Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/247ee2-2365-4768-977f-fefa1abaedcf/1/BIM0rGLc6_4iD7O2rO1wuVEY3FQ.roa
File: BIM0rGLc6_4iD7O2rO1wuVEY3FQ.roa (raw, json)
Hash identifier: 82ozNBnFPvLM1CIo1hknPU65jaGnMj8QzkEXYfv0vUU=
Subject key identifier: 04:83:34:AC:62:DC:EB:FE:22:0F:B3:B6:AC:ED:70:B9:51:18:DC:54
Certificate issuer: /CN=4dbd0b135a7dfd6b6aa1b1849eb163402de8e1b1
Certificate serial: 018D3B0617D0D6E1400E23E44122E8125434
Authority key identifier: 4D:BD:0B:13:5A:7D:FD:6B:6A:A1:B1:84:9E:B1:63:40:2D:E8:E1:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tb0LE1p9_WtqobGEnrFjQC3o4bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/247ee2-2365-4768-977f-fefa1abaedcf/1/BIM0rGLc6_4iD7O2rO1wuVEY3FQ.roa
Signing time: Wed 24 Jan 2024 10:31:11 +0000
ROA not before: Wed 24 Jan 2024 10:31:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50056
IP address blocks: 185.217.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/247ee2-2365-4768-977f-fefa1abaedcf/1/Tb0LE1p9_WtqobGEnrFjQC3o4bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/247ee2-2365-4768-977f-fefa1abaedcf/1/Tb0LE1p9_WtqobGEnrFjQC3o4bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tb0LE1p9_WtqobGEnrFjQC3o4bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3b:06:17:d0:d6:e1:40:0e:23:e4:41:22:e8:12:54:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dbd0b135a7dfd6b6aa1b1849eb163402de8e1b1
Validity
Not Before: Jan 24 10:31:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=048334ac62dcebfe220fb3b6aced70b95118dc54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:7f:34:6d:4f:de:ed:af:e2:88:a9:e3:06:ad:
9e:8a:ec:26:aa:84:b1:9d:ec:f8:bd:e3:5c:2d:c4:
7f:58:3d:ee:25:8d:f8:80:e3:1f:8a:f4:08:0b:21:
99:6b:28:56:b7:77:12:fe:23:1c:0b:85:9c:2c:ee:
c8:da:e5:24:62:b3:f8:7e:20:59:91:c0:79:73:5f:
b4:74:7f:b1:31:4c:b8:6f:05:4d:43:8c:af:ec:c7:
af:61:49:07:e1:09:96:3d:01:f7:5c:be:53:ce:ff:
26:bc:d7:18:ff:6f:ee:ba:e5:bb:31:7c:9a:5b:d7:
b2:e5:fa:b8:10:7a:46:82:ab:9e:30:c1:57:3d:dd:
04:cd:b1:59:c6:0b:d8:f0:3e:d6:20:1e:06:d8:16:
1d:ad:e2:55:1d:1f:e3:17:05:fb:01:e4:62:34:6f:
d4:63:b5:6b:40:c4:07:2a:e5:93:11:0f:9e:d4:c3:
a7:e9:fc:c2:64:68:fc:a5:29:a0:b7:28:bd:b3:7e:
86:01:2e:02:06:27:c4:9e:4c:b4:03:63:30:a3:6f:
5d:9d:01:7a:01:10:25:a5:46:07:b4:8a:5d:89:ac:
1e:27:c7:0a:31:66:22:f7:f6:3a:37:6b:38:dc:68:
c8:4e:39:ab:06:02:2b:87:96:ad:de:7e:53:08:21:
d4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:83:34:AC:62:DC:EB:FE:22:0F:B3:B6:AC:ED:70:B9:51:18:DC:54
X509v3 Authority Key Identifier:
keyid:4D:BD:0B:13:5A:7D:FD:6B:6A:A1:B1:84:9E:B1:63:40:2D:E8:E1:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tb0LE1p9_WtqobGEnrFjQC3o4bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/247ee2-2365-4768-977f-fefa1abaedcf/1/BIM0rGLc6_4iD7O2rO1wuVEY3FQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/247ee2-2365-4768-977f-fefa1abaedcf/1/Tb0LE1p9_WtqobGEnrFjQC3o4bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.165.0/24
Signature Algorithm: sha256WithRSAEncryption
86:72:51:ac:94:cb:b6:0a:d3:ec:31:f9:05:81:f9:29:7a:81:
b9:43:0c:b0:00:e8:b7:8c:40:26:24:26:31:47:30:7a:3e:70:
ba:c0:3d:8c:a2:1b:37:a4:7d:60:37:cd:bf:56:38:8a:8c:b1:
48:88:b8:d0:8a:e0:c0:7f:ca:82:f9:90:66:2f:55:47:9a:2d:
f0:08:0a:73:35:1d:10:6a:1d:22:f3:b6:1f:53:63:2b:98:47:
16:48:e5:0f:ed:29:c7:b1:a8:9f:f5:f6:07:39:75:2d:c4:9d:
5a:76:f1:fc:af:2f:c9:5a:c0:ec:1e:00:02:11:68:4a:5e:b2:
c5:fc:cb:a6:11:9b:23:c4:6d:c3:b5:29:7c:a7:5c:d7:d7:56:
0d:96:20:4c:e3:5a:bb:15:ff:06:89:cb:6e:de:59:30:ef:b4:
0c:66:fb:0c:50:67:92:cf:13:21:09:0d:75:10:08:1a:df:80:
e1:b8:07:23:ad:55:bd:c0:f6:c6:03:fe:17:d4:f0:bf:e7:24:
d2:2b:a4:83:62:c1:81:e1:a6:9e:fd:bd:d5:c7:7b:dc:da:43:
3b:5c:a5:f9:01:da:e6:ff:cf:e0:77:bb:7f:cd:74:06:d0:d8:
36:8c:1a:3a:bf:34:08:a9:2a:b8:ae:52:9e:46:54:37:cc:8d:
e4:46:54:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:45:50 2024 by rpki-client on console-fra.rpki-client.org