Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/BMZLcKlE7OFgvQpCBzy_hqoCoUA.roa
File: BMZLcKlE7OFgvQpCBzy_hqoCoUA.roa (raw, json)
Hash identifier: AiVAexPb4014uO2N7XNmtVUnBy+2Rblg9wSsUJE7mTM=
Subject key identifier: 04:C6:4B:70:A9:44:EC:E1:60:BD:0A:42:07:3C:BF:86:AA:02:A1:40
Certificate issuer: /CN=d9ff9e17b9b41988a92599cbcaba0391ffb61a20
Certificate serial: 018CC49336EDEF59707093779F82E9D67717
Authority key identifier: D9:FF:9E:17:B9:B4:19:88:A9:25:99:CB:CA:BA:03:91:FF:B6:1A:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2f-eF7m0GYipJZnLyroDkf-2GiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/BMZLcKlE7OFgvQpCBzy_hqoCoUA.roa
Signing time: Mon 01 Jan 2024 10:30:31 +0000
ROA not before: Mon 01 Jan 2024 10:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24951
IP address blocks: 195.234.64.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2f-eF7m0GYipJZnLyroDkf-2GiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 04:03:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:36:ed:ef:59:70:70:93:77:9f:82:e9:d6:77:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ff9e17b9b41988a92599cbcaba0391ffb61a20
Validity
Not Before: Jan 1 10:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=04c64b70a944ece160bd0a42073cbf86aa02a140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:62:a9:40:e7:f9:f0:5d:c5:6c:39:c4:1b:99:
9a:59:05:bb:d1:9d:68:94:b8:36:55:8c:da:b1:05:
b4:e4:06:99:68:a3:8d:05:ec:b3:73:58:58:39:63:
c4:eb:51:09:b5:91:3d:b1:85:c3:2a:65:da:47:cf:
65:3a:c7:20:93:42:cc:b5:5d:14:19:dc:01:b4:20:
a1:83:a9:37:f7:4b:25:d1:3d:89:09:ce:79:8a:9b:
5f:79:7d:12:fc:4d:12:e8:cb:08:c3:5e:fb:36:73:
4d:06:ed:c4:2e:98:9c:5d:07:52:9d:d7:27:ef:7c:
e9:f6:c0:9f:7f:d6:e2:f4:28:30:fa:bc:fc:7c:8a:
92:56:91:2f:42:da:c9:3a:29:31:90:3c:5e:db:59:
5b:d5:8c:a7:82:ac:a4:e5:93:d7:02:d8:7a:cb:8e:
bf:50:b8:6e:a4:51:64:a5:5d:54:6b:d5:7f:fa:08:
83:7a:55:fb:6f:1a:86:bf:60:15:a4:de:f1:86:dd:
8f:83:f2:a1:b6:d1:7c:ee:3f:20:74:c0:f1:53:16:
88:4d:5d:32:d0:e4:26:90:dc:c6:74:7b:0a:b9:65:
2a:95:77:6f:29:fe:8a:e5:fe:ff:6f:3a:09:4f:ff:
08:28:b4:2e:73:e8:f2:98:24:f0:08:a8:78:c9:24:
b1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C6:4B:70:A9:44:EC:E1:60:BD:0A:42:07:3C:BF:86:AA:02:A1:40
X509v3 Authority Key Identifier:
keyid:D9:FF:9E:17:B9:B4:19:88:A9:25:99:CB:CA:BA:03:91:FF:B6:1A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f-eF7m0GYipJZnLyroDkf-2GiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/BMZLcKlE7OFgvQpCBzy_hqoCoUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.64.0/22
Signature Algorithm: sha256WithRSAEncryption
72:38:b9:39:97:6f:cf:d8:9b:b9:8a:eb:9c:1f:58:50:97:d1:
fd:1a:2d:43:35:cb:bb:fa:9c:ed:39:b4:0c:36:04:4f:f0:52:
d8:01:03:c9:9e:d9:8e:5a:5f:07:e9:77:32:18:c1:23:21:80:
d3:dc:7c:45:a4:69:95:f9:b5:be:12:ab:8d:2f:ed:f9:48:a7:
24:10:e0:d5:c2:bc:b1:ca:4b:b5:fd:11:fd:dc:55:85:0f:43:
7d:1d:12:71:79:32:ad:60:b1:40:27:eb:5d:90:56:94:cb:a1:
57:c6:08:3a:01:c4:21:08:43:72:1e:c1:d0:4e:31:4b:c8:4e:
af:da:ac:6e:5e:a7:ff:1a:e7:51:cc:84:69:7c:16:25:2d:b5:
d1:51:40:79:71:fc:20:4a:38:00:ce:c5:63:88:2e:f3:66:e6:
13:bc:12:39:39:8e:4f:22:b3:22:22:c8:89:f6:1d:ae:19:a1:
5a:58:52:73:3f:2f:08:17:d1:cc:20:01:69:6a:29:30:bc:88:
9a:e5:8c:0c:93:b7:a2:cf:4a:e1:f2:b0:b0:69:1f:91:f3:e5:
bf:09:05:ee:35:40:0c:84:eb:b3:83:73:ee:a1:a0:ba:b0:9b:
c7:a6:4a:3e:ac:03:38:67:c3:b1:fc:49:b6:c3:20:98:5d:10:
1b:32:ad:5e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEkzbt71lwcJN3n4Lp1ncXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZmY5ZTE3YjliNDE5ODhhOTI1OTljYmNhYmEwMzkxZmZi
NjFhMjAwHhcNMjQwMTAxMTAzMDMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNGM2NGI3MGE5NDRlY2UxNjBiZDBhNDIwNzNjYmY4NmFhMDJhMTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWKpQOf58F3FbDnEG5maWQW70Z1o
lLg2VYzasQW05AaZaKONBeyzc1hYOWPE61EJtZE9sYXDKmXaR89lOscgk0LMtV0U
GdwBtCChg6k390sl0T2JCc55iptfeX0S/E0S6MsIw177NnNNBu3ELpicXQdSndcn
73zp9sCff9bi9Cgw+rz8fIqSVpEvQtrJOikxkDxe21lb1Yyngqyk5ZPXAth6y46/
ULhupFFkpV1Ua9V/+giDelX7bxqGv2AVpN7xht2Pg/KhttF87j8gdMDxUxaITV0y
0OQmkNzGdHsKuWUqlXdvKf6K5f7/bzoJT/8IKLQuc+jymCTwCKh4ySSxpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFATGS3CpROzhYL0KQgc8v4aqAqFAMB8GA1UdIwQY
MBaAFNn/nhe5tBmIqSWZy8q6A5H/thogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmYtZUY3bTBHWWlwSlpuTHlyb0RrZi0yR2lBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy80OWQ4NTktNjEwYS00MjQyLThkZGYt
MzdhMGU0NzRhYjE1LzEvQk1aTGNLbEU3T0ZndlFwQ0J6eV9ocW9Db1VBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy80OWQ4NTktNjEwYS00MjQyLThkZGYtMzdhMGU0NzRhYjE1
LzEvMmYtZUY3bTBHWWlwSlpuTHlyb0RrZi0yR2lBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw+pAMA0G
CSqGSIb3DQEBCwUAA4IBAQByOLk5l2/P2Ju5iuucH1hQl9H9Gi1DNcu7+pztObQM
NgRP8FLYAQPJntmOWl8H6XcyGMEjIYDT3HxFpGmV+bW+EquNL+35SKckEODVwryx
yku1/RH93FWFD0N9HRJxeTKtYLFAJ+tdkFaUy6FXxgg6AcQhCENyHsHQTjFLyE6v
2qxuXqf/GudRzIRpfBYlLbXRUUB5cfwgSjgAzsVjiC7zZuYTvBI5OY5PIrMiIsiJ
9h2uGaFaWFJzPy8IF9HMIAFpaikwvIia5YwMk7eiz0rh8rCwaR+R8+W/CQXuNUAM
hOuzg3PuoaC6sJvHpko+rAM4Z8Ox/Em2wyCYXRAbMq1e
-----END CERTIFICATE-----
Generated at Mon Jun 24 11:37:57 2024 by rpki-client on console-fra.rpki-client.org