Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/BAlOgoIsmPUmc14hL_4idboOq7c.roa
File: BAlOgoIsmPUmc14hL_4idboOq7c.roa (raw, json)
Hash identifier: nwsRaPfmt/uqx2MQel9bLy5S7dr2nh8ZIEs9nh6vdro=
Subject key identifier: 04:09:4E:82:82:2C:98:F5:26:73:5E:21:2F:FE:22:75:BA:0E:AB:B7
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 018D44EFF03E8AC26581E21D9DEB0C053270
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/BAlOgoIsmPUmc14hL_4idboOq7c.roa
Signing time: Fri 26 Jan 2024 08:43:11 +0000
ROA not before: Fri 26 Jan 2024 08:43:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200017
IP address blocks: 81.29.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Jun 2024 17:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:44:ef:f0:3e:8a:c2:65:81:e2:1d:9d:eb:0c:05:32:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Jan 26 08:43:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=04094e82822c98f526735e212ffe2275ba0eabb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ec:1f:4e:27:ce:0d:91:30:89:c8:7a:47:e9:
fa:2d:5e:00:3f:36:91:a8:a5:e7:33:f0:79:db:0c:
06:94:29:b3:82:62:78:f3:7a:d0:0f:2d:08:5d:b5:
81:04:90:06:b3:53:5f:ff:3f:08:f4:f9:0b:a9:fc:
31:46:3a:e9:b3:d3:0f:ad:78:08:9f:70:e6:87:10:
fb:d4:a9:cc:34:ac:0c:47:60:36:2a:71:8e:c3:42:
24:6a:91:4b:4d:0d:6a:e5:97:c6:08:9c:ed:76:fa:
0d:21:28:ca:03:ee:f0:7e:1c:55:75:8e:b7:72:51:
c6:6a:d5:52:01:4b:dc:e3:84:4a:25:a8:73:a7:f8:
91:7a:15:4b:36:98:7c:bb:d1:fd:97:62:94:b9:9d:
68:85:a8:b6:eb:e6:24:73:a3:e3:2f:0c:3b:a4:86:
85:2f:2d:55:fe:81:57:7c:d4:a8:b4:de:8e:a3:27:
1a:14:89:20:47:dd:74:15:0a:fe:76:db:0f:62:da:
ec:9c:32:d7:a0:e2:69:b1:b2:db:f5:4f:a1:40:47:
2a:f3:ba:2e:db:11:e5:9d:33:93:72:e3:0f:66:c2:
c8:32:d3:bd:2d:5e:5d:e1:7e:df:f8:37:df:70:8d:
15:4e:d9:fb:16:17:ce:df:4c:3e:50:b4:79:c9:fc:
d4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:09:4E:82:82:2C:98:F5:26:73:5E:21:2F:FE:22:75:BA:0E:AB:B7
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/BAlOgoIsmPUmc14hL_4idboOq7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.29.146.0/24
Signature Algorithm: sha256WithRSAEncryption
70:1d:f3:82:5b:04:1f:97:45:af:a2:3d:85:06:1f:8d:9d:00:
a0:7c:c4:75:ab:10:25:ed:83:64:67:8c:e4:22:d1:34:df:e8:
7e:7a:02:a4:85:77:c7:75:87:dc:a2:e1:67:56:66:da:f1:65:
c0:27:a1:58:73:83:97:15:24:da:e4:5c:d3:a1:9b:75:ea:25:
00:61:28:58:59:79:a2:86:d0:71:bb:30:78:40:b7:09:27:7a:
fa:e1:15:63:6f:70:9c:f1:9e:b3:fc:a2:2b:c8:17:71:c8:ff:
49:58:3e:0c:22:9f:15:e7:ed:38:3c:d8:63:06:da:d7:23:1e:
82:63:42:21:9d:71:86:5e:d9:dc:71:c8:44:f9:4a:25:73:fc:
5c:51:e4:0d:99:d4:eb:ee:6b:77:2f:07:2b:62:26:66:34:4a:
b4:d1:59:f4:ed:47:88:1d:9a:92:d5:f2:e0:3d:90:7f:37:80:
76:4e:ef:0e:ed:ee:24:64:30:a3:2d:e4:da:bc:c2:f9:98:c1:
7a:1b:02:00:51:a1:d0:8f:a7:c4:b5:5c:26:21:60:e5:89:f2:
bb:36:e9:b2:14:4b:23:52:82:da:62:61:6b:47:2b:ff:0c:3c:
43:30:d0:56:48:da:96:eb:0a:57:f7:46:af:95:f2:7c:b0:b0:
b3:c1:8b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 22:05:21 2024 by rpki-client on console-ams.rpki-client.org