Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/Bcy18Ba_hRbzD2MpVA7L5i0PUsE.roa
File: Bcy18Ba_hRbzD2MpVA7L5i0PUsE.roa (raw, json)
Hash identifier: UrLlY8l499sA1dgoE3chC3K5aespAbVMX5IvLlt2nqY=
Subject key identifier: 05:CC:B5:F0:16:BF:85:16:F3:0F:63:29:54:0E:CB:E6:2D:0F:52:C1
Certificate issuer: /CN=9c83133a7e0593bb398eadb92758cbc92c9d65a5
Certificate serial: 018CCA29A549B41D8CB9D4FD71C4CAC86D6D
Authority key identifier: 9C:83:13:3A:7E:05:93:BB:39:8E:AD:B9:27:58:CB:C9:2C:9D:65:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nIMTOn4Fk7s5jq25J1jLySydZaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/Bcy18Ba_hRbzD2MpVA7L5i0PUsE.roa
Signing time: Tue 02 Jan 2024 12:32:55 +0000
ROA not before: Tue 02 Jan 2024 12:32:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51262
IP address blocks: 193.17.24.0/24 maxlen: 24
193.17.26.0/24 maxlen: 24
193.17.55.0/24 maxlen: 24
2a0f:7940::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nIMTOn4Fk7s5jq25J1jLySydZaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:a5:49:b4:1d:8c:b9:d4:fd:71:c4:ca:c8:6d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c83133a7e0593bb398eadb92758cbc92c9d65a5
Validity
Not Before: Jan 2 12:32:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05ccb5f016bf8516f30f6329540ecbe62d0f52c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a1:5a:0c:91:8c:04:40:23:96:1b:ae:4d:75:
bb:43:41:82:71:ce:1c:11:e0:8f:d3:36:1a:c8:d7:
20:86:c2:a9:9a:4c:1b:3c:26:c6:7c:7d:19:11:b2:
6d:aa:a8:81:08:3f:4b:74:72:3b:93:e4:aa:91:a1:
b1:8b:22:f3:f4:19:a6:ed:6a:eb:1c:6f:59:80:52:
4c:4d:df:12:91:c4:83:65:9a:64:4a:5d:1b:ac:b0:
3b:6a:66:86:f2:7e:1a:18:4d:d6:35:6a:8a:7c:a6:
28:5a:28:5b:a4:5f:21:79:e0:9b:53:fb:b0:7e:7b:
04:a3:3f:1f:9a:30:31:22:a8:44:8a:d6:13:8b:97:
92:6b:77:c5:1c:6c:af:9c:a4:4d:56:0a:76:e6:43:
4a:7d:6b:71:ea:b3:72:30:8c:21:6b:2a:0f:ba:7f:
3f:46:72:b0:a7:6d:fb:74:e4:7f:9d:61:6b:71:4b:
ef:10:ae:51:63:b7:1e:1b:6e:ea:91:95:67:c5:bc:
e0:78:ea:56:96:2f:4d:e0:ba:54:72:5d:b6:ed:46:
a5:e0:ff:aa:c4:e1:f7:14:7d:c5:38:e3:b4:94:ca:
28:44:22:0a:28:42:9d:0f:e3:87:c2:a5:ff:96:5e:
0f:ff:96:b9:8e:76:8e:89:79:c3:94:c5:ab:89:76:
a4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CC:B5:F0:16:BF:85:16:F3:0F:63:29:54:0E:CB:E6:2D:0F:52:C1
X509v3 Authority Key Identifier:
keyid:9C:83:13:3A:7E:05:93:BB:39:8E:AD:B9:27:58:CB:C9:2C:9D:65:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nIMTOn4Fk7s5jq25J1jLySydZaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/Bcy18Ba_hRbzD2MpVA7L5i0PUsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.24.0/24
193.17.26.0/24
193.17.55.0/24
IPv6:
2a0f:7940::/29
Signature Algorithm: sha256WithRSAEncryption
40:72:17:03:03:fc:8f:88:6c:d5:92:8b:1f:b7:7d:80:82:62:
ad:64:d0:54:11:6e:52:fc:59:f0:94:81:ee:38:e0:48:cc:dc:
5f:0a:e4:cc:82:46:7c:00:22:a0:11:0a:fe:c7:16:5e:e0:5d:
8a:9d:da:1f:34:92:5b:85:18:18:ae:04:67:62:ec:98:d0:30:
51:9a:2c:07:88:a6:c9:18:84:75:0c:c4:aa:6c:da:b2:7c:94:
8d:cc:f3:d1:d1:6c:fa:3c:68:b4:44:4d:80:65:c7:e2:46:c9:
8f:73:56:8e:89:82:c3:73:b5:e9:43:0c:1e:08:1e:6f:e5:ed:
e8:e2:fb:58:7d:4c:ac:03:c2:b1:54:6c:92:c3:92:33:f2:0d:
46:d8:dd:9f:c1:eb:29:11:74:c5:77:3f:76:e5:c7:65:0e:09:
d2:bd:34:2b:cf:2a:d6:ce:86:ad:6c:86:5f:08:c8:35:c4:c5:
a7:50:cf:0e:06:70:32:81:04:24:96:70:86:1f:a9:c7:78:fb:
62:da:c0:69:2d:3e:69:0c:5c:f2:0e:ae:2c:3b:db:64:6e:38:
d6:50:60:f9:96:f0:ee:83:fc:a0:27:0b:e8:d3:49:36:5c:16:
20:1c:88:91:bd:ac:c2:1c:44:d3:ab:34:1b:f4:96:59:70:5d:
43:46:f9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 12:08:30 2024 by rpki-client on console-fra.rpki-client.org