Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/BAbqLJAB-efX1fMKIs6WQGbsLck.roa
File: BAbqLJAB-efX1fMKIs6WQGbsLck.roa (raw, json)
Hash identifier: /dJGozjKqCspT2dyw5g/6AyVVKTp9Mvmgtm1g3aJSrQ=
Subject key identifier: 04:06:EA:2C:90:01:F9:E7:D7:D5:F3:0A:22:CE:96:40:66:EC:2D:C9
Certificate issuer: /CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
Certificate serial: 018CC2DAE459CC078BFA45E34EC824B652D8
Authority key identifier: C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/BAbqLJAB-efX1fMKIs6WQGbsLck.roa
Signing time: Mon 01 Jan 2024 02:29:34 +0000
ROA not before: Mon 01 Jan 2024 02:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207114
IP address blocks: 46.33.32.0/21 maxlen: 21
46.33.40.0/22 maxlen: 22
46.33.56.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jul 2024 07:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:e4:59:cc:07:8b:fa:45:e3:4e:c8:24:b6:52:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
Validity
Not Before: Jan 1 02:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0406ea2c9001f9e7d7d5f30a22ce964066ec2dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:77:5c:bb:31:2c:95:0f:2e:98:15:96:46:a2:
46:74:09:b0:7f:be:fc:90:95:2a:34:50:ca:c5:d2:
b6:c3:de:26:31:59:77:bf:77:0c:58:71:9e:86:72:
b0:41:b5:b8:5a:e6:4d:4d:9e:6d:2b:47:c1:fc:cc:
55:36:86:57:75:29:3b:d1:db:a6:63:d5:1d:d0:a4:
74:c1:1b:16:79:2b:8e:5c:88:3e:3c:2c:1f:3e:55:
7f:17:8b:56:45:e1:9a:81:83:9f:b3:1e:57:db:24:
f0:b1:99:e2:b1:b4:03:58:30:21:31:b3:c8:92:56:
23:44:97:b7:f3:11:50:f9:f5:3a:68:17:73:2a:29:
7c:82:5f:c6:f0:ca:4e:87:f4:6a:54:e2:69:57:56:
a1:58:85:e7:b1:6d:fd:94:d1:8d:62:55:53:41:ab:
59:d3:69:93:97:87:0f:8e:45:43:ae:d0:ac:51:7c:
e6:be:fc:f5:5b:fe:63:e1:8c:fc:5d:58:b9:33:2c:
27:15:d4:77:5c:bd:ad:9f:44:98:cf:9b:1d:06:b9:
f8:40:d3:50:45:74:53:69:7d:e1:1e:27:fc:58:cb:
b7:4b:78:ff:45:f5:3c:78:59:b8:7b:4a:1c:f5:3a:
c8:9e:34:7a:6c:f8:51:a6:91:f5:8a:c4:4c:db:b3:
dd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:06:EA:2C:90:01:F9:E7:D7:D5:F3:0A:22:CE:96:40:66:EC:2D:C9
X509v3 Authority Key Identifier:
keyid:C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/BAbqLJAB-efX1fMKIs6WQGbsLck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.33.32.0-46.33.43.255
46.33.56.0/22
Signature Algorithm: sha256WithRSAEncryption
84:9e:53:1f:1e:21:86:9f:17:38:d0:13:77:2f:cf:6c:5e:72:
1c:62:5c:aa:c5:82:8e:85:91:92:b7:54:5d:8f:b8:26:3f:d6:
57:c7:a5:de:92:de:1d:a4:73:0e:55:5e:71:92:fa:b1:8a:44:
8a:f7:9b:55:3d:5f:39:fa:4f:bf:26:7c:85:58:db:2c:61:e2:
63:a5:81:68:f0:29:db:10:e7:fa:37:bd:19:b4:9f:21:f4:4b:
4e:c3:01:24:5a:a4:98:29:3d:8b:14:88:82:93:48:49:53:00:
29:85:7c:bf:f3:b2:6a:3f:7e:3c:f8:f9:20:38:d6:42:0f:b8:
19:cf:8a:67:fc:ed:47:96:2c:9a:2e:8e:14:a3:a8:3d:65:cf:
bd:62:7a:3e:64:2d:5a:3c:e4:70:e4:a0:15:3f:16:4a:b6:e5:
bd:c6:d9:aa:e9:7a:a8:28:3a:84:cb:f1:bb:73:30:53:d1:af:
cd:5c:b3:9f:d2:45:36:0e:e3:c6:07:a9:e6:ae:66:c4:ab:d4:
b8:0e:69:ea:0b:84:96:04:ef:7e:2f:be:66:de:93:cb:24:21:
9a:db:04:cf:0c:44:5d:fa:9d:b2:04:d5:4f:9d:c3:69:84:55:
92:00:81:38:34:ec:09:2d:af:18:59:7d:82:fd:79:61:d5:17:
a6:40:16:f4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 4 12:12:27 2024 by rpki-client on console-fra.rpki-client.org