Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BTUQmcjAZp_gR8rLtTQthy1BGhE.roa
File: BTUQmcjAZp_gR8rLtTQthy1BGhE.roa (raw, json)
Hash identifier: xf49hUf0WOtN7CQFEP/lrm1jWp8L36hlyTk9z2lykrg=
Subject key identifier: 05:35:10:99:C8:C0:66:9F:E0:47:CA:CB:B5:34:2D:87:2D:41:1A:11
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 018CC649EDB237B4546FA15A2E3EB08D4FAE
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BTUQmcjAZp_gR8rLtTQthy1BGhE.roa
Signing time: Mon 01 Jan 2024 18:29:42 +0000
ROA not before: Mon 01 Jan 2024 18:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203535
IP address blocks: 151.251.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:ed:b2:37:b4:54:6f:a1:5a:2e:3e:b0:8d:4f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 1 18:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05351099c8c0669fe047cacbb5342d872d411a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:90:06:9e:a4:c1:da:ac:51:6a:d5:97:1b:fa:
89:95:14:f0:0c:ca:6f:cf:2c:9e:d8:70:0e:67:45:
87:93:06:90:b2:db:dc:09:81:8a:24:c3:e5:35:d1:
62:62:72:ff:7b:39:bc:34:00:d9:4a:b6:2f:c8:60:
8e:53:e8:5b:48:15:9d:d1:5a:5d:b8:e8:dc:d1:1b:
a8:bc:e8:1c:58:93:5c:2f:ff:02:13:7b:97:f8:94:
48:af:3d:58:ce:28:0c:8b:02:73:f0:10:50:30:96:
b0:6c:c5:dd:17:78:9e:0f:60:ad:b2:ec:75:29:14:
2b:3d:12:ae:c7:59:39:39:69:4a:09:98:1c:a9:08:
2b:69:ef:aa:63:9f:c9:01:5b:b6:53:c5:d4:24:74:
b7:55:99:a6:a4:e5:ee:6b:83:4d:0d:a5:f2:0b:be:
fd:54:a5:47:3c:85:2a:fb:dd:e6:b4:83:df:ea:4a:
ab:63:8e:b4:98:82:17:5b:bd:b5:28:f9:1b:59:03:
c5:26:f4:9b:a7:32:33:e8:f4:52:36:50:63:77:02:
6c:88:e9:d7:2e:07:0c:5c:b0:0c:bf:5a:dc:71:79:
2b:db:57:47:42:c4:d6:36:9a:0f:1b:8a:d5:43:2e:
4e:69:b6:e6:a8:02:bd:72:ef:eb:ab:49:81:bb:09:
9c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:35:10:99:C8:C0:66:9F:E0:47:CA:CB:B5:34:2D:87:2D:41:1A:11
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BTUQmcjAZp_gR8rLtTQthy1BGhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.251.224.0/24
Signature Algorithm: sha256WithRSAEncryption
79:6f:6b:b6:27:34:b8:b8:c4:13:94:a4:b1:0e:c3:3d:15:f0:
46:5b:d6:dc:e2:8f:d3:c1:fc:1c:a9:be:34:fe:94:7c:3b:3f:
7a:d5:89:ce:0a:2a:88:8a:0d:14:26:ed:56:05:33:4d:e0:04:
6f:98:42:91:b4:6d:31:1f:37:f9:ac:8d:b3:07:d0:8a:62:f6:
c6:f1:b4:ed:f8:24:d7:5f:51:93:4b:6f:c7:f4:87:cb:2e:53:
d2:0a:f6:9e:cf:8c:2f:a9:b3:67:c7:29:81:01:79:4e:7f:03:
1f:5a:cd:74:00:b8:87:f5:c0:65:e9:d2:27:0f:3a:72:bc:01:
fa:d2:4e:fb:40:da:a8:d3:23:da:21:b4:c0:81:2f:52:49:b8:
dc:f9:96:a3:aa:97:45:3b:d7:94:30:1b:95:23:24:c5:11:9c:
af:5c:57:56:2d:b8:20:0b:a4:63:d9:47:60:7c:d0:e1:8f:8b:
05:c5:a8:47:90:52:78:cb:0c:14:1f:76:ca:0f:6b:24:70:44:
c6:79:af:3c:0f:44:54:6e:02:ea:d2:a8:35:fc:1f:0f:07:1f:
e2:75:62:36:04:61:cf:31:e4:26:8d:67:fe:45:c7:24:24:ba:
42:4d:0e:96:60:59:9f:45:d1:df:98:78:59:42:6e:fa:76:ba:
37:c9:8f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 20:31:21 2024 by rpki-client on console-fra.rpki-client.org