Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/bNUP0ryFBSOCpSbKez8gsru4AvU.roa
File: bNUP0ryFBSOCpSbKez8gsru4AvU.roa (raw, json)
Hash identifier: KN76m1yPt95UYUJ3bH7onEq5zWlMu98EzPz7+4WKY3c=
Subject key identifier: 6C:D5:0F:D2:BC:85:05:23:82:A5:26:CA:7B:3F:20:B2:BB:B8:02:F5
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018E8B188A26FCA6A9ECA277C23DED435269
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/bNUP0ryFBSOCpSbKez8gsru4AvU.roa
Signing time: Fri 29 Mar 2024 16:43:45 +0000
ROA not before: Fri 29 Mar 2024 16:43:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48266
IP address blocks: 92.118.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:8b:18:8a:26:fc:a6:a9:ec:a2:77:c2:3d:ed:43:52:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Mar 29 16:43:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6cd50fd2bc85052382a526ca7b3f20b2bbb802f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:81:fe:c9:25:3b:5f:98:35:d3:4f:00:99:06:
57:a4:ef:ab:d4:8e:4d:b6:2e:56:20:c9:65:12:1c:
37:11:af:38:7a:e5:6b:d1:4b:cd:d2:3f:7b:d3:a9:
fa:66:96:cb:ff:96:3b:64:04:70:3a:b5:9f:5d:fa:
ef:b6:05:89:c2:5c:eb:c6:e0:53:73:d9:e9:6f:64:
85:23:3f:5b:0b:b5:b3:32:ac:ba:80:ef:82:76:50:
83:ea:51:06:6c:3f:4a:02:d9:e4:6a:85:0c:24:c3:
ad:34:2f:c1:f8:18:04:3e:75:85:56:65:bb:09:31:
03:2a:26:3c:91:f7:83:fc:00:df:73:a6:60:3d:b5:
10:3e:ba:38:81:1b:49:0b:aa:dd:7c:9c:c8:53:00:
ff:d1:ea:8c:df:95:df:ac:9b:16:5d:0a:24:2a:22:
75:d7:44:d2:51:42:6a:80:fd:f4:04:ef:9a:85:5f:
62:e7:12:36:49:b3:20:06:04:07:b3:c6:a6:21:4c:
a9:9d:41:be:e9:91:01:76:c8:bc:87:bb:99:9d:21:
5d:2e:fb:54:42:fd:52:91:45:fa:d7:8f:4d:7f:b2:
07:77:2e:da:72:71:73:96:2b:23:96:a8:a0:a7:96:
9d:f9:6d:97:aa:dd:66:25:17:75:fe:0b:68:b8:b7:
03:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D5:0F:D2:BC:85:05:23:82:A5:26:CA:7B:3F:20:B2:BB:B8:02:F5
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/bNUP0ryFBSOCpSbKez8gsru4AvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.204.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:ea:24:44:6f:ae:bc:98:10:00:d8:69:49:b8:34:9a:e8:df:
5a:63:29:b5:d3:4b:99:8e:e6:81:bf:42:90:2e:21:72:67:ac:
0b:9f:f5:2c:ad:e3:48:b7:e8:88:fa:86:53:c7:8d:d9:81:ee:
18:78:aa:cc:60:d5:1e:92:2d:40:c2:dd:45:12:0e:69:c0:95:
5a:c6:29:f1:72:cd:24:2b:20:0e:f4:85:a9:90:a4:2f:f4:85:
83:b2:49:69:c0:07:1e:2f:6e:56:b0:9c:ce:d5:45:34:fd:86:
db:fb:76:8b:b3:28:36:bd:7e:e7:39:b3:76:21:34:75:84:50:
f5:ca:55:da:e3:d4:b3:6d:15:90:6f:d4:2c:e0:c1:b0:6a:d0:
6f:48:61:69:7e:4e:32:c3:bd:ec:5d:c4:cc:ba:a7:f9:b3:07:
2e:ef:d2:03:6c:ef:07:f8:ae:1f:a1:6e:6b:70:07:41:4a:50:
d6:ba:6b:01:69:65:7d:7d:c0:8a:68:68:4d:d6:b8:26:b5:64:
01:f4:04:73:4b:4a:a0:96:44:4a:20:fe:df:6d:df:f2:50:57:
b6:36:5a:5b:45:6a:da:7c:14:9e:26:da:ce:cd:55:95:b2:1a:
b9:ab:74:b4:c1:55:e8:44:c2:1b:57:1e:21:29:c0:84:bd:21:
ed:15:34:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 14:00:35 2024 by rpki-client on console-fra.rpki-client.org