Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/BzkgNkIbAoNy9sdCkfVw99SUcX4.roa
File: BzkgNkIbAoNy9sdCkfVw99SUcX4.roa (raw, json)
Hash identifier: DubkSosZvw7inQ7ya5yo0724fzzjAhSxZiG3Q5zZX7I=
Subject key identifier: 07:39:20:36:42:1B:02:83:72:F6:C7:42:91:F5:70:F7:D4:94:71:7E
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 019112482923B5477891A75FD88C39F573BE
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/BzkgNkIbAoNy9sdCkfVw99SUcX4.roa
Signing time: Fri 02 Aug 2024 08:50:04 +0000
ROA not before: Fri 02 Aug 2024 08:50:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133296
IP address blocks: 50.20.232.0/21 maxlen: 24
62.112.4.0/22 maxlen: 24
194.88.120.0/21 maxlen: 24
212.69.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 09:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:12:48:29:23:b5:47:78:91:a7:5f:d8:8c:39:f5:73:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Aug 2 08:50:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07392036421b028372f6c74291f570f7d494717e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:64:36:e1:eb:d5:3a:bd:37:7c:c0:aa:e7:73:
47:0b:bd:99:c6:df:ad:57:7d:0c:5d:b9:05:67:1c:
93:40:21:94:7d:08:f0:28:04:35:21:f0:1e:35:02:
fb:ae:b3:15:62:53:01:01:e0:dd:0c:16:ba:0f:ce:
49:b4:98:a3:3e:60:35:45:c3:a2:42:8e:66:71:1a:
00:83:ba:be:c0:57:3a:55:e1:1c:40:6d:b5:4a:8f:
45:7b:72:16:0f:e3:76:a0:5e:f6:98:25:f7:36:71:
b1:6b:ec:0b:f3:7e:24:7b:f1:cf:96:de:ed:c9:20:
56:dc:c1:80:a8:e4:00:80:30:bf:44:21:28:06:3d:
45:5a:18:c0:e9:bc:8d:30:40:af:dd:4e:67:28:04:
db:57:1d:ce:85:90:58:f4:e1:a2:c9:86:36:7f:e5:
b8:06:b4:11:27:14:af:80:bc:cd:d5:e2:f2:c2:f5:
c4:4f:08:c1:c4:86:ec:66:82:cc:d9:0b:2e:7e:29:
11:90:eb:3a:19:0c:c2:17:fe:db:95:bb:29:5e:fa:
d5:13:0f:58:75:1f:f2:18:f9:ad:e6:48:71:52:cc:
c8:51:54:b4:86:a2:bb:91:b7:77:97:cf:ae:cb:56:
57:af:f9:04:9a:2d:04:2c:df:97:c7:8a:6e:a3:be:
13:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:39:20:36:42:1B:02:83:72:F6:C7:42:91:F5:70:F7:D4:94:71:7E
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/BzkgNkIbAoNy9sdCkfVw99SUcX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.20.232.0/21
62.112.4.0/22
194.88.120.0/21
212.69.92.0/22
Signature Algorithm: sha256WithRSAEncryption
10:5d:82:d2:f8:24:46:30:8f:9d:8b:c8:fd:4a:ce:fd:84:51:
19:7d:3b:de:e5:ab:c2:b2:60:92:05:e4:40:24:9a:51:be:7a:
cf:05:07:ad:3f:26:a0:2a:f7:1a:3e:1c:19:94:09:d4:4a:f5:
90:9a:6a:4e:72:e4:a9:42:b9:e1:20:93:1f:d6:15:ec:cc:d3:
70:ec:56:59:05:3a:2d:b8:9f:ae:e3:a4:a0:eb:f1:11:ea:dd:
8c:fb:84:83:80:d3:4c:46:5a:e6:03:69:a0:be:3b:eb:e9:16:
5d:ce:04:83:e3:3b:f2:69:8a:a3:e6:22:8c:a7:38:51:d6:8a:
3d:f3:4b:87:e3:c7:21:6d:0d:31:86:71:1c:29:d2:11:89:a7:
63:a7:79:88:2b:f7:a4:7e:81:fb:f0:54:74:38:39:d3:b1:0c:
35:ae:97:50:47:ef:07:81:a6:be:e8:05:32:65:cd:86:68:8e:
b6:d7:d2:18:e7:b5:c8:90:ed:af:f7:c5:2b:68:72:ea:c2:50:
1a:e5:86:85:93:be:2d:41:a9:ec:84:ee:db:74:7c:c5:a7:da:
d2:ca:a6:47:6d:c2:98:01:eb:1f:bf:20:2c:a2:20:23:d1:4f:
3f:f5:eb:61:63:00:a0:af:14:d7:10:f2:dc:a3:02:b7:52:4e:
06:d8:f1:1a
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZESSCkjtUd4kadf2Iw59XO+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0OGEyN2Y0NGIxMDQwNGM1MmY2ZmZjNGUwOGRjODJiZjhi
NWRlZTQwHhcNMjQwODAyMDg1MDA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzM5MjAzNjQyMWIwMjgzNzJmNmM3NDI5MWY1NzBmN2Q0OTQ3MTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2Q24evVOr03fMCq53NHC72Zxt+t
V30MXbkFZxyTQCGUfQjwKAQ1IfAeNQL7rrMVYlMBAeDdDBa6D85JtJijPmA1RcOi
Qo5mcRoAg7q+wFc6VeEcQG21So9Fe3IWD+N2oF72mCX3NnGxa+wL834ke/HPlt7t
ySBW3MGAqOQAgDC/RCEoBj1FWhjA6byNMECv3U5nKATbVx3OhZBY9OGiyYY2f+W4
BrQRJxSvgLzN1eLywvXETwjBxIbsZoLM2QsufikRkOs6GQzCF/7blbspXvrVEw9Y
dR/yGPmt5khxUszIUVS0hqK7kbd3l8+uy1ZXr/kEmi0ELN+Xx4puo74TLQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFAc5IDZCGwKDcvbHQpH1cPfUlHF+MB8GA1UdIwQY
MBaAFNSKJ/RLEEBMUvb/xOCNyCv4td7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYt
NTlmNTk4NGI2NGVhLzEvQnprZ05rSWJBb055OXNkQ2tmVnc5OVNVY1g0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYtNTlmNTk4NGI2NGVh
LzEvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDMhToAwQC
PnAEAwQDwlh4AwQC1EVcMA0GCSqGSIb3DQEBCwUAA4IBAQAQXYLS+CRGMI+di8j9
Ss79hFEZfTve5avCsmCSBeRAJJpRvnrPBQetPyagKvcaPhwZlAnUSvWQmmpOcuSp
QrnhIJMf1hXszNNw7FZZBTotuJ+u46Sg6/ER6t2M+4SDgNNMRlrmA2mgvjvr6RZd
zgSD4zvyaYqj5iKMpzhR1oo980uH48chbQ0xhnEcKdIRiadjp3mIK/ekfoH78FR0
ODnTsQw1rpdQR+8Hgaa+6AUyZc2GaI6219IY57XIkO2v98UraHLqwlAa5YaFk74t
QanshO7bdHzFp9rSyqZHbcKYAesfvyAsoiAj0U8/9ethYwCgrxTXEPLcowK3Uk4G
2PEa
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:01:27 2024 by rpki-client on console-fra.rpki-client.org