Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/bEaDZXG7S2leXjfPjK7xD1jlEso.roa
File: bEaDZXG7S2leXjfPjK7xD1jlEso.roa (raw, json)
Hash identifier: 0ajGtMp7A+lCJYkJshgX77oQEEisjFcdxQ+Z17PMX8g=
Subject key identifier: 6C:46:83:65:71:BB:4B:69:5E:5E:37:CF:8C:AE:F1:0F:58:E5:12:CA
Certificate issuer: /CN=9213f90aa4d8e47eabb348590157f4878bf746f8
Certificate serial: 019647E6CD4E562AE27169701D075B535872
Authority key identifier: 92:13:F9:0A:A4:D8:E4:7E:AB:B3:48:59:01:57:F4:87:8B:F7:46:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khP5CqTY5H6rs0hZAVf0h4v3Rvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/bEaDZXG7S2leXjfPjK7xD1jlEso.roa
Signing time: Fri 18 Apr 2025 07:57:10 +0000
ROA not before: Fri 18 Apr 2025 07:57:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41354
IP address blocks: 185.218.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khP5CqTY5H6rs0hZAVf0h4v3Rvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:47:e6:cd:4e:56:2a:e2:71:69:70:1d:07:5b:53:58:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9213f90aa4d8e47eabb348590157f4878bf746f8
Validity
Not Before: Apr 18 07:57:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c46836571bb4b695e5e37cf8caef10f58e512ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f2:f9:32:d8:4d:89:8f:59:61:6b:35:4b:9e:
c0:4f:f1:67:fc:8b:a3:73:c4:57:f6:05:9f:cb:3f:
6e:2d:43:42:4d:00:8f:a6:ee:e8:50:c5:b8:58:54:
12:7e:77:af:1f:e8:c4:6c:29:ce:b1:bc:7a:28:dc:
7f:46:77:4d:6e:1e:4f:fb:97:9b:50:22:9d:5c:c7:
96:33:99:cc:bc:66:49:20:55:08:94:6b:e8:d7:d3:
28:6f:59:e5:ae:81:93:2e:27:bb:f1:ce:56:cd:2d:
76:6f:06:39:e4:6e:3c:54:c1:a1:95:fc:57:ad:b3:
cd:7c:9a:b1:d3:c0:cb:59:80:f8:36:b5:50:f9:15:
f7:d5:d5:49:36:06:ef:9e:8c:19:f8:df:d9:77:47:
b4:3b:b7:6f:a1:34:2d:2e:1a:e4:0c:fd:05:86:e1:
81:47:a6:e8:3d:e6:2c:cf:5a:81:98:08:ea:c2:06:
06:6b:fb:80:3f:b1:9b:c5:82:a5:ea:4e:8e:3f:5d:
dd:a8:1f:32:5c:92:36:58:6c:fb:ec:d0:7a:bc:b6:
98:f3:2b:0c:93:39:bc:1f:aa:54:5e:6c:2b:5d:cc:
46:ec:00:8f:5e:95:05:2f:cf:02:bb:de:3f:57:17:
27:eb:89:8c:2d:3f:ac:6b:8b:b5:ca:eb:09:60:e7:
49:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:46:83:65:71:BB:4B:69:5E:5E:37:CF:8C:AE:F1:0F:58:E5:12:CA
X509v3 Authority Key Identifier:
keyid:92:13:F9:0A:A4:D8:E4:7E:AB:B3:48:59:01:57:F4:87:8B:F7:46:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khP5CqTY5H6rs0hZAVf0h4v3Rvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/bEaDZXG7S2leXjfPjK7xD1jlEso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.143.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:e0:7a:f6:87:38:af:f7:5f:b4:af:3e:55:6c:18:48:63:a4:
c5:e7:38:d0:12:ca:48:5d:f1:e5:48:e2:06:1a:89:8a:23:4c:
ce:ee:e8:e4:24:9c:59:b2:d2:2e:a7:a7:68:f9:9c:cf:a3:d8:
44:68:f6:82:c1:16:d5:9f:7b:b2:9f:a9:fc:6f:2f:c0:df:9d:
df:25:44:c8:c2:5c:08:35:76:dc:cb:2b:c5:f2:23:0a:0d:db:
87:5f:86:1e:55:96:09:d0:07:37:1b:7c:36:35:61:de:88:2c:
35:83:d4:af:7d:3f:fa:35:78:de:5c:cc:da:4d:43:db:92:d6:
09:d8:89:bf:91:ce:da:4c:47:28:c9:2b:69:96:01:52:7b:51:
43:c6:e5:b8:47:a7:12:64:a2:ec:29:09:8e:a3:b0:7a:45:64:
11:eb:b1:c8:69:fe:d8:36:1a:3c:fd:73:b6:41:e1:34:18:26:
fa:89:6d:7f:32:05:e1:58:ad:ed:4c:82:56:e8:25:c7:69:89:
7a:fb:31:f8:10:7a:16:e8:56:e5:cb:91:ac:4e:f7:e8:46:b0:
64:9e:f9:87:2b:25:16:fe:f6:8a:ac:4c:2e:32:3b:7d:f2:d0:
b4:5d:47:94:91:68:5b:ef:98:00:b0:21:8a:e8:61:26:ce:59:
1d:34:43:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:20:47 2025 by rpki-client