Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/Bzw8r1x55XyYElYmfqJXyqm41kU.roa
File: Bzw8r1x55XyYElYmfqJXyqm41kU.roa (raw, json)
Hash identifier: IYpvoZd34/j9aBEvND1q8wDI4bWzTu2Rls2jhnclL7M=
Subject key identifier: 07:3C:3C:AF:5C:79:E5:7C:98:12:56:26:7E:A2:57:CA:A9:B8:D6:45
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018CC94E30586F994AFE3DC012D1E9BA3DCB
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/Bzw8r1x55XyYElYmfqJXyqm41kU.roa
Signing time: Tue 02 Jan 2024 08:33:13 +0000
ROA not before: Tue 02 Jan 2024 08:33:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31472
IP address blocks: 185.132.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:30:58:6f:99:4a:fe:3d:c0:12:d1:e9:ba:3d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 08:33:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=073c3caf5c79e57c981256267ea257caa9b8d645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:eb:62:7a:e4:d4:13:4d:84:47:fb:65:34:a8:
34:43:e3:7e:7b:ca:c4:64:3c:bd:cb:72:a7:41:4e:
e7:92:88:cb:53:0f:6e:8b:16:7e:05:12:0a:52:cb:
86:71:95:37:6c:61:d9:a7:31:33:92:7f:70:97:df:
2e:0a:ce:1c:b1:67:c3:4f:f8:df:7b:3d:d0:7b:ff:
3e:e2:cb:3e:4f:80:ad:01:d1:3d:58:ac:8a:48:52:
88:16:11:ce:1e:63:c9:35:f7:fa:5d:20:72:2e:9c:
ce:af:e5:a0:9e:e4:08:a6:31:0d:32:0a:8c:62:40:
4a:df:d4:27:9f:f5:07:96:e8:4b:2d:bb:1a:d4:51:
60:e7:02:b9:cf:64:1c:bb:d6:a8:54:1f:8f:80:e3:
a5:35:a0:85:d2:92:2e:9a:75:12:f7:55:de:02:a7:
91:d7:bd:48:21:93:27:e3:bf:75:1a:bc:f1:e0:72:
45:36:c9:ce:d2:ee:98:1d:e8:38:bf:88:3c:db:6d:
a9:d1:b7:8e:fd:b0:99:2d:f3:78:ec:4f:2c:fb:4a:
71:8c:9d:72:a6:31:99:5c:21:9b:3f:64:aa:b3:2c:
0b:f3:bb:40:8f:68:c4:db:37:73:35:a9:f1:5c:5c:
f8:90:a9:12:1b:69:54:0d:ca:0d:eb:21:ae:fb:c5:
3c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:3C:3C:AF:5C:79:E5:7C:98:12:56:26:7E:A2:57:CA:A9:B8:D6:45
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/Bzw8r1x55XyYElYmfqJXyqm41kU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.132.52.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:36:5d:5e:80:e0:11:42:74:33:ea:b6:c1:6c:d4:02:48:ca:
1d:32:81:db:9e:46:2c:19:92:64:47:17:b0:18:6c:6c:78:21:
06:9f:cb:08:55:33:1d:87:a1:7c:19:00:e5:43:4e:59:79:7f:
3b:3a:87:fe:eb:18:31:41:6f:cb:61:38:c5:c8:ea:ab:33:8e:
88:4e:b3:88:c5:3e:25:af:a0:2e:93:eb:9b:89:b9:e8:9e:dd:
4f:c9:b9:16:fa:70:2e:8d:46:a8:e6:12:85:93:10:5e:0c:08:
f4:76:8b:70:d6:d1:40:2b:f3:20:89:c7:e0:bb:8d:5d:d6:62:
b8:48:ed:94:eb:55:ba:28:a1:4d:c5:a4:46:d8:c9:a6:7f:02:
fc:61:ea:b5:5a:c5:bd:5b:22:57:35:4b:2a:98:65:ef:72:8d:
79:bd:9c:9d:c0:bb:f2:af:0a:10:51:ba:64:1f:0c:ee:e5:29:
a0:8b:ed:75:12:d1:79:8c:55:10:e7:cd:90:d0:60:c4:54:d3:
34:ba:3f:c3:6f:f2:e9:3d:ac:14:e6:55:4c:d0:b1:85:a0:db:
bc:69:07:e2:3f:a0:27:4c:a4:fb:49:88:ec:f7:d7:98:0a:1e:
81:3e:a2:81:0f:09:8d:71:9a:44:b3:bf:49:d3:2c:d5:d2:81:
1e:de:bf:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 07:24:18 2024 by rpki-client on console-fra.rpki-client.org