Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/BcelUhdXxacAQU97XkdcwjtJzVg.roa
File: BcelUhdXxacAQU97XkdcwjtJzVg.roa (raw, json)
Hash identifier: XXQpfHpkHgSaCtL3AHunwK9n34HNeTtzIRJIEYTmJHs=
Subject key identifier: 05:C7:A5:52:17:57:C5:A7:00:41:4F:7B:5E:47:5C:C2:3B:49:CD:58
Certificate issuer: /CN=d5585a2e08fe443ce7fd0cbf406f7b9ada2a7cc5
Certificate serial: 0196683418F740ABECD95E38955D2E89BEB9
Authority key identifier: D5:58:5A:2E:08:FE:44:3C:E7:FD:0C:BF:40:6F:7B:9A:DA:2A:7C:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1VhaLgj-RDzn_Qy_QG97mtoqfMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/BcelUhdXxacAQU97XkdcwjtJzVg.roa
Signing time: Thu 24 Apr 2025 14:29:26 +0000
ROA not before: Thu 24 Apr 2025 14:29:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8717
IP address blocks: 195.128.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/1VhaLgj-RDzn_Qy_QG97mtoqfMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/1VhaLgj-RDzn_Qy_QG97mtoqfMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1VhaLgj-RDzn_Qy_QG97mtoqfMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:68:34:18:f7:40:ab:ec:d9:5e:38:95:5d:2e:89:be:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5585a2e08fe443ce7fd0cbf406f7b9ada2a7cc5
Validity
Not Before: Apr 24 14:29:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05c7a5521757c5a700414f7b5e475cc23b49cd58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:83:10:25:d0:ed:cc:7e:77:fe:03:c3:3b:02:
97:2c:89:dc:36:41:3e:c7:ae:97:2a:05:a8:46:72:
67:2d:d3:a2:f4:ed:5d:df:60:f9:21:5a:d4:e0:98:
a8:46:69:4b:c4:34:95:65:5c:20:9a:98:b5:af:a8:
b2:41:95:4e:05:e8:fd:ee:7e:1e:a2:ba:2c:56:1c:
a1:52:3d:09:91:2e:72:b3:46:11:50:bb:14:ac:29:
f8:cb:5f:57:4b:f1:4f:f9:31:7a:2b:d4:5a:8e:c4:
fb:cc:2f:b5:f2:20:e3:7a:cb:17:82:f7:74:10:96:
38:80:ac:36:8f:0a:81:59:10:17:2c:c5:98:b1:0a:
61:18:c6:69:34:06:67:eb:d0:cd:e0:76:17:b4:b8:
ef:d3:0d:17:e7:6e:0b:dc:a4:76:bd:4a:22:c1:08:
e9:e6:68:aa:ae:d9:fb:a6:66:f6:1a:c0:98:5a:0e:
62:46:41:66:93:6f:ad:69:3f:c5:2a:9e:11:89:40:
be:f3:b6:c9:92:b7:66:ec:9f:7f:5e:72:a3:45:44:
e4:d0:b1:1c:ba:09:70:46:01:88:89:cc:58:6b:60:
e5:73:0d:ff:e5:d2:80:c3:fc:87:e9:44:7f:63:7f:
65:42:5c:4d:0d:e1:67:6b:c0:5e:86:7e:85:5a:d8:
a1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C7:A5:52:17:57:C5:A7:00:41:4F:7B:5E:47:5C:C2:3B:49:CD:58
X509v3 Authority Key Identifier:
keyid:D5:58:5A:2E:08:FE:44:3C:E7:FD:0C:BF:40:6F:7B:9A:DA:2A:7C:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1VhaLgj-RDzn_Qy_QG97mtoqfMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/BcelUhdXxacAQU97XkdcwjtJzVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/1VhaLgj-RDzn_Qy_QG97mtoqfMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.128.134.0/24
Signature Algorithm: sha256WithRSAEncryption
65:6b:f6:2f:80:d1:15:af:93:93:d9:b8:0d:76:34:2f:09:7f:
da:14:ef:13:78:89:d0:60:e5:06:b9:4a:e6:d8:71:2c:9c:6a:
8c:27:f0:23:70:14:56:ae:d1:47:19:48:08:94:dc:f9:45:d7:
e5:05:c7:0f:03:13:63:b9:4a:56:a8:1e:25:61:b9:b1:43:da:
8d:97:ce:7b:d9:19:85:1f:39:0d:e5:25:19:8c:ab:8b:14:c0:
07:4c:d6:34:5b:50:21:d5:4a:22:ff:5b:c1:05:ae:59:97:14:
a7:1b:3b:3e:82:33:28:34:eb:ae:9f:a6:a5:67:6a:2a:f6:88:
ff:67:28:2f:dd:b9:8d:53:0a:31:c2:3a:62:ba:ff:55:ab:a5:
54:39:72:8b:6a:c2:0b:ec:5d:8f:ca:4a:b9:dd:fc:9e:e2:85:
9c:82:b5:bf:82:fe:50:f7:b9:43:db:92:1c:86:35:21:a3:f5:
fe:7e:3a:33:d1:5d:45:d2:60:82:51:0f:e1:13:02:91:13:f8:
ad:71:80:1d:dc:2f:e1:1e:c3:20:e0:0a:ff:ed:87:59:8e:e8:
b4:f7:a7:a1:b1:40:bc:d8:f9:56:01:90:7c:fa:15:2b:f4:81:
2d:bf:82:4c:a0:00:01:b6:bd:69:c1:bb:ab:ef:8a:cc:d4:83:
88:c3:ab:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 16:45:19 2025 by rpki-client