Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/BTg-Poo6hIriwL5lkQqLZy9C7f4.roa
File: BTg-Poo6hIriwL5lkQqLZy9C7f4.roa (raw, json)
Hash identifier: 7GvimEIcgaNkIFBH+5zGxfjvf3Jo309kpltw+JD90M0=
Subject key identifier: 05:38:3E:3E:8A:3A:84:8A:E2:C0:BE:65:91:0A:8B:67:2F:42:ED:FE
Certificate issuer: /CN=e6c9d48a18c3c0d2e4e63a7b83885a7967755826
Certificate serial: 018CC86F8D38E0D4F442AA757EC51A795A69
Authority key identifier: E6:C9:D4:8A:18:C3:C0:D2:E4:E6:3A:7B:83:88:5A:79:67:75:58:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/BTg-Poo6hIriwL5lkQqLZy9C7f4.roa
Signing time: Tue 02 Jan 2024 04:30:02 +0000
ROA not before: Tue 02 Jan 2024 04:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25180
IP address blocks: 5.148.0.0/17 maxlen: 17
149.63.0.0/16 maxlen: 16
5.148.128.0/19 maxlen: 19
83.244.128.0/17 maxlen: 17
176.46.160.0/19 maxlen: 19
167.98.0.0/16 maxlen: 16
31.221.0.0/17 maxlen: 17
62.244.160.0/19 maxlen: 19
109.231.192.0/18 maxlen: 18
5.148.104.0/24 maxlen: 24
2a00:1d40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 16:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:8d:38:e0:d4:f4:42:aa:75:7e:c5:1a:79:5a:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6c9d48a18c3c0d2e4e63a7b83885a7967755826
Validity
Not Before: Jan 2 04:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05383e3e8a3a848ae2c0be65910a8b672f42edfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:70:ba:ce:f8:9e:50:0d:93:ec:ba:f5:a0:19:
92:c1:c7:b1:d1:fd:a9:42:21:18:8e:8e:8b:9b:ba:
1e:68:28:c2:13:60:da:41:4a:bc:d6:19:a8:32:42:
9c:fd:00:1b:09:50:33:96:9e:49:0f:8d:6b:8e:29:
c5:32:95:0e:ab:44:0b:cc:ac:72:a9:50:1d:46:17:
3f:6c:fb:f2:ce:47:84:5a:61:61:5d:73:be:cf:1e:
56:9f:0f:ba:c8:58:da:17:fb:55:5b:6d:29:4d:dd:
20:36:dc:a3:af:80:77:2d:16:60:1f:c3:e3:6b:b3:
eb:7a:d2:e2:81:92:36:03:2a:7a:c0:97:57:9e:89:
8f:6b:e0:54:8e:18:37:aa:80:60:ce:9d:48:b6:96:
fa:9e:0b:5a:dc:23:48:2b:ee:8d:68:b3:98:31:c9:
34:31:c6:f6:b7:3f:54:6c:fd:be:8d:cf:3f:2a:d1:
e3:79:2f:f2:43:86:a0:99:10:1b:f0:68:f2:8b:42:
07:cc:8a:99:18:3b:f0:2f:15:17:9c:82:e9:6f:f3:
32:2e:f6:b6:86:3c:3f:75:2f:e1:fd:0b:fb:61:b5:
55:af:90:22:a5:83:46:f7:a2:d6:fd:ef:8a:8d:13:
b8:03:a6:63:60:df:3b:b8:e6:42:51:f9:6a:d7:e4:
50:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:38:3E:3E:8A:3A:84:8A:E2:C0:BE:65:91:0A:8B:67:2F:42:ED:FE
X509v3 Authority Key Identifier:
keyid:E6:C9:D4:8A:18:C3:C0:D2:E4:E6:3A:7B:83:88:5A:79:67:75:58:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/BTg-Poo6hIriwL5lkQqLZy9C7f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.148.0.0-5.148.159.255
31.221.0.0/17
62.244.160.0/19
83.244.128.0/17
109.231.192.0/18
149.63.0.0/16
167.98.0.0/16
176.46.160.0/19
IPv6:
2a00:1d40::/32
Signature Algorithm: sha256WithRSAEncryption
b5:09:cd:26:ba:ad:2c:b4:20:bc:eb:8e:4a:91:54:49:33:18:
c6:2a:ae:78:b8:a3:f9:e0:4c:49:6e:08:23:15:ee:e0:9f:71:
10:59:47:4a:e9:5c:98:7f:1f:bc:e7:bf:78:2c:12:68:93:6f:
22:88:2f:56:a6:26:e0:61:73:36:30:6b:ce:b2:ea:d1:d9:f4:
34:a6:f7:9c:02:80:26:5d:6a:5d:6e:e4:b6:49:1d:72:29:45:
26:fd:f7:c6:d7:33:5e:70:c2:aa:6c:4f:74:eb:c8:1b:76:8d:
b0:20:6d:b2:5f:65:da:e4:d9:76:82:b2:47:eb:63:e7:6f:e9:
1e:30:8d:09:3e:59:84:cb:63:f2:9c:67:bf:11:c9:72:d3:3a:
3a:f1:71:4c:8a:31:69:22:af:25:6f:c4:3a:92:74:ff:6a:7c:
98:bd:a5:b4:22:33:35:bc:91:35:d6:b4:c0:49:14:41:79:99:
fa:d5:77:d6:7e:b3:15:b3:4f:a8:0e:5c:8c:15:c1:8a:84:5c:
36:8b:2b:e8:71:6b:41:21:7b:bf:e1:70:3c:3f:02:98:75:bf:
fd:5b:48:71:41:20:c7:3e:9f:1d:bb:8f:76:13:51:2e:d5:c0:
6f:d9:d7:93:e7:9d:f2:f9:e8:80:a9:e0:38:bd:e4:86:ae:6f:
1a:42:8f:27
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 23 00:52:37 2024 by rpki-client on console-fra.rpki-client.org