Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/BBIzMd4cxInJmVK7Qydc8xiuYqw.roa
File: BBIzMd4cxInJmVK7Qydc8xiuYqw.roa (raw, json)
Hash identifier: 4GQ+jspCjXdjSz7kKb+m/EVB191Qu2mjKUEluAYdxuE=
Subject key identifier: 04:12:33:31:DE:1C:C4:89:C9:99:52:BB:43:27:5C:F3:18:AE:62:AC
Certificate issuer: /CN=b53d9f1bc3f0d90b6dcd1e9f6fd1e506188ea7c2
Certificate serial: 018CC801EAE2AF4525A9EEA4A1B735FB4F74
Authority key identifier: B5:3D:9F:1B:C3:F0:D9:0B:6D:CD:1E:9F:6F:D1:E5:06:18:8E:A7:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tT2fG8Pw2QttzR6fb9HlBhiOp8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/BBIzMd4cxInJmVK7Qydc8xiuYqw.roa
Signing time: Tue 02 Jan 2024 02:30:18 +0000
ROA not before: Tue 02 Jan 2024 02:30:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199560
IP address blocks: 185.95.210.0/23 maxlen: 23
185.95.208.0/22 maxlen: 24
2a05:fc00::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/tT2fG8Pw2QttzR6fb9HlBhiOp8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 16:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:ea:e2:af:45:25:a9:ee:a4:a1:b7:35:fb:4f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53d9f1bc3f0d90b6dcd1e9f6fd1e506188ea7c2
Validity
Not Before: Jan 2 02:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=04123331de1cc489c99952bb43275cf318ae62ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4a:00:2d:ce:81:f3:7d:85:4f:e4:70:9e:99:
26:d2:d6:12:55:40:19:e6:30:c3:7c:cc:92:b1:99:
78:5e:24:50:33:04:21:33:b4:10:1e:2f:11:17:07:
6b:b3:85:de:ca:f2:4b:64:81:2e:8d:e2:a7:21:77:
a3:06:6d:c3:81:43:86:35:14:d8:ea:8f:b0:53:5a:
cd:ae:70:bd:23:f2:41:a6:0c:34:2e:f2:d3:33:87:
1b:ae:26:83:f4:e3:fc:4f:d2:bf:97:e2:7c:fa:ee:
d2:71:6c:06:74:7e:bc:1f:25:ad:d3:9b:05:ff:7a:
1e:08:55:3e:7f:47:b7:29:b6:e0:da:57:50:d1:96:
50:79:97:19:97:8e:be:2e:6d:05:af:f8:05:e9:5a:
f6:29:70:37:1e:27:82:cf:19:87:40:d2:40:ab:b3:
27:43:96:57:b2:c6:da:4a:67:a8:14:ba:14:e5:cd:
3f:1a:87:49:69:06:f1:b9:1d:b1:66:a8:ba:91:c6:
d4:3b:78:79:23:a1:24:9a:fe:13:cd:99:ce:c0:5a:
bc:68:2a:59:43:23:94:1d:63:63:64:87:62:c0:1c:
4c:95:8b:3d:de:89:f0:95:c8:52:28:ba:0a:24:9a:
43:46:72:a6:c1:df:84:86:0c:58:3e:e2:92:a0:2a:
8e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:12:33:31:DE:1C:C4:89:C9:99:52:BB:43:27:5C:F3:18:AE:62:AC
X509v3 Authority Key Identifier:
keyid:B5:3D:9F:1B:C3:F0:D9:0B:6D:CD:1E:9F:6F:D1:E5:06:18:8E:A7:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tT2fG8Pw2QttzR6fb9HlBhiOp8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/BBIzMd4cxInJmVK7Qydc8xiuYqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.95.208.0/22
IPv6:
2a05:fc00::/29
Signature Algorithm: sha256WithRSAEncryption
31:82:a3:b4:30:2d:0b:df:d0:15:82:7a:04:52:20:be:72:34:
c8:24:86:dd:29:6d:28:5d:bf:80:75:c7:a0:28:d7:b6:07:5e:
ae:b6:6f:20:8b:b8:41:c1:26:7c:18:ca:91:bb:4d:bf:3b:b9:
08:f5:c1:bb:45:97:4c:76:15:bc:81:5c:5b:ef:76:b3:68:ec:
88:47:f2:90:97:71:2c:d2:84:09:03:d8:fd:b6:af:a8:52:73:
ff:65:c3:53:3e:24:20:f7:b6:62:05:ae:15:91:07:22:06:0c:
5d:65:49:0d:cf:ae:af:49:b6:c8:88:63:92:22:83:8d:cd:66:
c9:b4:f6:69:9b:33:d4:b3:22:32:2a:4b:c5:a4:1c:9d:30:1d:
45:4f:0e:63:b9:29:3a:2c:1e:3a:ef:ef:88:17:e3:c9:c7:69:
1c:d2:62:d3:36:d5:6b:70:7c:2f:fa:a4:b8:d0:b0:34:81:81:
fb:cd:63:e8:af:a9:d5:4e:fe:4a:6a:87:aa:2f:a7:90:1d:da:
29:be:f5:1c:7e:d7:46:98:67:24:a9:ce:d0:27:c9:45:b0:0b:
00:38:c1:15:d4:55:9f:de:ad:89:4d:3b:7e:09:6f:46:c8:eb:
c4:c0:2e:29:de:c1:d2:78:26:95:c8:37:55:b7:bd:19:c7:8d:
ba:00:06:26
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzIAerir0Ulqe6kobc1+090MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1M2Q5ZjFiYzNmMGQ5MGI2ZGNkMWU5ZjZmZDFlNTA2MTg4
ZWE3YzIwHhcNMjQwMTAyMDIzMDE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDEyMzMzMWRlMWNjNDg5Yzk5OTUyYmI0MzI3NWNmMzE4YWU2MmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEoALc6B832FT+Rwnpkm0tYSVUAZ
5jDDfMySsZl4XiRQMwQhM7QQHi8RFwdrs4XeyvJLZIEujeKnIXejBm3DgUOGNRTY
6o+wU1rNrnC9I/JBpgw0LvLTM4cbriaD9OP8T9K/l+J8+u7ScWwGdH68HyWt05sF
/3oeCFU+f0e3Kbbg2ldQ0ZZQeZcZl46+Lm0Fr/gF6Vr2KXA3HieCzxmHQNJAq7Mn
Q5ZXssbaSmeoFLoU5c0/GodJaQbxuR2xZqi6kcbUO3h5I6Ekmv4TzZnOwFq8aCpZ
QyOUHWNjZIdiwBxMlYs93onwlchSKLoKJJpDRnKmwd+EhgxYPuKSoCqOGQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFAQSMzHeHMSJyZlSu0MnXPMYrmKsMB8GA1UdIwQY
MBaAFLU9nxvD8NkLbc0en2/R5QYYjqfCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFQyZkc4UHcyUXR0elI2ZmI5SGxCaGlPcDhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8wZTNkNjQtZjI5MC00ODkzLTlhNDAt
YzllMTQxMzMzZDU4LzEvQkJJek1kNGN4SW5KbVZLN1F5ZGM4eGl1WXF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8wZTNkNjQtZjI5MC00ODkzLTlhNDAtYzllMTQxMzMzZDU4
LzEvdFQyZkc4UHcyUXR0elI2ZmI5SGxCaGlPcDhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuV/QMA0E
AgACMAcDBQMqBfwAMA0GCSqGSIb3DQEBCwUAA4IBAQAxgqO0MC0L39AVgnoEUiC+
cjTIJIbdKW0oXb+AdcegKNe2B16utm8gi7hBwSZ8GMqRu02/O7kI9cG7RZdMdhW8
gVxb73azaOyIR/KQl3Es0oQJA9j9tq+oUnP/ZcNTPiQg97ZiBa4VkQciBgxdZUkN
z66vSbbIiGOSIoONzWbJtPZpmzPUsyIyKkvFpBydMB1FTw5juSk6LB467++IF+PJ
x2kc0mLTNtVrcHwv+qS40LA0gYH7zWPor6nVTv5KaoeqL6eQHdopvvUcftdGmGck
qc7QJ8lFsAsAOMEV1FWf3q2JTTt+CW9GyOvEwC4p3sHSeCaVyDdVt70Zx426AAYm
-----END CERTIFICATE-----
Generated at Sun Jun 23 01:11:57 2024 by rpki-client on console-ams.rpki-client.org