Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/BJY5nkQi2ZVPKrScZRYd1DXS7RU.roa
File: BJY5nkQi2ZVPKrScZRYd1DXS7RU.roa (raw, json)
Hash identifier: hCAEZs99ixNItN0roBuNkVK0PEwuKDgMtabn9qjWG0U=
Subject key identifier: 04:96:39:9E:44:22:D9:95:4F:2A:B4:9C:65:16:1D:D4:35:D2:ED:15
Certificate issuer: /CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731
Certificate serial: 018CC6B8FF886CAE2470268ABAA81D4033CD
Authority key identifier: 9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/BJY5nkQi2ZVPKrScZRYd1DXS7RU.roa
Signing time: Mon 01 Jan 2024 20:31:01 +0000
ROA not before: Mon 01 Jan 2024 20:31:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49490
IP address blocks: 194.145.64.0/19 maxlen: 25
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Jun 2024 22:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:ff:88:6c:ae:24:70:26:8a:ba:a8:1d:40:33:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731
Validity
Not Before: Jan 1 20:31:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0496399e4422d9954f2ab49c65161dd435d2ed15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b4:c5:c2:53:57:9f:0a:00:33:30:db:1c:43:
26:1e:8a:7e:89:b1:08:53:4c:4d:f0:8e:fc:43:48:
2f:f0:0c:32:53:c9:30:be:b2:5f:c2:bc:f1:b0:34:
7b:a4:2a:ff:7f:92:77:bf:41:fa:9a:1d:89:c9:11:
1a:1a:84:d5:2d:13:b1:48:50:12:ee:bc:9b:9a:a5:
2c:98:e6:c0:cf:b1:61:fa:c0:41:47:fe:dc:01:0b:
67:8f:00:8f:ca:5d:db:92:ef:6e:08:ca:38:54:58:
30:5b:a7:75:75:de:d6:7a:ac:da:28:3c:f7:bd:2a:
b6:45:6e:02:5b:f7:50:67:40:d0:e7:71:47:47:25:
14:b9:1f:12:9b:32:47:ca:b0:ea:86:d1:a6:50:5b:
b5:3e:57:77:06:73:a0:7a:84:ef:61:d4:b4:01:f5:
1f:14:2c:19:80:e7:9d:1e:83:f0:8c:57:58:f3:2a:
60:36:9a:b9:0d:f3:a5:a2:40:7c:e8:de:4e:a8:2b:
83:fa:a5:a0:8b:5e:cd:50:99:72:3d:af:52:78:0a:
5a:69:59:f5:e4:17:8d:1d:c9:39:a9:25:84:11:b6:
c4:1e:eb:02:6d:f9:e2:5f:67:d1:ad:1a:f3:8d:49:
f1:2e:65:ca:61:6e:cc:76:41:9a:6d:ff:0d:5a:38:
1f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:96:39:9E:44:22:D9:95:4F:2A:B4:9C:65:16:1D:D4:35:D2:ED:15
X509v3 Authority Key Identifier:
keyid:9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/BJY5nkQi2ZVPKrScZRYd1DXS7RU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.145.64.0/19
Signature Algorithm: sha256WithRSAEncryption
9f:06:7b:93:ae:5d:37:35:7d:dd:91:63:6c:d0:14:47:46:36:
11:a4:eb:3f:8d:c9:96:af:d5:14:f8:2d:ee:b8:b6:80:21:ce:
3a:3a:b4:df:af:c1:4f:cb:33:50:1d:49:7a:59:a0:b8:fe:d6:
c4:0e:a6:64:0e:20:ef:7b:aa:9f:bd:5d:d3:87:ca:81:10:6c:
2d:b0:c7:ea:64:5c:24:2a:da:22:4c:e4:71:ce:59:bb:75:7e:
1b:87:71:85:c5:ab:32:c6:f8:51:cc:2a:71:8a:38:7a:6c:be:
92:f0:4e:6b:ac:db:5e:07:4e:3f:59:b0:f2:76:05:64:cd:f4:
59:21:89:af:5f:bf:bd:e8:6a:e9:2b:a2:ab:44:cb:09:2e:56:
ca:85:d5:44:37:45:92:c6:79:36:45:fc:b4:98:58:e4:5b:f1:
86:b3:53:67:a9:9e:a0:d1:32:38:8c:c2:b8:7b:65:e0:70:9a:
03:78:77:01:38:64:25:c6:18:1e:c5:8a:ed:67:ff:70:7b:18:
4b:3c:7e:e6:a5:b0:2a:9e:ac:60:e5:d4:c7:c6:0b:da:be:f6:
1b:70:21:aa:bb:cd:49:81:93:ab:14:f8:fc:98:62:22:c8:ac:
87:35:30:7a:a6:13:ca:0b:61:3e:1e:2b:27:1c:c7:42:b6:81:
73:9e:8f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 07:19:37 2024 by rpki-client on console-ams.rpki-client.org