Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BiU0i82sn1pli9AizZXnYaP0qvQ.roa
File: BiU0i82sn1pli9AizZXnYaP0qvQ.roa (raw, json)
Hash identifier: abQKKqgnEtExBF3iz3mNa40PaIYVtUCcROPA6qDypPE=
Subject key identifier: 06:25:34:8B:CD:AC:9F:5A:65:8B:D0:22:CD:95:E7:61:A3:F4:AA:F4
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018E7B0AF41A88467987A06C371B0D9690F4
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BiU0i82sn1pli9AizZXnYaP0qvQ.roa
Signing time: Tue 26 Mar 2024 13:54:59 +0000
ROA not before: Tue 26 Mar 2024 13:54:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25369
IP address blocks: 5.252.132.0/22 maxlen: 24
45.90.88.0/23 maxlen: 24
193.25.218.0/24 maxlen: 24
193.58.120.0/24 maxlen: 24
194.31.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7b:0a:f4:1a:88:46:79:87:a0:6c:37:1b:0d:96:90:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 26 13:54:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0625348bcdac9f5a658bd022cd95e761a3f4aaf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:cc:a3:6e:29:d1:f9:ca:46:4c:ee:bb:77:fc:
95:1b:80:ec:3a:02:90:c4:8f:96:84:d5:3a:14:cc:
82:b5:13:8e:3b:29:02:a3:a3:9b:fa:b6:18:fd:4b:
b7:c5:5a:10:cf:ab:5f:7f:fd:15:66:ad:71:5d:16:
59:86:fa:cf:02:4a:29:23:29:7d:44:c8:9c:5a:70:
e8:16:6d:30:03:5e:5a:57:a2:bb:f7:0d:b7:84:20:
0b:24:26:af:d4:6b:10:f6:79:fd:99:81:ac:84:a8:
44:82:08:2c:1b:f3:44:1d:c1:50:cf:7f:71:47:5a:
fd:17:11:c6:9d:81:70:0b:60:a2:24:ce:d8:8d:22:
ae:cd:e2:0a:27:78:07:14:e6:1c:e4:93:30:97:68:
8c:a2:e1:ac:19:3f:f8:31:40:31:72:26:11:36:66:
39:da:f2:84:a3:93:f9:16:13:6b:4d:03:af:b9:f0:
12:9a:cb:cc:6d:9f:d2:e7:eb:f9:dc:33:2d:ca:1a:
e1:7c:fc:3c:14:80:57:2b:de:3f:bf:a6:70:77:d1:
7e:b9:44:43:a5:f7:fe:1b:fa:d4:9a:63:7d:54:f8:
98:a6:b8:03:ab:58:cc:aa:b8:f3:38:f2:8d:70:25:
a5:3c:f9:a2:c3:e7:1d:4b:a5:be:7a:c7:3a:5e:58:
6a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:25:34:8B:CD:AC:9F:5A:65:8B:D0:22:CD:95:E7:61:A3:F4:AA:F4
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BiU0i82sn1pli9AizZXnYaP0qvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.132.0/22
45.90.88.0/23
193.25.218.0/24
193.58.120.0/24
194.31.204.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:80:3e:e7:d6:97:de:69:e5:e1:85:dd:9f:a2:9c:a7:d8:92:
6a:a0:53:37:d2:e9:0e:d4:af:a7:3a:0d:f1:79:51:7f:36:97:
03:9d:44:37:1f:24:c4:08:0b:d1:fa:1a:27:21:02:eb:40:2c:
56:8a:3b:d0:8b:00:87:a4:ac:41:62:73:d0:d9:d7:b6:29:41:
fb:4f:3f:9a:fd:7a:98:c3:7e:6f:51:cc:f6:e1:e2:8f:b7:0d:
7a:f6:b4:6c:94:70:2f:4a:3f:dc:0f:c5:d2:2f:5f:93:2f:c5:
43:18:c0:76:a5:35:21:68:6c:f2:c1:c3:aa:26:60:26:ee:f8:
9a:3b:94:78:d0:05:d5:c1:90:ac:53:a7:a0:0f:49:ab:72:1c:
48:16:48:92:23:15:68:3b:60:09:1d:a3:7f:b8:54:18:23:2a:
f1:b5:94:1c:9d:88:16:1c:ef:c1:05:c1:bc:25:e6:b9:92:82:
f8:82:df:0e:f4:e4:db:38:0f:1c:fe:99:81:1f:bd:56:1f:81:
28:07:11:c4:01:0d:9b:9e:42:22:07:81:6f:2a:12:bc:e3:a0:
ca:76:32:06:b0:33:f3:1b:8d:97:a5:7c:dd:c5:c8:c2:d8:92:
d7:9e:c7:ea:7f:86:cf:b5:dc:c7:c0:ae:bf:60:2c:5f:32:2c:
83:c2:fd:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:58:05 2024 by rpki-client on console-ams.rpki-client.org