Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/bkgPAomj5Hty0jREj4Wi4CYSl34.roa
File: bkgPAomj5Hty0jREj4Wi4CYSl34.roa (raw, json)
Hash identifier: xTOY7fOryKrBCrnTTY9ZhQG8l94maF649pWjsuI216E=
Subject key identifier: 6E:48:0F:02:89:A3:E4:7B:72:D2:34:44:8F:85:A2:E0:26:12:97:7E
Certificate issuer: /CN=c1a4d142d410aab0905112c4ae579076c0e6dc81
Certificate serial: 0196589C266F1BAB9A40307380AA20114B41
Authority key identifier: C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/bkgPAomj5Hty0jREj4Wi4CYSl34.roa
Signing time: Mon 21 Apr 2025 13:49:10 +0000
ROA not before: Mon 21 Apr 2025 13:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1836
IP address blocks: 194.116.180.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:9c:26:6f:1b:ab:9a:40:30:73:80:aa:20:11:4b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1a4d142d410aab0905112c4ae579076c0e6dc81
Validity
Not Before: Apr 21 13:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e480f0289a3e47b72d234448f85a2e02612977e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:77:ef:3d:59:58:6b:7b:4b:3d:b6:13:b4:6c:
3b:3c:86:a4:82:d9:db:af:44:70:aa:d1:3c:83:17:
62:88:4b:d2:b1:94:14:5b:a4:53:69:82:99:27:56:
ff:fc:ac:ef:64:44:e2:7f:1d:9c:56:11:ed:79:5f:
45:68:cb:55:38:5c:1d:77:b7:88:e0:b9:84:a1:e2:
fd:a9:9c:8a:25:30:38:d5:fc:c3:2d:91:96:d7:2f:
9b:f7:ee:69:5a:3b:86:39:90:d0:ba:13:a1:23:b8:
98:2e:9b:3b:7b:13:22:df:c3:9d:b3:e2:a7:b6:7d:
46:7f:eb:08:d4:44:ef:89:77:7d:69:74:00:9c:52:
c1:52:80:62:4e:33:a8:3d:a4:27:3e:e4:fe:bd:83:
fb:30:53:cf:e9:ec:e1:84:3b:f7:00:c9:84:38:f5:
df:9b:fd:86:2a:a2:c1:79:4f:b7:40:4b:1a:e5:2f:
40:5d:db:00:c0:6a:c9:54:cf:dc:06:2d:53:4e:1b:
5c:19:82:56:9d:84:cc:bc:d0:13:da:5c:94:e3:5e:
3f:d3:dc:7c:3b:a2:3a:0a:94:0a:ed:37:a3:20:37:
4e:62:0d:2f:bc:5e:8d:43:54:67:af:48:83:99:2d:
08:c5:16:f7:bd:51:f1:08:80:d4:a6:77:b1:7c:3d:
2b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:48:0F:02:89:A3:E4:7B:72:D2:34:44:8F:85:A2:E0:26:12:97:7E
X509v3 Authority Key Identifier:
keyid:C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/bkgPAomj5Hty0jREj4Wi4CYSl34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.180.0/23
Signature Algorithm: sha256WithRSAEncryption
04:b8:d2:3e:61:8f:34:5e:44:7c:ec:86:22:d7:d2:de:b7:fa:
b4:8f:14:ea:6f:d3:8c:ad:4d:c3:76:f8:10:38:0c:e0:52:cd:
ae:f2:bc:1f:c4:26:1a:55:30:2b:a6:21:e4:e2:91:50:27:2c:
c6:29:6e:84:e6:d3:4f:fc:35:84:c4:79:77:64:41:06:e3:1a:
0d:ec:dd:b1:47:5f:05:40:02:02:d7:f6:21:d5:bd:f7:5b:47:
13:b8:93:94:6b:42:88:77:7f:3f:5a:f0:7c:96:b1:91:64:62:
9a:43:0e:94:cf:13:a4:ee:9a:f7:b0:00:ef:20:14:c3:0e:7a:
99:78:df:bf:fb:44:3a:cf:a3:01:33:bc:80:86:3a:3a:0f:50:
32:3c:67:c1:ad:af:b5:ea:d7:60:a2:d8:77:6a:51:35:d5:bb:
84:d0:e2:ac:f3:50:5f:0a:71:1f:d4:19:83:d8:72:5c:5a:2b:
d9:6c:16:df:12:d2:a6:2d:76:07:f2:cd:b7:d3:05:35:70:01:
13:d1:0d:f2:01:9b:9d:a2:ac:b1:3b:82:af:9b:be:06:1c:b4:
83:8f:d8:07:e1:60:1a:e7:1d:de:52:85:20:d9:9e:9f:91:2d:
7f:e3:28:13:c3:1b:e6:b4:ff:6b:f1:8b:cf:8b:37:94:66:75:
81:0d:f6:08
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZZYnCZvG6uaQDBzgKogEUtBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYTRkMTQyZDQxMGFhYjA5MDUxMTJjNGFlNTc5MDc2YzBl
NmRjODEwHhcNMjUwNDIxMTM0OTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTQ4MGYwMjg5YTNlNDdiNzJkMjM0NDQ4Zjg1YTJlMDI2MTI5NzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHfvPVlYa3tLPbYTtGw7PIakgtnb
r0RwqtE8gxdiiEvSsZQUW6RTaYKZJ1b//KzvZETifx2cVhHteV9FaMtVOFwdd7eI
4LmEoeL9qZyKJTA41fzDLZGW1y+b9+5pWjuGOZDQuhOhI7iYLps7exMi38Ods+Kn
tn1Gf+sI1ETviXd9aXQAnFLBUoBiTjOoPaQnPuT+vYP7MFPP6ezhhDv3AMmEOPXf
m/2GKqLBeU+3QEsa5S9AXdsAwGrJVM/cBi1TThtcGYJWnYTMvNAT2lyU414/09x8
O6I6CpQK7TejIDdOYg0vvF6NQ1Rnr0iDmS0IxRb3vVHxCIDUpnexfD0rEwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG5IDwKJo+R7ctI0RI+FouAmEpd+MB8GA1UdIwQY
MBaAFMGk0ULUEKqwkFESxK5XkHbA5tyBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2FUUlF0UVFxckNRVVJMRXJsZVFkc0RtM0lFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xODA1N2EtN2MyOC00NGIwLWIzNDYt
OTkwOTc2NzBiNDRlLzEvYmtnUEFvbWo1SHR5MGpSRWo0V2k0Q1lTbDM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8xODA1N2EtN2MyOC00NGIwLWIzNDYtOTkwOTc2NzBiNDRl
LzEvd2FUUlF0UVFxckNRVVJMRXJsZVFkc0RtM0lFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwnS0MA0G
CSqGSIb3DQEBCwUAA4IBAQAEuNI+YY80XkR87IYi19Let/q0jxTqb9OMrU3DdvgQ
OAzgUs2u8rwfxCYaVTArpiHk4pFQJyzGKW6E5tNP/DWExHl3ZEEG4xoN7N2xR18F
QAIC1/Yh1b33W0cTuJOUa0KId38/WvB8lrGRZGKaQw6UzxOk7pr3sADvIBTDDnqZ
eN+/+0Q6z6MBM7yAhjo6D1AyPGfBra+16tdgoth3alE11buE0OKs81BfCnEf1BmD
2HJcWivZbBbfEtKmLXYH8s230wU1cAET0Q3yAZudoqyxO4Kvm74GHLSDj9gH4WAa
5x3eUoUg2Z6fkS1/4ygTwxvmtP9r8YvPizeUZnWBDfYI
-----END CERTIFICATE-----
Generated at Wed Apr 30 20:12:16 2025 by rpki-client