Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/BxVrC_IhEgeB2A4Aclb5A7QJypg.roa
File: BxVrC_IhEgeB2A4Aclb5A7QJypg.roa (raw, json)
Hash identifier: Wp1uCPrCYwr9UrxLpjABzqnSc7CogPDMH1pqKvAQfz4=
Subject key identifier: 07:15:6B:0B:F2:21:12:07:81:D8:0E:00:72:56:F9:03:B4:09:CA:98
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 018CC9BC28A66C8C5EFAE1144CF7E6B7EC14
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/BxVrC_IhEgeB2A4Aclb5A7QJypg.roa
Signing time: Tue 02 Jan 2024 10:33:20 +0000
ROA not before: Tue 02 Jan 2024 10:33:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197992
IP address blocks: 46.233.32.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:28:a6:6c:8c:5e:fa:e1:14:4c:f7:e6:b7:ec:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Jan 2 10:33:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07156b0bf221120781d80e007256f903b409ca98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:48:be:4b:f3:da:91:99:34:74:77:1b:2a:ad:
bb:6e:7f:a4:a8:8c:14:dc:f5:f8:dd:3f:db:e3:b5:
60:26:64:0e:b4:6b:be:73:f0:70:b7:5e:bf:04:e7:
ba:26:11:e7:d9:ff:2d:cb:38:3f:da:9e:05:f2:74:
a1:76:17:38:84:70:d7:82:eb:a0:68:a7:c7:29:dd:
d2:80:99:5e:5a:16:d8:7c:16:83:e2:bb:17:75:9c:
a8:d8:7d:85:6a:4f:41:2d:5e:f2:c0:8f:41:86:ee:
4f:cc:0d:db:a3:1b:76:3b:96:33:1a:0b:e1:e5:e2:
63:6a:3e:ec:f7:b3:1e:28:db:70:c5:a3:28:5c:48:
37:f4:23:ac:df:fd:9b:c0:01:4f:36:1c:00:e0:12:
c9:e9:56:c8:62:02:f7:cf:7f:0a:da:1c:01:af:67:
73:f9:59:c9:47:1d:1c:b7:65:73:ae:90:dc:76:8a:
a2:f2:eb:18:94:d8:87:be:3b:d4:13:5d:11:0c:fe:
08:37:e2:16:31:a5:4e:64:4a:fa:70:91:8b:62:25:
56:d8:0f:12:b4:ce:02:a9:4e:1c:2b:ca:58:2f:07:
7e:e3:6c:42:43:d2:b4:c2:7f:41:34:0b:26:ea:0d:
6b:70:2d:7a:b5:9b:9a:4f:60:44:56:c2:8e:ac:33:
51:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:15:6B:0B:F2:21:12:07:81:D8:0E:00:72:56:F9:03:B4:09:CA:98
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/BxVrC_IhEgeB2A4Aclb5A7QJypg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.32.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:21:8b:52:76:6b:74:3c:5b:c0:62:53:72:d6:f9:13:5d:dc:
b7:69:44:6e:5f:f5:07:b5:f9:5e:88:df:58:19:7b:6f:c5:30:
28:4a:89:d3:7b:b2:34:58:5e:33:f5:f1:34:2f:37:29:ef:1f:
95:db:95:a6:c2:7d:8e:9e:50:83:a5:66:8c:b1:df:49:9e:8f:
dd:0a:06:db:87:b6:96:89:4c:4e:20:27:15:5d:c6:f2:7b:ec:
16:c0:09:50:eb:6a:fc:31:81:92:23:a8:bc:ba:66:31:b1:2b:
c0:cf:2e:7f:b1:bc:cd:3b:47:19:26:07:3b:ec:cc:90:dd:d1:
73:e4:ac:0c:dd:d2:bc:07:56:0a:0d:7d:72:33:4b:79:34:2b:
e6:6c:2b:d5:2c:58:f6:cf:ab:ed:f5:ab:90:fa:41:14:bf:48:
ea:3e:96:17:0f:08:e1:6e:41:ae:8d:18:92:af:b3:2b:83:61:
e5:32:d9:70:09:65:a4:09:86:c7:08:69:63:2a:7a:49:28:82:
a4:04:7e:07:c4:fd:4e:5f:6b:25:f7:73:4b:fd:f3:35:5e:80:
ea:bd:be:ad:34:d9:56:1b:2f:7e:4c:d3:79:3a:7b:14:6d:6f:
1a:aa:3b:a1:99:94:1b:f4:b8:4f:f0:e9:e8:57:61:84:27:70:
8e:bc:37:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:53:25 2024 by rpki-client on console-ams.rpki-client.org