Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/BBlmOc0BctMnCA8CjyFVN35rg7A.roa
File: BBlmOc0BctMnCA8CjyFVN35rg7A.roa (raw, json)
Hash identifier: nK7vSUGfHq+s+9REFaV3sMb3K+xMuC4INWoxCkGt1us=
Subject key identifier: 04:19:66:39:CD:01:72:D3:27:08:0F:02:8F:21:55:37:7E:6B:83:B0
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0192C36E473D5F52F006022663A5C86719B6
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/BBlmOc0BctMnCA8CjyFVN35rg7A.roa
Signing time: Fri 25 Oct 2024 11:27:17 +0000
ROA not before: Fri 25 Oct 2024 11:27:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200239
IP address blocks: 193.124.80.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
194.87.59.0/24 maxlen: 24
194.87.64.0/24 maxlen: 24
194.87.75.0/24 maxlen: 24
194.87.91.0/24 maxlen: 24
195.58.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c3:6e:47:3d:5f:52:f0:06:02:26:63:a5:c8:67:19:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 25 11:27:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=04196639cd0172d327080f028f2155377e6b83b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:67:a5:da:07:56:e5:41:85:71:76:3a:b8:5a:
3a:d3:b2:67:8e:c1:c0:6e:b9:a9:57:3e:e7:4d:c6:
a7:3e:95:50:f8:c7:24:b6:8c:fa:e2:df:32:f1:3c:
9f:f0:07:a7:71:51:51:57:46:6f:28:de:7d:bb:5a:
01:b8:c2:2e:21:3b:56:8c:40:15:69:92:eb:1d:3c:
10:6d:29:52:e9:63:a5:01:1f:0a:3f:3d:75:a1:74:
0c:9e:4d:3d:36:c5:ea:1e:a6:0f:62:26:9a:47:e5:
df:35:d6:d6:96:52:20:af:f5:46:28:d1:80:20:8e:
8e:50:8e:f4:45:e2:d4:21:6f:2c:60:c6:a7:6a:63:
08:33:d2:51:2a:66:e8:eb:9a:2a:84:95:ba:d9:c7:
4f:09:04:25:b3:52:f6:46:82:22:3d:d8:64:eb:8c:
3d:93:fc:70:b0:af:ca:17:09:f5:50:7a:60:c0:8e:
22:37:8e:a2:e6:29:1c:eb:45:5a:ee:2d:39:4d:cf:
13:eb:37:1e:d7:8b:c0:c5:77:b6:3a:e8:c7:7e:d4:
43:3a:da:09:e3:eb:84:03:ae:68:f8:44:66:dc:24:
f4:8d:26:8f:c6:f7:5a:0b:dc:1b:29:99:8e:21:46:
01:4a:b9:7f:48:bd:d2:e7:f5:4a:b0:ad:f4:03:4e:
99:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:19:66:39:CD:01:72:D3:27:08:0F:02:8F:21:55:37:7E:6B:83:B0
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/BBlmOc0BctMnCA8CjyFVN35rg7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.80.0/24
193.124.90.0/24
194.87.59.0/24
194.87.64.0/24
194.87.75.0/24
194.87.91.0/24
195.58.63.0/24
Signature Algorithm: sha256WithRSAEncryption
85:72:d7:5e:87:ed:82:02:5b:07:de:de:cb:8b:b3:01:6b:76:
a6:fe:93:7f:12:a2:e6:cc:dd:43:c7:9f:5d:d1:40:ac:33:e0:
d3:4a:4e:01:b3:1f:3f:08:da:52:55:96:c0:e9:7d:e3:91:a9:
76:4f:a8:4b:10:ef:9b:16:78:6c:2b:3f:c8:1b:a6:ea:30:ed:
83:c1:96:b8:00:5d:e2:1f:5e:34:af:ce:f4:da:54:4e:9d:40:
ee:8a:65:47:de:91:5e:58:57:27:3e:a1:02:65:14:fa:ab:c9:
36:06:09:d1:5a:fe:7d:bf:a4:6e:03:9a:51:df:3b:f8:61:82:
38:58:01:b9:d7:27:22:33:23:10:b9:53:2b:e2:6f:1c:c9:3b:
d8:41:04:4e:97:84:31:79:6d:ea:ed:a3:11:40:da:16:30:70:
c4:2d:59:03:4e:a5:2e:55:b4:33:5c:f8:7a:12:42:d5:c5:58:
25:0f:dc:2f:db:db:0d:71:13:b7:b1:48:0d:c0:15:bd:89:35:
7c:fe:bb:1e:9a:eb:64:d5:4a:4f:ff:df:97:65:fe:c6:5c:ea:
b9:18:db:55:0f:25:d4:f2:d1:83:49:a5:78:08:33:e8:f4:1d:
64:3b:22:ea:f6:d3:29:78:1d:b8:fd:47:14:a3:8a:e1:1d:ee:
ab:0c:c8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:37 2024 by rpki-client on console-fra.rpki-client.org