Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/BUNNUF5d_H_PDxVWEzOvPPiH5BE.roa
File: BUNNUF5d_H_PDxVWEzOvPPiH5BE.roa (raw, json)
Hash identifier: Jc62tYjjJmuso/n6L0Oa3X9duJpF2U13iSVcsuVo6AI=
Subject key identifier: 05:43:4D:50:5E:5D:FC:7F:CF:0F:15:56:13:33:AF:3C:F8:87:E4:11
Certificate issuer: /CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Certificate serial: 01916A0E39EB4F7712264929F81A79C6761A
Authority key identifier: 50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/BUNNUF5d_H_PDxVWEzOvPPiH5BE.roa
Signing time: Mon 19 Aug 2024 09:53:22 +0000
ROA not before: Mon 19 Aug 2024 09:53:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212269
IP address blocks: 194.37.92.0/24 maxlen: 24
194.37.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6a:0e:39:eb:4f:77:12:26:49:29:f8:1a:79:c6:76:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Validity
Not Before: Aug 19 09:53:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05434d505e5dfc7fcf0f15561333af3cf887e411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:09:5e:f1:01:5c:11:7f:2e:a2:e7:81:fb:78:
08:ea:8a:a9:c5:86:b6:1a:62:9c:87:99:ed:07:54:
0f:47:de:4d:d7:9b:7b:9e:32:fe:16:0e:6b:20:fa:
35:40:3a:74:78:d5:e2:9a:75:e2:ae:c7:5a:e5:a6:
a7:35:e1:f2:68:21:22:bd:18:0c:25:68:25:b0:e2:
ac:a6:6c:6d:b1:47:c1:06:98:68:58:b0:ea:bc:86:
d9:1a:bb:ef:91:44:55:dd:82:1a:a3:e9:b1:d5:ad:
c0:4d:d4:8b:06:17:6b:9a:1d:d8:d4:87:89:95:23:
a9:a3:5c:18:6b:63:b9:0d:6e:e6:57:4d:b7:bf:f8:
96:11:5c:c3:62:1d:c9:dc:ed:d8:db:17:90:56:4c:
ea:66:08:3d:31:64:04:bc:40:00:e4:62:36:43:f5:
89:47:d7:8e:c9:aa:5a:74:9a:29:5b:f6:55:31:c5:
3b:bb:f0:72:79:0d:ec:cc:f0:4e:10:e0:13:b9:2f:
dc:b2:11:d4:fd:31:05:0c:e6:77:08:08:25:18:55:
7d:33:55:80:e4:c0:22:ec:33:9b:04:38:a3:66:83:
57:8a:4e:cf:b3:13:6f:c2:99:ba:df:c4:2a:04:ec:
b8:35:b5:4a:8b:8c:95:f9:5c:56:4b:58:54:e7:d8:
4a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:43:4D:50:5E:5D:FC:7F:CF:0F:15:56:13:33:AF:3C:F8:87:E4:11
X509v3 Authority Key Identifier:
keyid:50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/BUNNUF5d_H_PDxVWEzOvPPiH5BE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.37.92.0/24
194.37.94.0/24
Signature Algorithm: sha256WithRSAEncryption
76:d4:77:56:52:bd:22:ce:5f:0a:9e:22:b2:5f:26:09:55:01:
9f:e9:84:fe:46:5e:7b:80:fa:93:4b:ea:7e:5f:01:41:5d:8a:
24:0c:60:b9:f9:09:78:2c:11:31:7d:3e:d3:8a:40:ba:59:f5:
b4:5e:b9:62:80:3b:12:bb:4d:37:87:e3:e5:42:8d:8a:90:2b:
c2:74:d9:e1:d6:8c:62:e7:8b:e2:b4:38:c0:b3:2b:dc:3f:15:
5d:7d:85:da:3b:c9:79:f5:75:b8:68:f3:4b:09:2a:0a:c4:30:
10:9d:01:af:77:be:b7:f5:6b:63:8c:62:20:5f:2a:ba:63:93:
16:91:c8:59:fd:2a:a7:c8:ca:8f:54:c7:84:5c:81:17:59:66:
e7:ac:54:af:4b:ab:52:7c:b1:c9:20:0b:04:71:ec:c7:75:03:
18:36:35:47:20:3d:10:82:ae:08:c3:0d:9c:84:71:25:53:3d:
91:38:cb:67:8a:e7:0c:03:b3:7c:95:34:75:e5:77:f2:40:f6:
0b:cf:55:7e:aa:30:d5:66:6b:b9:f9:c8:70:fa:04:6c:0c:fb:
8e:70:b4:5f:8c:fd:18:3a:6d:0e:e1:1b:43:5e:2c:74:a1:84:
65:65:d6:2c:0b:7b:21:27:d8:a7:2c:6e:68:60:28:c5:f9:c1:
46:d8:b5:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 14:41:32 2024 by rpki-client on console-ams.rpki-client.org