Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/BpAsoWxWebK0L9gfNDR8FV5X8r4.roa
File: BpAsoWxWebK0L9gfNDR8FV5X8r4.roa (raw, json)
Hash identifier: QSYpnL9DxinTlN/FR5a220RkpufX544MDzQ9k7GSjyM=
Subject key identifier: 06:90:2C:A1:6C:56:79:B2:B4:2F:D8:1F:34:34:7C:15:5E:57:F2:BE
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018CC7952DE548BEF07253AD422F8E88790B
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/BpAsoWxWebK0L9gfNDR8FV5X8r4.roa
Signing time: Tue 02 Jan 2024 00:31:31 +0000
ROA not before: Tue 02 Jan 2024 00:31:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 135330
IP address blocks: 193.233.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 20:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:2d:e5:48:be:f0:72:53:ad:42:2f:8e:88:79:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 2 00:31:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=06902ca16c5679b2b42fd81f34347c155e57f2be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:06:4e:8b:b7:65:36:c8:6d:8d:ed:27:bf:ab:
f8:3b:14:af:5b:68:84:c6:17:7f:cd:b9:6d:de:d7:
a9:ef:39:90:a9:5f:62:e9:d7:97:c6:ff:c6:b4:26:
35:f6:d9:cb:54:c8:63:da:8f:d5:88:1d:ec:20:d2:
bc:0c:64:ef:da:cf:25:02:53:04:35:a3:da:d2:cc:
d1:ab:f8:81:36:f7:fb:69:f6:a2:3f:fc:6a:d2:2b:
20:6a:57:33:c5:20:ad:cf:25:a8:e8:85:05:40:57:
9c:0d:5a:48:cd:fa:11:30:28:bc:1d:8e:cb:4c:67:
0e:cd:e8:10:7b:73:00:5f:af:f5:ea:fe:9e:9b:12:
3b:5e:a3:b6:84:18:4c:90:b1:ad:86:8e:3e:f8:a6:
95:98:51:62:c5:ae:2b:b7:cf:0a:37:47:88:a3:d0:
51:fe:0a:89:e7:71:22:10:0d:b0:7e:05:7e:5c:86:
c9:6b:0c:5b:44:d9:a2:17:86:9f:4f:f1:ea:bf:62:
ed:0e:52:fe:d4:a8:8a:f7:e7:07:85:c2:03:83:05:
98:e1:46:9c:ab:a7:6b:e3:f2:05:9a:3e:59:00:51:
f3:48:8e:57:af:1e:0c:eb:6e:30:21:30:ea:38:2c:
78:ab:f6:6a:ef:89:3c:51:8e:94:77:d2:f6:ed:21:
54:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:90:2C:A1:6C:56:79:B2:B4:2F:D8:1F:34:34:7C:15:5E:57:F2:BE
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/BpAsoWxWebK0L9gfNDR8FV5X8r4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.193.0/24
Signature Algorithm: sha256WithRSAEncryption
61:d8:c4:42:8a:b7:e1:42:99:4e:7f:89:00:13:b5:e8:ef:93:
23:45:03:29:a9:84:b6:69:bc:53:eb:f2:53:2a:de:b6:6f:fd:
d3:ba:66:ef:4b:c3:93:5d:c8:2b:56:c6:a9:68:00:b7:d6:57:
c6:74:fb:10:40:42:46:d6:02:a1:cc:44:f3:f3:2b:d6:52:e7:
19:47:52:a1:f7:84:07:56:13:85:83:4e:27:ae:5e:9c:0c:e1:
cf:27:e9:3f:f1:18:c1:72:9c:7a:d8:9e:04:13:79:2e:0d:d6:
41:35:98:cb:89:ef:d6:d9:72:d5:b2:6a:46:2c:9a:d4:bd:d0:
f8:b1:26:d1:f9:cf:a7:c0:44:10:e6:18:b9:f1:85:30:87:d9:
29:54:f2:f9:41:33:6e:34:78:7f:20:c2:05:92:fd:5b:82:70:
bc:60:6d:b8:47:6c:7d:2f:95:ec:28:27:4f:ba:1d:29:f3:f0:
bf:88:2d:c1:af:14:50:ed:4c:1b:3c:95:fd:97:2c:15:9f:15:
44:07:a6:45:86:f5:9c:68:3b:4d:f2:a4:07:01:66:24:e9:6d:
35:04:9a:49:f6:bf:bf:1b:54:fe:97:a4:0d:3c:43:4a:b3:1b:
5e:a6:55:ea:86:23:92:a7:81:67:25:d6:d1:99:c1:40:c9:fe:
54:de:66:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:16:14 2024 by rpki-client on console-ams.rpki-client.org