Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/BxDjiOadtLDrmZnFVdmQgsp9wIE.roa
File: BxDjiOadtLDrmZnFVdmQgsp9wIE.roa (raw, json)
Hash identifier: xX/FONsFhNpJg9q1Vx1AAVErB2t1bwAYzQdHYwURwOg=
Subject key identifier: 07:10:E3:88:E6:9D:B4:B0:EB:99:99:C5:55:D9:90:82:CA:7D:C0:81
Certificate issuer: /CN=196379769c57ca5b26a2c61fa5d9acc527bea789
Certificate serial: 0191A933B01ECCC1ED1CB530E84198D5B10A
Authority key identifier: 19:63:79:76:9C:57:CA:5B:26:A2:C6:1F:A5:D9:AC:C5:27:BE:A7:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/BxDjiOadtLDrmZnFVdmQgsp9wIE.roa
Signing time: Sat 31 Aug 2024 16:10:22 +0000
ROA not before: Sat 31 Aug 2024 16:10:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59898
IP address blocks: 185.167.4.0/24 maxlen: 24
185.167.5.0/24 maxlen: 24
185.167.6.0/24 maxlen: 24
185.167.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a9:33:b0:1e:cc:c1:ed:1c:b5:30:e8:41:98:d5:b1:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=196379769c57ca5b26a2c61fa5d9acc527bea789
Validity
Not Before: Aug 31 16:10:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0710e388e69db4b0eb9999c555d99082ca7dc081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:87:43:18:70:60:32:a8:bc:06:9c:9d:ef:13:
44:9b:84:e0:3b:bd:c1:f4:ef:90:e3:3d:d5:38:dd:
69:0c:00:c1:c4:d4:2b:ad:d1:6d:bd:fa:c8:df:7c:
6e:ce:58:44:8b:e0:d0:21:1e:dc:fd:22:16:91:5f:
27:85:4f:f1:0d:9f:aa:6f:0e:65:96:e8:7d:ec:e8:
98:be:d7:f3:ff:f4:b9:9c:60:d8:de:e0:ba:1f:56:
0f:1d:4c:ca:8d:b3:a5:58:b3:22:33:8d:e1:e3:a7:
46:81:e8:df:c2:d6:72:82:79:c2:ae:b8:8e:c3:e6:
11:2c:45:34:0e:1b:fe:7d:75:23:bc:18:a2:44:29:
1d:73:23:27:5c:76:45:fa:8e:41:1d:af:a8:72:94:
4b:4b:bb:60:ed:37:ec:b9:da:30:e6:2f:38:7f:68:
ca:12:0f:66:d1:e3:8f:b4:84:ed:d4:26:6b:4d:36:
0f:fe:2f:21:37:6d:5b:ce:4e:d9:6e:38:e0:94:de:
32:a9:5c:16:db:a3:e6:21:d2:18:8b:a5:35:1a:c7:
ae:12:2b:c2:04:24:48:5c:1e:5c:84:f7:6c:03:e9:
ff:3b:81:aa:79:95:82:2e:82:23:2a:01:61:e0:e1:
c9:e1:37:78:0e:04:c5:82:1e:64:74:1a:e6:d9:57:
b3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:10:E3:88:E6:9D:B4:B0:EB:99:99:C5:55:D9:90:82:CA:7D:C0:81
X509v3 Authority Key Identifier:
keyid:19:63:79:76:9C:57:CA:5B:26:A2:C6:1F:A5:D9:AC:C5:27:BE:A7:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/BxDjiOadtLDrmZnFVdmQgsp9wIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.4.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:de:f0:37:21:f9:c1:c9:ad:57:ee:5e:5d:f2:32:72:d9:5a:
73:cd:11:2d:c7:e9:2d:6a:e9:ec:46:e3:c3:af:68:02:e2:90:
ed:c6:91:d4:b5:a9:03:14:d5:ce:64:90:13:9b:4d:70:11:1b:
38:0a:bf:df:6b:f1:4e:55:da:d4:45:45:05:c2:b9:7f:e2:d1:
b8:15:e2:b4:b2:42:cd:4b:e1:1c:05:0e:2f:e1:d9:8c:ff:9c:
8b:16:d8:a7:eb:94:64:ea:d5:80:db:e6:d9:74:a3:e8:b5:dc:
da:eb:71:0a:47:61:01:ef:42:78:11:5e:78:9c:d8:51:3a:68:
ae:67:c8:89:3a:58:ab:a0:f0:20:5f:04:21:93:77:15:93:04:
26:d5:87:c5:ef:1d:4b:90:52:04:ba:c4:c2:b4:a6:ee:30:d1:
9d:1b:ee:1a:78:2a:aa:82:ce:b8:cd:2f:53:96:d2:cb:2b:e4:
4a:dd:cc:62:fb:b8:6e:2d:18:bb:08:27:86:61:eb:f7:dc:b7:
8c:e9:23:94:43:0d:17:47:f7:83:79:c3:ec:ce:6f:63:12:5b:
98:76:97:f3:9a:c0:38:2d:3c:84:5d:85:00:37:65:f9:c0:11:
8f:00:e8:df:f0:88:4a:fb:6d:22:da:57:cb:f7:22:98:e1:c3:
36:db:51:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 12:02:42 2024 by rpki-client on console-fra.rpki-client.org