Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/BXEf6iGzGfC6qct9V43YCBj2z0Q.roa
File: BXEf6iGzGfC6qct9V43YCBj2z0Q.roa (raw, json)
Hash identifier: 9XEuhrm3ff1GelgTXcTScSn238Bv5wu/35j2ONgngIQ=
Subject key identifier: 05:71:1F:EA:21:B3:19:F0:BA:A9:CB:7D:57:8D:D8:08:18:F6:CF:44
Certificate issuer: /CN=8db34774b01979284fd9e754fea68fa3c61783d0
Certificate serial: 018CC8DF634C2BE482A961885F45BFF90BDD
Authority key identifier: 8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/BXEf6iGzGfC6qct9V43YCBj2z0Q.roa
Signing time: Tue 02 Jan 2024 06:32:12 +0000
ROA not before: Tue 02 Jan 2024 06:32:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207508
IP address blocks: 176.98.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:63:4c:2b:e4:82:a9:61:88:5f:45:bf:f9:0b:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db34774b01979284fd9e754fea68fa3c61783d0
Validity
Not Before: Jan 2 06:32:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05711fea21b319f0baa9cb7d578dd80818f6cf44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b2:3b:54:65:d3:5e:96:f6:7a:ca:0c:d0:fe:
2b:05:ad:d9:65:97:3a:c8:bd:70:c0:65:c4:33:59:
82:3c:f9:29:34:cc:bc:e9:c3:1f:46:10:64:88:17:
8a:5f:b6:13:77:39:8d:b6:9a:5b:fe:48:55:c2:51:
25:d0:06:75:31:d4:60:8e:1d:e4:27:b7:a7:87:bb:
a3:ed:0b:46:42:33:3a:72:8f:39:e8:e6:47:6a:7b:
e5:bc:82:b5:08:64:ca:2a:b7:58:b9:a4:3c:72:78:
a0:c7:46:18:75:e2:78:79:70:b4:b4:a7:c9:7f:61:
65:0e:70:6d:e5:05:d4:af:bc:2a:b9:83:97:62:68:
0f:64:9f:95:bb:f4:11:ad:bf:35:ae:0f:b0:d4:52:
3a:57:83:bd:77:cb:1c:0d:3a:b5:db:c0:86:09:20:
5b:0e:75:60:4b:a7:6c:77:11:ce:ee:61:38:8e:7b:
d6:cd:4c:00:8c:28:e0:7c:0c:cf:18:c4:25:4f:38:
0a:af:64:70:89:18:2f:1b:e4:c8:90:58:ea:51:99:
c2:9c:17:af:ed:fe:07:c4:c5:9e:cf:83:65:e7:2f:
b8:cf:29:61:2f:90:6a:08:1b:07:26:de:57:2c:59:
61:4a:bd:da:3d:cd:f8:13:38:de:94:49:f3:af:31:
77:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:71:1F:EA:21:B3:19:F0:BA:A9:CB:7D:57:8D:D8:08:18:F6:CF:44
X509v3 Authority Key Identifier:
keyid:8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/BXEf6iGzGfC6qct9V43YCBj2z0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.98.40.0/24
Signature Algorithm: sha256WithRSAEncryption
57:df:8e:f9:68:5b:6f:0c:38:19:0f:53:b4:1f:ad:0a:3d:fa:
1f:e2:4d:9b:d0:15:9a:e2:63:1a:c7:78:e7:fa:3a:47:30:ae:
19:cc:19:cc:99:71:e8:69:30:ba:e1:9f:c7:08:67:3c:b6:1b:
57:7b:bf:49:4c:b9:f2:e2:ba:9b:73:e5:fc:f0:65:60:7b:86:
1c:b4:71:8e:dc:64:11:b1:86:da:bb:ea:d7:43:cb:85:10:19:
7d:99:d9:c3:d1:f1:ef:ba:03:92:f3:e4:7f:1b:07:35:d8:0a:
e6:15:ac:97:3b:23:6e:cd:6a:bf:00:9d:f7:ba:7e:3e:c0:ca:
44:cc:7a:d4:b5:a8:78:f1:c1:3c:6f:04:1c:ef:61:de:01:ec:
24:2d:5b:95:4f:1d:be:62:48:28:32:6e:86:18:fb:fa:37:83:
f6:49:ae:72:ef:39:00:5a:d3:1a:ad:aa:f9:42:49:ec:86:49:
53:a5:5f:bf:19:41:5c:21:dc:78:77:ed:38:e9:31:07:a9:b9:
f2:7d:09:b2:f7:93:0c:d9:cd:9a:67:09:9a:33:ed:52:d4:c3:
0e:04:c9:1a:b5:65:c7:86:83:43:d6:ec:cd:86:09:9b:b0:29:
ca:9a:f6:de:5b:e9:4e:4f:7d:16:14:41:79:5d:5c:a9:d3:8e:
83:97:cd:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:34:15 2024 by rpki-client on console-ams.rpki-client.org