Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/becoYMrgopCA0iBH5t8ZYNUkdL8.roa
File: becoYMrgopCA0iBH5t8ZYNUkdL8.roa (raw, json)
Hash identifier: FXsYYzHokZmr0SozalIs92JeSmgUKwQt0OFSxaUZcKg=
Subject key identifier: 6D:E7:28:60:CA:E0:A2:90:80:D2:20:47:E6:DF:19:60:D5:24:74:BF
Certificate issuer: /CN=bf7a0258a521e99d213fb30e79667e584e37c7db
Certificate serial: 018E3DA8D716DFAAADE6BD17B3BA13AFB3CA
Authority key identifier: BF:7A:02:58:A5:21:E9:9D:21:3F:B3:0E:79:66:7E:58:4E:37:C7:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/becoYMrgopCA0iBH5t8ZYNUkdL8.roa
Signing time: Thu 14 Mar 2024 15:50:59 +0000
ROA not before: Thu 14 Mar 2024 15:50:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1299
IP address blocks: 194.172.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 11:48:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3d:a8:d7:16:df:aa:ad:e6:bd:17:b3:ba:13:af:b3:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf7a0258a521e99d213fb30e79667e584e37c7db
Validity
Not Before: Mar 14 15:50:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6de72860cae0a29080d22047e6df1960d52474bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:0d:87:ae:65:00:12:9c:1d:d5:f4:d1:5a:c4:
e5:d1:08:fa:64:58:b0:c7:91:c4:53:0c:a4:c0:a5:
19:76:ab:3c:a2:88:51:cf:1d:95:b1:d1:ec:e6:f9:
41:dd:7e:96:2b:52:03:cb:1d:1e:c1:30:4c:4b:6b:
db:79:88:29:ae:8b:be:87:9e:56:61:fe:45:c2:45:
ff:1e:4d:05:08:15:23:e9:f5:b0:5c:7a:08:97:63:
7a:50:1d:fc:d9:f0:cf:05:d8:61:5c:d7:99:09:f9:
31:6a:e8:ca:ca:35:04:e7:52:f0:d9:2e:7a:cf:b0:
f0:13:9c:76:5c:2f:d0:bb:d1:fe:40:48:19:9c:ce:
7e:55:75:f1:37:05:7b:fd:33:4b:66:7b:ee:6c:a0:
90:87:1a:ae:3b:9c:75:91:f1:07:86:36:a7:0b:a2:
9f:95:89:54:d9:29:66:b4:54:0d:e6:67:93:07:70:
ab:ff:f9:43:13:63:c9:a5:7c:ba:4d:5e:fc:46:86:
c7:0c:81:96:be:43:1f:19:96:18:b7:97:fd:7c:52:
8f:ab:ce:2e:04:23:aa:96:55:9a:4b:c7:78:5c:a1:
87:5f:67:57:d5:25:24:3b:ec:f4:ce:eb:8f:19:bb:
21:19:88:42:1d:8d:84:fe:9e:af:f3:a8:39:46:dd:
70:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E7:28:60:CA:E0:A2:90:80:D2:20:47:E6:DF:19:60:D5:24:74:BF
X509v3 Authority Key Identifier:
keyid:BF:7A:02:58:A5:21:E9:9D:21:3F:B3:0E:79:66:7E:58:4E:37:C7:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/becoYMrgopCA0iBH5t8ZYNUkdL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.172.58.0/24
Signature Algorithm: sha256WithRSAEncryption
36:ba:e4:c3:4b:45:f9:a5:39:08:22:08:82:4a:29:ca:d5:64:
60:ef:8a:da:7c:f9:01:71:ed:8f:4f:25:27:af:54:c9:a1:45:
9d:5b:00:39:78:4e:7f:1f:ed:d9:42:b3:55:26:d6:92:98:63:
c2:62:ca:8c:f8:26:4a:17:f7:7b:7f:c4:55:9d:a6:5f:0c:d3:
a5:01:c7:92:af:66:d8:ac:61:bd:b2:3c:05:4d:0c:f6:74:c0:
6a:56:23:b9:9a:a6:cd:8d:66:d4:77:01:3e:2c:7e:80:d2:a3:
f9:5b:00:0d:ef:17:13:ea:26:df:3f:72:f0:97:ea:ee:8b:0a:
0b:43:3c:1b:68:86:5f:ab:e4:16:17:57:e6:ef:62:b7:ec:53:
7f:8f:d1:3a:68:64:f3:f3:d1:0b:7e:2f:35:ec:36:de:f6:ec:
d6:fa:e6:02:f3:b8:ef:66:2e:34:ed:00:79:51:41:87:1d:45:
e0:3d:34:a2:be:f2:9f:97:2e:44:f9:bb:c6:75:2b:78:44:29:
93:5c:8d:89:d7:f5:01:71:54:58:53:74:82:57:19:5e:63:7e:
17:9a:0a:b8:cb:db:d5:86:f4:51:c7:20:24:ea:18:29:e9:2c:
9b:eb:d8:e6:df:d5:84:1b:d6:57:83:c2:a6:6c:d7:02:73:37:
e8:f8:f6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 14:27:35 2024 by rpki-client on console-ams.rpki-client.org