Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/bPHOfPhRt9UxNoPYUZyx6NkEcPE.roa
File: bPHOfPhRt9UxNoPYUZyx6NkEcPE.roa (raw, json)
Hash identifier: l5CD77LRDYrviJN2I+kUm6dy7C8YOi2kiqH568j84ZE=
Subject key identifier: 6C:F1:CE:7C:F8:51:B7:D5:31:36:83:D8:51:9C:B1:E8:D9:04:70:F1
Certificate issuer: /CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
Certificate serial: 019680A2BA586EABBB26E1E834CE0F0C0883
Authority key identifier: B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/bPHOfPhRt9UxNoPYUZyx6NkEcPE.roa
Signing time: Tue 29 Apr 2025 08:21:10 +0000
ROA not before: Tue 29 Apr 2025 08:21:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215497
IP address blocks: 5.159.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:a2:ba:58:6e:ab:bb:26:e1:e8:34:ce:0f:0c:08:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
Validity
Not Before: Apr 29 08:21:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6cf1ce7cf851b7d5313683d8519cb1e8d90470f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c6:e7:46:6f:37:94:f0:38:34:3f:db:99:b2:
18:e1:b2:9a:a6:ab:1e:50:54:d4:2e:11:f0:bf:1d:
68:13:11:a0:7d:cf:89:6c:93:88:61:11:21:f2:e2:
4e:f7:e1:ac:1c:92:e0:25:4b:57:2a:93:a3:da:80:
26:b1:dd:4b:ad:a7:a1:50:04:2d:07:6a:ad:d9:88:
2b:68:02:7d:db:65:fc:68:2b:8e:da:fe:9e:b8:4f:
f0:9c:46:7b:ba:40:00:ee:ad:06:d6:b7:6b:83:89:
1d:4d:91:da:60:1b:e6:70:99:bb:33:35:2b:97:77:
51:9d:61:21:2a:78:a6:6e:07:19:48:56:c4:0f:4f:
56:1d:17:c5:b3:24:b1:cd:30:08:57:20:31:ec:d5:
e9:ff:92:b0:d9:55:e0:10:d2:6d:b5:e2:0e:25:e2:
64:70:3b:81:0f:8d:2a:59:f9:93:a5:8c:80:53:37:
07:20:9d:e0:d3:a0:f8:0e:4a:7b:e5:95:23:7e:2b:
38:1a:b5:4a:5d:08:9d:c4:27:1f:56:51:01:50:98:
19:b2:23:17:ee:83:db:ef:bd:40:28:4a:02:2e:d7:
29:62:82:1f:37:a2:cf:4e:d1:6f:00:1f:d8:f4:1d:
cc:93:aa:69:28:03:04:f1:a7:2b:0c:d1:85:8f:d9:
0f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F1:CE:7C:F8:51:B7:D5:31:36:83:D8:51:9C:B1:E8:D9:04:70:F1
X509v3 Authority Key Identifier:
keyid:B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/bPHOfPhRt9UxNoPYUZyx6NkEcPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.197.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:a0:61:09:7a:03:3d:bc:15:95:fc:19:3b:f1:c5:a5:61:e3:
ed:b6:df:0d:0a:c9:0d:82:f5:5a:ce:1d:98:f3:9c:58:c0:26:
39:4a:1f:06:1e:e0:6a:c4:10:6e:bb:b0:10:71:64:c1:29:0b:
bf:9a:bf:7f:bc:fb:ab:c3:62:de:3a:0c:68:fa:56:1b:14:3a:
40:68:e1:c6:72:68:f2:32:65:48:03:c6:36:1b:fa:1e:c6:19:
69:89:b8:e3:2c:e2:58:ee:cf:74:38:01:36:1c:5a:2a:c2:d4:
c7:46:00:50:5f:88:99:7f:a4:1c:81:85:33:c4:e5:6b:8b:ad:
9b:b6:bd:ca:27:d9:21:0d:a6:52:58:41:e9:dd:70:b7:14:68:
01:f8:5a:0e:83:e1:44:48:aa:14:19:f3:b5:86:41:a1:02:2e:
68:07:4a:37:2f:fa:65:49:df:07:71:00:6b:68:e5:16:0b:84:
d1:8b:72:09:0f:ed:58:55:78:58:ad:bc:1b:ab:b6:7c:6c:1f:
bb:ef:b3:4a:ff:8d:65:83:3f:ff:63:b0:e1:87:bc:72:b4:ef:
2e:c2:1e:2e:36:e3:5b:a9:cd:d2:ba:e3:4a:d1:6b:53:ac:4e:
2b:08:a2:e8:a6:46:52:a8:d0:68:89:73:b5:4e:99:ab:c0:d2:
6c:81:df:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:35:14 2025 by rpki-client