Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/BScY9kgr2wH_48zXQUAuH3eBRYk.roa
File: BScY9kgr2wH_48zXQUAuH3eBRYk.roa (raw, json)
Hash identifier: hMIjRdIvJPKTkF2OakBfT35zPk+MuzxDrXlsvoWL9Ok=
Subject key identifier: 05:27:18:F6:48:2B:DB:01:FF:E3:CC:D7:41:40:2E:1F:77:81:45:89
Certificate issuer: /CN=bb190d102ac9603b405b36374d429868604937af
Certificate serial: 018CC794C1120751CE7438B43FA34C003A97
Authority key identifier: BB:19:0D:10:2A:C9:60:3B:40:5B:36:37:4D:42:98:68:60:49:37:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/BScY9kgr2wH_48zXQUAuH3eBRYk.roa
Signing time: Tue 02 Jan 2024 00:31:03 +0000
ROA not before: Tue 02 Jan 2024 00:31:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203823
IP address blocks: 185.122.196.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft
rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:c1:12:07:51:ce:74:38:b4:3f:a3:4c:00:3a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb190d102ac9603b405b36374d429868604937af
Validity
Not Before: Jan 2 00:31:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=052718f6482bdb01ffe3ccd741402e1f77814589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e5:cb:db:04:44:1d:23:bb:b5:07:0a:09:59:
b0:11:94:30:af:f3:29:aa:c4:a3:c3:a8:33:98:b4:
ce:8c:8c:e8:4d:b2:fe:0a:03:1c:a3:11:a3:b7:a9:
9f:1c:1e:f9:19:a5:ee:65:73:9f:ae:76:8a:cc:2d:
2c:60:68:44:83:02:c1:16:42:b8:ab:aa:79:01:bd:
65:86:f2:37:95:f9:8a:66:6f:8c:12:a2:5f:f6:38:
89:12:11:51:11:b4:1d:b8:0f:a2:aa:9f:b5:cf:a8:
14:9e:cf:de:fa:b7:37:06:c0:ec:64:1e:82:ae:1d:
66:41:79:a2:0b:2f:d4:9b:58:05:cd:ac:58:c7:9b:
e7:1f:7c:05:87:e9:f8:b0:b0:bd:da:38:b7:72:7b:
49:ad:8d:09:28:91:5e:6e:68:8c:00:f6:e6:33:b7:
ef:72:85:b9:32:71:fb:c3:a4:4b:24:1d:51:52:fe:
a5:cc:3a:51:fc:af:88:a8:67:aa:8c:6f:00:5b:ff:
36:db:db:be:4f:3f:cc:fe:30:9f:df:a8:33:3f:72:
af:0f:0c:4b:8c:d1:7a:d8:73:b4:a7:cf:05:32:22:
a2:f9:6e:e7:2b:dc:94:b4:1a:54:74:1f:36:4e:ff:
0f:2e:e8:5c:0c:26:4c:60:33:4f:ef:15:44:31:da:
ec:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:27:18:F6:48:2B:DB:01:FF:E3:CC:D7:41:40:2E:1F:77:81:45:89
X509v3 Authority Key Identifier:
keyid:BB:19:0D:10:2A:C9:60:3B:40:5B:36:37:4D:42:98:68:60:49:37:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/BScY9kgr2wH_48zXQUAuH3eBRYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.196.0/22
Signature Algorithm: sha256WithRSAEncryption
d1:9a:ba:e8:54:76:6f:08:41:36:8f:16:8e:87:a1:4c:f5:57:
77:19:d0:fb:d7:bb:a4:2b:b7:37:f8:86:4f:89:c0:1c:8a:88:
72:8f:fe:38:56:ec:17:b6:74:67:dc:5f:54:9d:64:5b:cf:ca:
8a:37:64:c2:44:5f:33:1d:6a:75:ef:a2:e0:40:45:27:43:57:
66:d6:92:5b:c5:a5:b1:f9:8c:08:2f:33:bf:f8:4b:45:07:1f:
84:bb:7c:2e:68:6e:ab:1d:ce:8d:8f:19:59:46:1f:cf:3d:fe:
42:44:04:cf:02:45:ce:d6:c1:bd:08:40:78:69:8e:df:b0:dd:
50:8a:d5:d3:07:0e:73:d6:6c:0f:78:14:ee:83:8f:df:6c:f3:
6f:8e:6d:74:c5:b2:10:10:46:da:ac:d6:59:24:ac:61:ba:9f:
ba:a3:55:97:a9:28:ff:94:db:4c:63:89:bf:4c:a7:bf:b1:e5:
fc:77:a4:e7:21:dd:d7:1d:00:61:2e:5a:e9:a1:5e:ab:4f:1d:
c7:5a:84:37:1a:47:f1:14:ba:47:63:3b:88:a8:33:6e:0f:92:
89:81:26:2f:d4:53:52:79:d1:4d:09:b6:06:18:76:37:ce:5d:
ca:6b:44:46:c4:9a:45:35:6e:4d:1e:e5:03:83:b1:c4:52:71:
84:76:0c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 12:56:34 2024 by rpki-client on console-ams.rpki-client.org