Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/BvyES9jXd4FvyRzDaNsUq9VBpCY.roa
File: BvyES9jXd4FvyRzDaNsUq9VBpCY.roa (raw, json)
Hash identifier: FzGCF8fLDsTB0AlRMKLs7ASxadanhvduv+NXdymdmP4=
Subject key identifier: 06:FC:84:4B:D8:D7:77:81:6F:C9:1C:C3:68:DB:14:AB:D5:41:A4:26
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 01966B5F4866307E05DE8C84AF03E5D8AE70
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/BvyES9jXd4FvyRzDaNsUq9VBpCY.roa
Signing time: Fri 25 Apr 2025 05:15:28 +0000
ROA not before: Fri 25 Apr 2025 05:15:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212987
IP address blocks: 81.15.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6b:5f:48:66:30:7e:05:de:8c:84:af:03:e5:d8:ae:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Apr 25 05:15:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06fc844bd8d777816fc91cc368db14abd541a426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:90:34:95:98:a5:a2:67:fd:f0:0e:fd:69:ee:
77:d4:5e:64:bb:45:60:e2:f4:6a:c2:c8:a1:70:ea:
a5:f9:be:0f:28:26:68:54:53:6d:d8:61:49:e0:2a:
2c:8c:be:dc:d6:8a:1b:f0:a5:57:43:aa:72:44:b7:
38:9b:e4:48:4c:ad:f4:22:b1:78:d2:26:01:5e:ff:
1e:c0:7b:8e:f5:00:81:e3:e3:f5:2f:99:d1:e3:cf:
e4:71:a3:2d:41:d7:fc:28:dd:f1:58:7d:0b:8d:b4:
40:c6:56:b7:88:53:ad:21:90:b6:c3:b5:49:2f:5a:
9d:de:f5:96:42:6f:b4:dd:48:1f:0c:8a:06:5b:f3:
af:57:36:ae:b4:82:28:cb:ab:05:85:7c:4e:85:32:
71:c5:d4:42:4d:bd:b8:87:da:5e:a7:33:d3:bf:9f:
a0:43:18:1e:ce:a1:83:56:6d:8c:5d:79:e5:0c:0a:
6c:00:22:67:6b:f5:cb:e4:a7:8b:b9:86:a9:82:a8:
43:8f:c9:13:85:e4:0d:0c:ee:14:8e:df:b2:f9:10:
6c:e4:f9:e8:a1:11:0f:79:3c:bd:d2:fa:7e:97:25:
dc:19:55:c0:23:00:64:ee:d1:f9:2f:cd:cc:0b:59:
93:d5:2a:28:6e:dd:92:1a:5d:79:44:a3:9c:8f:3e:
0f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FC:84:4B:D8:D7:77:81:6F:C9:1C:C3:68:DB:14:AB:D5:41:A4:26
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/BvyES9jXd4FvyRzDaNsUq9VBpCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.196.0/24
Signature Algorithm: sha256WithRSAEncryption
99:e4:30:e9:d0:f2:6b:ce:75:20:46:dd:a5:53:89:fd:37:25:
c3:f1:d8:65:1a:a5:42:c1:40:8b:5f:b4:c2:29:7a:d7:b3:ce:
9b:e2:92:79:8b:d3:ac:ff:c0:2f:ca:c3:c6:96:00:6e:69:4f:
3b:6e:6f:e9:b7:45:d8:e1:82:64:26:03:ec:96:d1:84:39:1e:
10:52:2e:40:4a:9a:3e:f0:3d:7a:3c:c6:c7:ff:23:2c:66:02:
be:04:69:ae:a7:33:f9:0f:94:9c:82:a9:42:13:28:09:88:f5:
07:3a:ba:2d:7f:ab:43:07:fb:fe:3b:13:3a:75:0e:c6:7b:a9:
b3:88:8b:5d:96:98:9f:8e:88:4f:2b:db:12:8b:84:ef:e7:1c:
f4:0f:c4:bc:31:cc:25:7c:21:e2:6f:df:70:a9:69:b7:69:63:
94:c6:73:c2:89:d4:89:e4:72:ef:f3:0c:07:eb:d8:79:a6:09:
c3:4a:70:af:b1:8e:9e:e8:2a:7b:64:8f:62:9a:3e:11:81:7f:
95:05:6a:80:b2:4d:a3:11:b4:eb:bd:14:3b:16:65:0c:59:03:
fa:1c:2e:4b:38:57:6a:60:8c:e5:57:7d:c4:46:b4:2b:e1:e3:
24:ad:b7:10:6d:f6:01:ef:55:86:34:83:d4:54:db:b0:c5:d8:
3e:be:a1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:54:23 2025 by rpki-client