Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/BEviNglNAg1qa4W_3gzgvvlPEhQ.roa
File: BEviNglNAg1qa4W_3gzgvvlPEhQ.roa (raw, json)
Hash identifier: sPwPapBCHY5ugqh58Jwms/bfu+8xPOQFfmH+Z0GIlLY=
Subject key identifier: 04:4B:E2:36:09:4D:02:0D:6A:6B:85:BF:DE:0C:E0:BE:F9:4F:12:14
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 0196E80DF310C0BB2455277305873CB2E510
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/BEviNglNAg1qa4W_3gzgvvlPEhQ.roa
Signing time: Mon 19 May 2025 10:19:10 +0000
ROA not before: Mon 19 May 2025 10:19:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213382
IP address blocks: 46.38.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 13:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e8:0d:f3:10:c0:bb:24:55:27:73:05:87:3c:b2:e5:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: May 19 10:19:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=044be236094d020d6a6b85bfde0ce0bef94f1214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a2:88:90:d0:bd:cd:4a:32:f0:56:d5:87:cd:
5a:d2:b7:35:95:bc:a6:a6:81:c6:2c:c8:f7:34:b1:
3d:31:84:51:b6:8a:ea:2f:94:e9:be:f2:f4:71:2e:
0f:69:f7:c5:2f:f5:9b:16:ed:61:98:29:71:2b:d3:
f7:f6:e6:b7:01:e1:42:0d:68:b4:96:52:e2:8e:05:
c3:65:5d:a3:ea:e0:1d:fd:7a:5d:49:08:01:96:2f:
4e:09:eb:b8:35:b0:26:5b:2e:83:82:33:a8:ff:b3:
f6:ea:3c:27:81:11:ea:1b:5f:0f:2a:da:4c:5d:10:
51:d3:f6:6b:d2:2d:fe:b2:96:8b:65:95:ce:6e:f6:
1c:df:1c:6a:3e:f1:14:c6:9f:e9:c1:f4:44:8f:5e:
4f:17:62:7c:dd:b7:48:c5:1e:58:62:7e:5d:4a:ea:
bf:28:18:07:26:d9:65:fb:14:b0:92:77:e9:e8:f3:
c3:05:2d:f4:10:e7:79:64:6d:71:ae:4d:e4:fa:36:
3a:35:75:49:67:80:4a:72:c2:d6:32:c7:fc:0e:b6:
47:a7:53:b8:a1:4d:98:28:83:e0:cc:aa:2a:4c:7c:
3d:18:ef:55:db:66:ce:bf:2d:15:ea:68:3d:fa:06:
88:00:ff:37:04:28:46:9d:df:92:e3:47:52:50:a7:
76:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:4B:E2:36:09:4D:02:0D:6A:6B:85:BF:DE:0C:E0:BE:F9:4F:12:14
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/BEviNglNAg1qa4W_3gzgvvlPEhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.156.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:60:8a:62:64:cc:43:d0:b7:ac:a1:20:e9:b9:73:5c:aa:aa:
59:46:2d:b0:2b:cf:c6:ec:c9:be:df:6d:52:26:c9:64:fc:10:
eb:3b:df:f7:3c:3d:04:4e:7c:32:e0:3b:78:67:52:3d:be:c6:
e4:43:12:6a:33:a1:64:20:78:51:4e:22:06:86:eb:fc:cf:1a:
a0:7c:2e:9b:13:25:c1:f0:d1:55:0f:eb:7b:44:09:a6:cb:3d:
7c:80:38:c1:ce:43:a7:eb:1e:24:7e:70:aa:c9:01:92:d0:7c:
22:ae:8d:a7:ff:37:66:05:de:78:76:6f:c4:45:50:0f:71:22:
cc:23:31:f5:3d:8f:b5:6c:0a:31:f6:ed:c9:24:42:2a:68:07:
00:24:c2:7c:ab:2e:cf:5c:e5:a5:ac:b7:5c:25:82:b2:5b:33:
f3:e8:4e:6e:c2:6c:86:28:fe:de:0f:9b:fa:4a:09:4a:58:58:
70:2c:c4:a3:3b:0e:de:f0:66:8a:6c:27:9d:42:f5:c1:0f:78:
60:78:03:15:1f:3c:f7:e7:89:62:89:9e:85:2f:e7:db:0e:61:
89:5e:e6:d3:91:3d:b3:dc:9a:16:82:82:df:61:a2:2e:94:d7:
19:08:ed:31:d0:35:b4:6f:ea:2f:5c:11:8b:6f:be:3e:60:59:
a3:be:23:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 19:11:38 2025 by rpki-client