Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/BOH31QgH3qz2UFIeftjo-6C5Fek.roa
File: BOH31QgH3qz2UFIeftjo-6C5Fek.roa (raw, json)
Hash identifier: DS5e1ucfdroctk1wEW6B2xFbJ77YyFWDhka5JBYIy2E=
Subject key identifier: 04:E1:F7:D5:08:07:DE:AC:F6:50:52:1E:7E:D8:E8:FB:A0:B9:15:E9
Certificate issuer: /CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Certificate serial: 018CCA2A9FB473B037AA2A8940023DFEFB50
Authority key identifier: 5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/BOH31QgH3qz2UFIeftjo-6C5Fek.roa
Signing time: Tue 02 Jan 2024 12:34:00 +0000
ROA not before: Tue 02 Jan 2024 12:34:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202532
IP address blocks: 91.107.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Sep 2024 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:9f:b4:73:b0:37:aa:2a:89:40:02:3d:fe:fb:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Validity
Not Before: Jan 2 12:34:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=04e1f7d50807deacf650521e7ed8e8fba0b915e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:85:5f:54:c4:77:45:e4:19:16:82:85:bb:8d:
08:b9:d8:77:48:69:96:ca:c2:df:1d:1e:63:c4:69:
69:3e:85:81:3c:eb:ac:6c:a3:7e:0e:07:df:2b:09:
53:b2:96:5d:ae:8d:9a:d1:1e:fe:af:c9:69:4f:a9:
54:17:ad:93:45:30:bf:a2:e0:04:6a:f4:ce:33:fc:
3b:38:4c:17:11:f3:2d:8d:b2:18:fc:26:f4:c2:00:
2e:2e:3e:de:84:c2:54:0f:c5:0b:0d:e2:0d:b7:4c:
90:ec:99:1e:5f:af:28:61:f9:80:2a:66:5e:9e:13:
a3:5c:b7:33:d4:5c:d0:30:e2:c2:2e:2b:f9:ba:aa:
5c:ce:0b:00:98:04:d6:db:97:15:68:c6:04:e8:0f:
cf:91:83:1b:2c:01:0d:42:77:06:55:27:f1:c2:dc:
67:8c:49:bf:10:0d:55:c8:e4:a9:bd:02:88:41:5a:
7e:63:7c:18:f8:51:8c:6a:d4:13:ff:24:2b:59:43:
fd:50:59:73:5b:00:6a:05:c1:a6:9f:ee:34:6b:04:
9e:97:20:9b:26:54:0b:2b:77:9b:c1:a7:61:f9:58:
58:11:ac:3e:8a:7a:12:8a:ef:8d:69:77:e3:e4:8c:
09:1f:1c:69:86:75:3a:6e:ae:21:8a:9f:77:f1:e7:
9d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E1:F7:D5:08:07:DE:AC:F6:50:52:1E:7E:D8:E8:FB:A0:B9:15:E9
X509v3 Authority Key Identifier:
keyid:5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/BOH31QgH3qz2UFIeftjo-6C5Fek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.107.84.0/24
Signature Algorithm: sha256WithRSAEncryption
46:76:69:90:c4:2b:ff:6a:4d:79:a0:68:7f:46:14:56:c1:33:
04:69:12:e4:74:d8:ae:fe:a5:30:b7:24:ec:21:a8:4c:b4:ad:
77:5e:26:e0:4a:c2:2c:82:ba:ba:8d:d9:35:3a:8e:9c:d1:6f:
18:e3:9b:68:05:33:91:7f:89:69:e1:7d:a1:f0:eb:32:1c:9d:
24:4e:41:36:50:5d:eb:93:5f:5a:71:9c:9d:c1:40:fc:01:cd:
2d:b8:59:2b:e4:ca:a5:89:36:74:e2:b2:c9:fc:1f:61:aa:4d:
48:af:75:5f:4e:e0:db:92:79:5f:4d:38:7d:2f:55:c7:8c:54:
9a:b9:a4:65:0b:ec:23:d4:0b:11:f0:fe:a1:e8:b1:9b:f6:36:
7f:d0:d4:01:c5:33:5a:27:17:61:8b:99:88:71:16:62:49:c4:
f5:27:76:a7:fb:9c:4e:37:85:e9:75:d8:72:d2:95:ab:bc:fa:
0c:96:32:cb:02:99:ad:c6:c9:34:b5:33:24:ab:b9:eb:84:3e:
3f:86:a5:69:50:03:1e:a5:c7:f0:5f:df:4e:8e:c6:75:39:0a:
f1:91:af:d2:5d:3a:93:2b:e9:8e:de:1f:fb:49:47:be:b0:27:
52:68:0d:56:64:f1:a3:e6:db:47:e8:63:8c:6b:07:e7:00:be:
8f:86:c1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 18:57:51 2024 by rpki-client on console-fra.rpki-client.org