Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/PoBATvjikXbPG7MY-iHyPnUJJKE.roa
File: PoBATvjikXbPG7MY-iHyPnUJJKE.roa (raw, json)
Hash identifier: 4lPGCeP+Q+1wZbo1SgRdmNURSojkiwr4EIJB4elhDrI=
Subject key identifier: 3E:80:40:4E:F8:E2:91:76:CF:1B:B3:18:FA:21:F2:3E:75:09:24:A1
Certificate issuer: /CN=bda1e55f744e1412bd753fd277b77408dcdf8cb4
Certificate serial: 018CC79528A37400D5B9DDE28A878409364D
Authority key identifier: BD:A1:E5:5F:74:4E:14:12:BD:75:3F:D2:77:B7:74:08:DC:DF:8C:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/PoBATvjikXbPG7MY-iHyPnUJJKE.roa
Signing time: Tue 02 Jan 2024 00:31:30 +0000
ROA not before: Tue 02 Jan 2024 00:31:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44377
IP address blocks: 45.143.216.0/22 maxlen: 24
45.137.248.0/22 maxlen: 24
92.242.224.0/19 maxlen: 24
193.19.220.0/22 maxlen: 24
185.121.200.0/22 maxlen: 24
2a13:ca80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:28:a3:74:00:d5:b9:dd:e2:8a:87:84:09:36:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bda1e55f744e1412bd753fd277b77408dcdf8cb4
Validity
Not Before: Jan 2 00:31:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e80404ef8e29176cf1bb318fa21f23e750924a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f9:0d:a1:30:6f:e8:8c:60:ee:03:93:38:96:
56:56:88:87:68:fe:cf:49:67:ce:f0:de:a4:cd:f9:
de:ad:0d:91:55:7c:86:d7:16:90:da:3f:f5:96:b3:
90:9c:21:c9:19:86:dd:69:fb:fd:de:8a:26:dc:53:
25:20:b0:ea:a7:83:13:ac:57:2d:5a:f1:37:80:7c:
9a:33:7a:d9:f7:60:71:17:2f:cd:ed:e9:73:25:f9:
5c:f5:c3:a8:35:d7:af:15:5c:3e:ab:31:8e:47:78:
da:0c:8c:c2:05:a6:3c:8b:1f:7c:cc:92:6e:07:1d:
ca:1a:96:9b:23:b2:25:2c:15:6e:e3:91:01:04:4a:
fb:16:9e:d5:3a:82:19:8b:43:a9:e1:0b:be:f6:cd:
a9:aa:d6:b2:1c:5b:7d:68:fc:f5:84:50:58:f3:06:
88:e6:2a:73:7d:f1:a3:77:5f:31:37:7b:e7:bf:ad:
2d:e5:52:75:ea:cd:85:c3:b6:75:6b:b9:7b:92:cf:
9e:c7:61:74:e2:c9:6f:76:a9:1e:4b:5f:91:2b:37:
94:0d:b9:58:38:94:ee:6c:73:cf:95:a3:3b:bc:3b:
7b:42:55:21:63:ee:54:3c:a0:a8:0d:65:18:da:17:
01:07:78:f7:aa:de:31:27:f9:8e:83:60:84:4b:74:
f8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:80:40:4E:F8:E2:91:76:CF:1B:B3:18:FA:21:F2:3E:75:09:24:A1
X509v3 Authority Key Identifier:
keyid:BD:A1:E5:5F:74:4E:14:12:BD:75:3F:D2:77:B7:74:08:DC:DF:8C:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/PoBATvjikXbPG7MY-iHyPnUJJKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.248.0/22
45.143.216.0/22
92.242.224.0/19
185.121.200.0/22
193.19.220.0/22
IPv6:
2a13:ca80::/29
Signature Algorithm: sha256WithRSAEncryption
50:9b:72:26:ef:fa:e6:2e:27:d6:79:97:ad:f9:81:c7:8a:d0:
76:61:28:52:1c:f9:5e:1f:8b:52:0c:e3:55:5e:cb:c7:b4:49:
5b:86:12:89:91:7c:97:09:bb:00:51:f9:cf:3f:66:7b:51:2c:
54:5d:6f:1d:bb:81:3f:9c:7e:fe:6b:27:00:c2:10:ab:5c:90:
73:04:7d:c8:c2:fd:61:0f:56:c8:48:88:df:61:b7:16:e7:fb:
b2:73:be:36:37:ca:a5:51:c5:27:03:b6:ee:55:10:34:7e:6d:
18:74:4e:05:9e:b3:2b:5e:1f:8c:d9:b5:e1:43:57:de:57:b0:
e8:a4:a6:a1:2f:e9:a9:6d:d1:fc:cc:14:fe:c1:c3:8b:06:f3:
06:1a:dd:9f:db:05:4f:01:de:c0:cb:bd:21:7e:e7:d3:63:6f:
a2:6d:14:71:b5:6d:ca:f0:ce:5c:05:38:01:4b:85:4d:8d:63:
a6:a2:c9:e4:d6:95:5e:45:d8:ea:ba:88:f5:98:02:4b:7b:a2:
8f:75:87:f9:68:09:98:7b:ac:a6:6f:6a:d4:11:6d:cb:f7:fc:
79:a8:7a:f1:74:2a:84:cc:d3:1b:d4:bb:54:a1:79:b3:0d:a6:
0e:b7:a6:9f:2d:4a:ef:1e:02:e5:02:29:ba:9a:29:ca:cc:b7:
b5:c8:6c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:24:38 2024 by rpki-client on console-fra.rpki-client.org