Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Bb05SfAFJWXEZldPaxmqRNMxVOk.roa
File: Bb05SfAFJWXEZldPaxmqRNMxVOk.roa (raw, json)
Hash identifier: nuFsXeMHgR1u+cYddZ/dTkd8AvHkBw31jXWQVLz62N8=
Subject key identifier: 05:BD:39:49:F0:05:25:65:C4:66:57:4F:6B:19:AA:44:D3:31:54:E9
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018CC7952C9DD03983CE0B670090C21D7FAB
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Bb05SfAFJWXEZldPaxmqRNMxVOk.roa
Signing time: Tue 02 Jan 2024 00:31:31 +0000
ROA not before: Tue 02 Jan 2024 00:31:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56701
IP address blocks: 193.233.120.0/24 maxlen: 24
193.233.123.0/24 maxlen: 24
193.233.122.0/24 maxlen: 24
193.233.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 13:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:2c:9d:d0:39:83:ce:0b:67:00:90:c2:1d:7f:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 2 00:31:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05bd3949f0052565c466574f6b19aa44d33154e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ed:e9:bb:d6:6c:35:7d:28:0e:9c:bc:41:16:
b0:c4:5f:1b:bb:3b:38:4d:60:ee:ba:0e:25:69:98:
94:ed:86:29:de:49:c6:9a:44:02:90:72:48:b8:28:
00:7f:00:86:95:d7:ea:fa:07:6c:0f:ff:88:75:26:
2d:4b:83:6f:09:c2:77:65:c8:a5:1c:08:cd:91:b8:
d5:e0:1b:60:f5:37:d1:ea:a9:d1:fb:17:31:2f:57:
79:79:e1:46:84:5b:46:cd:16:2a:75:9a:c5:10:03:
a9:dc:f5:dc:fb:89:c8:5c:f1:fd:22:5c:6c:92:94:
2a:c5:99:cb:ff:d5:2b:8e:44:12:7f:5f:f6:b8:d9:
c3:cd:cb:30:03:9b:95:7f:66:64:44:b3:8b:ec:3e:
78:d6:47:5d:f7:c1:13:99:00:03:c1:e6:9e:7b:57:
49:cc:50:1c:de:fe:e9:56:d7:58:b7:0d:88:6e:96:
77:b8:5a:68:da:73:17:54:d2:7e:f2:51:e4:a3:14:
ad:53:9e:1a:f8:b4:b2:d6:79:f8:09:a4:af:38:1d:
4f:76:e2:b9:7c:0a:f5:5e:8b:f0:56:72:46:4b:c9:
6a:03:9b:43:ec:03:cc:f4:a1:40:70:bd:94:15:a8:
e2:34:e4:0d:09:a2:27:1f:86:81:77:0c:2d:0d:cb:
a4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:BD:39:49:F0:05:25:65:C4:66:57:4F:6B:19:AA:44:D3:31:54:E9
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Bb05SfAFJWXEZldPaxmqRNMxVOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.120.0/22
Signature Algorithm: sha256WithRSAEncryption
20:0b:d8:b2:6f:c7:4c:c2:3d:9e:56:f0:8f:63:f3:d4:a2:48:
83:70:35:6c:0e:61:b6:6e:93:11:74:eb:8d:32:75:6c:33:77:
b3:2e:d5:95:6b:b4:36:96:1a:d7:81:02:1b:1f:34:a4:98:c1:
1e:e9:35:d3:94:8c:db:34:cd:8c:d2:f5:df:ed:57:e7:6b:75:
a7:f4:c6:e0:87:f4:68:d5:74:b3:6a:10:27:4b:21:0f:e0:db:
22:80:3b:eb:c1:7d:22:1d:d5:01:e7:d8:b2:87:49:cb:66:2b:
3a:2e:64:18:16:d5:5b:7d:f4:67:9d:d3:1e:8d:d1:41:74:4f:
db:7d:80:6e:92:8e:24:62:76:98:80:d8:69:c4:a1:12:1b:ea:
0c:22:18:21:8e:c4:7d:b7:f3:fd:41:84:08:e3:aa:93:ff:88:
7b:a5:3a:c0:c7:1d:a0:c1:19:d2:2e:27:ad:89:15:02:53:66:
69:a7:60:93:51:32:7c:de:26:10:26:01:40:67:93:03:f0:fe:
09:ee:92:32:63:66:7f:61:1d:15:8d:22:86:2d:80:39:a2:fc:
82:c5:15:6a:b2:4c:8f:e7:91:a1:59:1d:86:56:f6:64:15:96:
84:54:82:af:91:18:bf:dc:f7:3e:f3:66:49:77:fe:1d:80:a9:
10:24:c3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 21:39:10 2024 by rpki-client on console-fra.rpki-client.org