Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/BZiYmazG-7uf4hT0tX0Du0UU_n0.roa
File: BZiYmazG-7uf4hT0tX0Du0UU_n0.roa (raw, json)
Hash identifier: 2BzXc/zCY+iTvELhj+xgUAgJ4qqfjay5l2Pf2xqYrkQ=
Subject key identifier: 05:98:98:99:AC:C6:FB:BB:9F:E2:14:F4:B5:7D:03:BB:45:14:FE:7D
Certificate issuer: /CN=07446c7f63421d73c28f8ca77fd2d4a357210015
Certificate serial: 018CC94C029E82B5405C40604A396255F158
Authority key identifier: 07:44:6C:7F:63:42:1D:73:C2:8F:8C:A7:7F:D2:D4:A3:57:21:00:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B0Rsf2NCHXPCj4ynf9LUo1chABU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/BZiYmazG-7uf4hT0tX0Du0UU_n0.roa
Signing time: Tue 02 Jan 2024 08:30:50 +0000
ROA not before: Tue 02 Jan 2024 08:30:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29596
IP address blocks: 87.239.88.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/B0Rsf2NCHXPCj4ynf9LUo1chABU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/B0Rsf2NCHXPCj4ynf9LUo1chABU.mft
rsync://rpki.ripe.net/repository/DEFAULT/B0Rsf2NCHXPCj4ynf9LUo1chABU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:02:9e:82:b5:40:5c:40:60:4a:39:62:55:f1:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07446c7f63421d73c28f8ca77fd2d4a357210015
Validity
Not Before: Jan 2 08:30:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05989899acc6fbbb9fe214f4b57d03bb4514fe7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:28:b3:b2:47:ed:70:6d:52:c1:7a:53:e5:e5:
ba:65:44:03:b7:bc:5f:d8:19:83:24:1d:7d:73:2c:
88:a9:41:6c:d6:32:4c:e9:a0:d1:49:3a:b8:a4:41:
67:43:25:f9:a4:5e:02:46:7e:5b:79:7b:ff:63:0f:
77:bc:9a:d6:86:1a:03:e9:9a:b2:d7:77:00:c1:7a:
a4:b6:14:30:05:3f:43:f4:74:1d:6d:88:7f:d2:84:
c9:3d:56:18:46:6f:8f:22:e6:e8:b2:f5:98:9c:62:
7d:cb:78:da:d1:14:9b:65:16:6d:89:1d:46:ec:40:
52:e1:48:45:2f:7a:fb:fc:0c:cf:3d:76:b7:3f:a3:
a2:c3:6f:e7:07:85:29:40:44:34:ef:06:46:61:27:
e9:11:49:ac:1b:84:cf:00:8b:0b:35:ed:2e:22:5b:
52:1a:73:0a:f8:0c:a9:ff:e3:02:58:5c:3f:59:3f:
43:8f:b9:88:b3:26:9f:35:1d:07:15:2a:74:f4:2c:
f9:aa:78:e0:53:f8:81:41:74:22:0b:5e:12:f9:22:
6a:2f:5e:97:04:48:fb:85:f1:56:6b:58:e0:76:fc:
2d:34:ed:15:b7:61:a7:0d:74:cb:9c:63:5f:3f:4a:
81:cb:4f:4b:12:1c:8f:c9:77:cd:33:46:05:51:6d:
d0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:98:98:99:AC:C6:FB:BB:9F:E2:14:F4:B5:7D:03:BB:45:14:FE:7D
X509v3 Authority Key Identifier:
keyid:07:44:6C:7F:63:42:1D:73:C2:8F:8C:A7:7F:D2:D4:A3:57:21:00:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0Rsf2NCHXPCj4ynf9LUo1chABU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/BZiYmazG-7uf4hT0tX0Du0UU_n0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/B0Rsf2NCHXPCj4ynf9LUo1chABU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.239.88.0/21
Signature Algorithm: sha256WithRSAEncryption
42:d8:72:41:38:b0:b7:91:9b:33:fd:32:ca:90:d3:30:cb:27:
07:8b:59:4e:e6:b1:df:0e:c5:2a:3d:f8:69:b9:5c:bb:18:a3:
33:13:0e:a2:e8:f7:7c:de:d3:ad:e9:50:2f:59:82:9e:bd:1b:
86:20:72:62:c1:c9:dc:80:cc:f4:68:8d:03:4a:08:af:a4:8f:
91:61:cb:b2:82:9c:e6:70:47:c6:e7:3e:5b:3d:f6:35:1d:9a:
61:d1:47:37:b3:9c:5b:ec:68:7b:0e:7e:9f:f7:01:ed:2d:13:
4e:ca:e4:07:6d:03:0d:47:e3:72:1b:40:7d:e5:e6:a1:bd:d2:
df:29:5d:1c:92:81:6f:4c:5b:8e:a4:49:94:70:62:e4:23:89:
d9:97:b6:5e:0c:8e:12:83:94:b6:16:40:4e:93:24:77:79:2e:
b6:93:52:b3:07:96:3e:a3:e2:6f:5d:b4:6b:8d:de:51:7a:97:
ef:01:54:58:04:6b:d8:c2:6b:50:d9:7d:e8:90:20:c0:c4:5c:
44:ad:a0:9c:6e:8e:16:11:44:be:34:80:9f:08:07:13:e7:16:
bb:70:37:83:0f:a2:1e:6e:6f:4d:36:dc:22:f0:bf:f4:ca:ee:
74:75:52:8f:1f:94:45:66:e8:cb:67:6d:45:fd:c9:b4:4d:2e:
1b:0a:f6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 19:00:56 2024 by rpki-client on console-fra.rpki-client.org