Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/BB5_8BhJDTnxTKWGMNqj5oXCwds.roa
File: BB5_8BhJDTnxTKWGMNqj5oXCwds.roa (raw, json)
Hash identifier: LuNPA32mjFH0EXTfiP4dDNt0mH4g6yoGsaPQD7tGC9s=
Subject key identifier: 04:1E:7F:F0:18:49:0D:39:F1:4C:A5:86:30:DA:A3:E6:85:C2:C1:DB
Certificate issuer: /CN=492d24ade37a22339328409d757d47f97943b7a0
Certificate serial: 019762C8366F9347E7214EEBF2F8FAC55D59
Authority key identifier: 49:2D:24:AD:E3:7A:22:33:93:28:40:9D:75:7D:47:F9:79:43:B7:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SS0kreN6IjOTKECddX1H-XlDt6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/BB5_8BhJDTnxTKWGMNqj5oXCwds.roa
Signing time: Thu 12 Jun 2025 06:16:17 +0000
ROA not before: Thu 12 Jun 2025 06:16:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56524
IP address blocks: 91.223.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/SS0kreN6IjOTKECddX1H-XlDt6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:c8:36:6f:93:47:e7:21:4e:eb:f2:f8:fa:c5:5d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=492d24ade37a22339328409d757d47f97943b7a0
Validity
Not Before: Jun 12 06:16:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=041e7ff018490d39f14ca58630daa3e685c2c1db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e4:37:b3:9c:b8:44:dd:56:01:51:38:ed:7e:
8d:f0:27:22:ad:62:a1:db:76:dc:e1:53:ab:34:6f:
32:66:68:87:6d:3a:45:90:f3:58:92:87:78:e2:2a:
54:df:04:d7:70:bf:40:9e:fc:84:2f:bb:65:d7:45:
46:57:41:27:ba:35:d3:d1:05:a1:81:ba:b6:19:f2:
9c:9a:fa:a6:c2:39:9e:0b:14:1a:f5:45:61:58:76:
c3:6c:4b:2c:0c:62:9e:fe:41:f7:27:b1:44:6c:8e:
8d:14:aa:ab:62:9a:71:46:9b:4a:10:b4:2d:1d:3d:
d2:1b:ee:3a:ca:da:03:10:41:d2:64:a9:c4:2d:52:
01:a9:9b:f8:59:b9:86:34:6d:83:55:63:1d:64:9c:
6f:25:4d:4a:39:1b:a7:f6:e7:9b:6a:ca:2e:98:14:
b3:3e:06:3b:ba:a3:4e:e0:a7:df:09:4d:89:5e:ca:
b0:4e:f4:99:73:d7:bc:b7:39:e4:8c:4c:e7:e3:c8:
06:74:f4:5b:36:e4:78:4d:b4:a7:8e:b7:f0:17:ea:
98:30:98:b5:f9:dd:50:8e:fc:17:2e:0a:34:5d:41:
b4:e5:c2:a2:c2:20:99:f9:30:1e:cc:bf:e6:97:a4:
df:f3:1f:c9:76:09:7a:84:10:9b:6b:5b:d1:e5:17:
81:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:1E:7F:F0:18:49:0D:39:F1:4C:A5:86:30:DA:A3:E6:85:C2:C1:DB
X509v3 Authority Key Identifier:
keyid:49:2D:24:AD:E3:7A:22:33:93:28:40:9D:75:7D:47:F9:79:43:B7:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SS0kreN6IjOTKECddX1H-XlDt6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/BB5_8BhJDTnxTKWGMNqj5oXCwds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.214.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:4d:ae:fa:c6:8e:83:56:1a:79:00:f6:18:9e:44:30:07:f7:
b1:36:e7:20:ec:81:03:96:a8:b5:99:e5:5a:3a:06:ce:0c:fc:
d2:a2:70:b8:e6:1b:cb:ff:b0:ae:23:43:a3:80:3f:88:b7:6e:
5c:e3:81:e9:85:34:c6:c1:2d:a4:65:11:9b:a8:8e:d9:28:1c:
f6:33:73:65:af:ac:96:68:f8:09:4b:25:74:30:99:05:03:c3:
b5:da:2e:7e:9e:1a:d2:9e:e9:fb:82:95:43:30:00:f9:e2:e0:
f5:33:fc:f2:37:6a:75:22:fe:44:60:fc:79:3f:2a:4c:f3:4f:
3a:61:3c:d9:ac:a2:42:b2:b3:09:b7:95:d9:ef:f1:fa:3f:8a:
19:f1:88:29:49:82:1c:dc:c6:49:9c:f9:42:b2:24:f6:20:11:
5a:ea:79:e2:66:53:69:7b:72:87:88:03:c0:81:89:33:3a:4c:
00:87:43:f4:a1:b5:76:26:a7:e5:0a:b9:b2:1a:0c:af:17:75:
4e:74:b7:88:b9:7b:33:67:bf:2c:7c:b0:55:24:3c:3b:5a:91:
59:69:38:d2:a1:67:6e:01:c8:a1:52:4c:3f:56:78:b0:ea:54:
53:f9:ff:62:e5:a1:bb:04:b8:36:07:16:b7:9e:e8:d4:16:91:
4e:5f:d0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 02:59:30 2025 by rpki-client