Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/Blt---jsIFQZ1r2IAxC-z0fx3gA.roa
File: Blt---jsIFQZ1r2IAxC-z0fx3gA.roa (raw, json)
Hash identifier: WMXyefoTuj2dAlvEBS8JjIjWNUd09eEAuE+gYKf1VT4=
Subject key identifier: 06:5B:7E:FB:E8:EC:20:54:19:D6:BD:88:03:10:BE:CF:47:F1:DE:00
Certificate issuer: /CN=ca03268bb666b1bd423079e5df2bd5a54e1e9861
Certificate serial: 0197636DECB3E27960836E3253E32B52D354
Authority key identifier: CA:03:26:8B:B6:66:B1:BD:42:30:79:E5:DF:2B:D5:A5:4E:1E:98:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygMmi7Zmsb1CMHnl3yvVpU4emGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/Blt---jsIFQZ1r2IAxC-z0fx3gA.roa
Signing time: Thu 12 Jun 2025 09:17:17 +0000
ROA not before: Thu 12 Jun 2025 09:17:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41835
IP address blocks: 91.210.244.0/22 maxlen: 22
193.203.206.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygMmi7Zmsb1CMHnl3yvVpU4emGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:6d:ec:b3:e2:79:60:83:6e:32:53:e3:2b:52:d3:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca03268bb666b1bd423079e5df2bd5a54e1e9861
Validity
Not Before: Jun 12 09:17:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=065b7efbe8ec205419d6bd880310becf47f1de00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e2:1b:8e:09:68:05:75:a2:c6:03:23:9b:e3:
3f:d8:cd:d6:e3:40:e2:d4:b5:4a:72:6a:e6:35:6e:
82:9e:f3:c4:5a:88:1a:ca:ce:d0:68:d8:c3:a2:25:
18:dc:71:1c:78:13:07:77:d4:34:a2:cb:37:10:5b:
e5:cb:08:6b:93:26:51:c3:a8:11:bf:64:a0:0d:5f:
49:04:99:91:91:33:88:24:bf:6c:1f:19:67:5e:1f:
90:7e:4b:90:07:7b:36:78:d9:b3:d2:a8:98:56:c8:
34:3e:02:b8:eb:1d:75:54:68:4a:4a:a0:06:39:0c:
8d:3c:d5:43:e7:3d:82:37:86:35:6d:b9:07:c2:50:
c2:2a:98:85:21:93:4f:52:b6:f9:69:17:e0:b1:21:
ad:3c:bd:db:9c:e2:b8:f6:52:b3:70:66:29:cf:41:
b4:59:5b:12:7c:7d:95:2c:f4:63:17:10:af:c6:1c:
55:53:ea:cc:4a:50:75:cb:92:19:e7:64:8d:8e:4e:
b1:3d:a1:45:b6:49:5c:67:af:8a:df:4f:a2:61:6b:
98:e6:a7:a2:13:99:03:7d:22:05:0b:60:d8:8b:2b:
d1:7e:b6:5d:14:d8:7b:fd:53:de:6f:28:b0:ff:55:
d5:ed:9e:8b:66:cd:41:7c:66:b8:0d:6e:19:3a:e0:
a8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:5B:7E:FB:E8:EC:20:54:19:D6:BD:88:03:10:BE:CF:47:F1:DE:00
X509v3 Authority Key Identifier:
keyid:CA:03:26:8B:B6:66:B1:BD:42:30:79:E5:DF:2B:D5:A5:4E:1E:98:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygMmi7Zmsb1CMHnl3yvVpU4emGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/Blt---jsIFQZ1r2IAxC-z0fx3gA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.244.0/22
193.203.206.0/23
Signature Algorithm: sha256WithRSAEncryption
40:35:e5:b3:e5:49:99:5c:ce:d2:29:2e:ea:8e:26:20:e4:72:
82:ca:d4:e5:bc:f3:b1:ca:46:59:e0:46:4e:d5:8a:6c:10:e1:
4a:2e:5b:06:0f:e2:47:e1:b4:10:04:61:6d:6f:b6:56:d8:c0:
cf:36:6a:d1:d7:29:a0:a2:1c:6c:21:92:e5:b6:2d:71:03:27:
ff:9f:9e:9a:b2:b5:7c:95:ea:63:be:85:f7:07:6c:43:90:70:
2a:b7:2d:d8:2d:e9:82:bd:f0:ac:32:2a:87:e6:2b:7d:4e:05:
6e:64:be:1d:f6:5d:9f:2c:bf:7b:e6:b2:eb:eb:eb:6d:84:b7:
bd:e8:62:a9:89:62:5a:e7:12:ca:34:e6:38:53:99:b1:f9:39:
c2:60:05:24:29:66:36:90:f7:a1:ee:91:d4:83:84:15:f9:62:
e9:45:70:b3:b7:20:00:34:4e:28:9d:95:f5:18:39:54:01:ba:
ee:8d:7a:cb:6d:ba:09:a7:06:86:f5:aa:17:4f:ea:df:4f:75:
1a:6a:a6:68:0e:48:1b:d6:71:0c:84:47:e9:f6:8d:bb:f9:7b:
1d:8b:7a:dd:aa:97:fe:af:8e:3d:a9:5c:42:10:5e:e5:11:a4:
92:6d:f8:0d:23:bd:d9:ea:8c:cb:82:61:d6:a4:8f:fb:88:f5:
fa:79:6b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:00:14 2025 by rpki-client