df:7f:62:53:ee:ed:36:67:0b:7f:1b:b7:
97:dd:23:1d:f6:88:fd:58:3f:a5:49:b4:c0:32:9a:e5:bf:a4:
5f:68:21:3d:6e:9b:cb:0e:7a:40:08:21:dd:39:07:ca:de:97:
98:1b:59:82:04:9e:3d:21:44:3c:dc:bf:04:a6:11:b6:57:f2:
b6:f9:b3:a9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZZTA1ijZbbRvsbeEIonMGbpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1N2Q5YzhmZmMyMDRiNmRiZGUwMTIwNTMwM2JkZjhiNTA2
MzhhYTYwHhcNMjUwNDIwMTE0NDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTUxNGYyMzU0MTNkZWYxYjI1ZDY0YjVmOWFjNjRhODA0ZmI0ZjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcIq4T9wpS6+UH9bI+76n/Ro06v5
EM8aAxQsp2c0gZbyIglAnHrwwVI5fRdqAZ19GzDoIkCqDABco2eTwdq4ayV1ed+o
DqOpRcjJZPmtaoVq7BQfeTkLvyJbcyrrmv9ze42FJxEQ/DMXQC5NCktOfHqHI+mD
hAts4TWSnB/8aWLpoxbvKhWnQ5fazieb5MClTUZs6ToTBo9aIU6dP9ka6wmdncZN
nDCHmD10P/8wJtVRhc/4B5OrEG4POwRbhuuYorMAkNa+OUdRQNxnuJWbtl96qEIw
WMB0nhUNeVWAl2rJlZzHTOZDiw9zyVTDVd4FgAzgyD3IY2aWFcrgwPtaowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG5RTyNUE97xsl1ktfmsZKgE+09aMB8GA1UdIwQY
MBaAFPV9nI/8IEttveASBTA734tQY4qmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVgyY2pfd2dTMjI5NEJJRk1EdmZpMUJqaXFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9lNTBiODMtYjI5Mi00MTE3LTg5OTEt
YjY3ZDMyMDk5MGM2LzEvYmxGUEkxUVQzdkd5WFdTMS1heGtxQVQ3VDFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9lNTBiODMtYjI5Mi00MTE3LTg5OTEtYjY3ZDMyMDk5MGM2
LzEvOVgyY2pfd2dTMjI5NEJJRk1EdmZpMUJqaXFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbUZOMA0G
CSqGSIb3DQEBCwUAA4IBAQDb5gs46pX7JsfFou5w8rX1d6LNkjvcQ0rRg3jhL3xQ
fB70yYTVDeJlimcLTsNuxVhe7fA6Xbw7DzR0WK5w7Fv5lx4g65fk+kCJqiCTQImP
TKm03ltz0+sUAY6e8tcPDXa4gI7jdnYpldp+g4sfKTzei9LDUppntIeQBdmFQhFW
47GzCfZpOwWCLwM/s6apeqDFfj6dqLedLXlT4tl79ESlSSQSicQgfWInyr5CtdAh
xDay0+poOlBiLxvff2JT7u02Zwt/G7eX3SMd9oj9WD+lSbTAMprlv6RfaCE9bpvL
DnpACCHdOQfK3peYG1mCBJ49IUQ83L8EphG2V/K2+bOp
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:21:58 2025 by rpki-client