Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/BIDRYupcHpiz9Lauc_dglug2JCs.roa
File: BIDRYupcHpiz9Lauc_dglug2JCs.roa (raw, json)
Hash identifier: Z14Hw4MaNy2tJc7/l9txA+gRcd9bKzarf0uoBMpiHOc=
Subject key identifier: 04:80:D1:62:EA:5C:1E:98:B3:F4:B6:AE:73:F7:60:96:E8:36:24:2B
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 0192538E851D88A0831E54D0CE0727A38EFF
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/BIDRYupcHpiz9Lauc_dglug2JCs.roa
Signing time: Thu 03 Oct 2024 18:05:01 +0000
ROA not before: Thu 03 Oct 2024 18:05:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57844
IP address blocks: 193.233.244.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:53:8e:85:1d:88:a0:83:1e:54:d0:ce:07:27:a3:8e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Oct 3 18:05:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0480d162ea5c1e98b3f4b6ae73f76096e836242b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:42:e2:14:ad:d5:cb:06:d4:30:ef:b7:ab:26:
6f:df:7d:74:76:a6:97:89:7b:71:0b:9b:3b:f9:07:
47:e7:6b:b3:48:ea:35:eb:69:f6:47:6c:8c:7d:87:
69:d0:2a:65:db:50:c7:8d:4d:b5:76:ca:c8:9f:48:
37:67:32:5b:78:29:1e:3a:ba:9f:ef:d8:f3:d6:0b:
69:48:ac:e0:c1:d3:2c:71:59:30:89:db:b2:ec:2c:
5d:f8:fb:d5:a8:82:e3:58:19:8a:cf:b1:07:cc:25:
c7:1e:c3:70:3f:09:ed:94:c8:df:29:3c:99:67:3b:
5b:d6:99:51:ea:bd:1e:ff:35:7f:bc:b7:22:de:49:
44:58:a8:a4:69:bc:c5:68:c3:1d:5f:b0:1d:ea:3b:
01:67:03:50:43:8f:d7:60:d1:72:e2:47:f9:4b:f2:
bc:b0:84:a9:10:ad:63:56:b6:a4:d1:07:e4:57:22:
e7:c8:58:78:9b:1b:9b:56:5d:2f:3a:15:0e:6b:34:
0e:19:2c:71:3b:4f:03:0c:78:00:69:8e:98:53:53:
aa:c9:3f:d4:d7:d2:ce:8d:6c:24:a1:3c:b3:09:30:
0b:d0:59:ed:33:f9:2e:ac:3f:3e:95:9c:6d:c9:9f:
8e:b5:13:77:e6:35:84:3a:aa:4f:3c:c3:7a:38:4c:
f1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:80:D1:62:EA:5C:1E:98:B3:F4:B6:AE:73:F7:60:96:E8:36:24:2B
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/BIDRYupcHpiz9Lauc_dglug2JCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.244.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:15:10:d3:04:4e:f4:f4:23:be:e5:7c:3c:8e:ca:30:6f:6c:
a4:e2:22:fe:4c:71:7c:c4:fd:2d:42:6a:61:2c:80:a4:9b:37:
57:d5:cd:62:9b:c5:7a:3d:bb:64:aa:45:1e:03:f3:28:32:98:
84:7d:a7:d3:5a:83:81:98:16:91:57:ce:49:53:d2:8b:8e:42:
b4:a1:1b:60:86:84:88:5f:af:dc:9c:0f:29:7d:4c:5a:25:f2:
96:27:c3:6d:62:0c:7b:09:ce:34:49:78:33:d4:a4:f7:31:15:
55:cc:9c:21:31:ad:39:97:3d:11:af:a0:3a:e4:9e:e8:4a:02:
dd:6f:44:28:a3:d2:5b:95:39:28:42:24:e9:94:2a:25:64:a8:
97:89:10:ce:d5:b1:82:f3:3b:5e:0d:82:15:89:43:48:d4:04:
94:4e:9c:81:ce:94:e4:b7:26:5f:7d:7d:87:00:77:8c:fc:85:
07:b9:a9:ac:e6:a2:e6:af:0e:cc:eb:f9:3c:15:ae:e9:1a:31:
32:c1:be:bf:95:06:0d:9f:35:d9:16:eb:cf:1e:1a:b3:ee:aa:
63:4a:a0:2b:52:fc:a5:96:71:1f:32:0f:31:87:89:ec:05:b5:
99:68:a0:55:58:2e:40:2d:8a:26:e9:56:ce:e9:bf:ae:90:d5:
19:66:09:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:39:24 2024 by rpki-client on console-fra.rpki-client.org