Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/BStEwSLDvPGiWcywvWvfjsEkOiI.roa
File: BStEwSLDvPGiWcywvWvfjsEkOiI.roa (raw, json)
Hash identifier: 3jq+7YEeLx1Swicb9uZbXi8H5mdyP2BYhgrNxOpAsvs=
Subject key identifier: 05:2B:44:C1:22:C3:BC:F1:A2:59:CC:B0:BD:6B:DF:8E:C1:24:3A:22
Certificate issuer: /CN=ced30c251141ddb648d05a2c284b33c87c517525
Certificate serial: 018CCA2B9ED413F6BF5EBC21105AA3D5D335
Authority key identifier: CE:D3:0C:25:11:41:DD:B6:48:D0:5A:2C:28:4B:33:C8:7C:51:75:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/BStEwSLDvPGiWcywvWvfjsEkOiI.roa
Signing time: Tue 02 Jan 2024 12:35:05 +0000
ROA not before: Tue 02 Jan 2024 12:35:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51193
IP address blocks: 91.216.198.0/25 maxlen: 25
91.216.198.0/24 maxlen: 24
91.216.198.128/25 maxlen: 25
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:9e:d4:13:f6:bf:5e:bc:21:10:5a:a3:d5:d3:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced30c251141ddb648d05a2c284b33c87c517525
Validity
Not Before: Jan 2 12:35:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=052b44c122c3bcf1a259ccb0bd6bdf8ec1243a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b0:42:b1:18:11:96:8f:21:d2:6d:4e:d1:bc:
bc:6a:6a:64:f7:9e:83:e3:0a:c3:46:4b:ff:dd:76:
83:10:b5:2e:57:61:18:5f:d8:26:3e:5c:1e:eb:fd:
97:d4:ee:31:9a:06:a3:93:9f:02:de:07:89:e0:43:
9b:95:98:53:39:0c:e1:fa:84:19:9f:ac:3f:da:e7:
fc:63:7a:37:55:3a:2e:b2:77:5b:20:cd:17:2c:e9:
77:a4:c9:99:c5:6c:37:c7:ff:f1:73:d0:c7:39:6e:
dd:4f:c2:4b:9d:63:db:b3:28:a4:07:fc:0f:8a:fc:
b3:4e:9a:09:a2:60:f5:9f:62:8e:08:be:08:ea:5a:
25:8d:f1:b9:1a:71:94:fd:66:33:bf:82:f5:64:c7:
82:af:62:ef:13:ea:fd:38:58:94:63:12:f0:e5:c1:
5e:0d:1b:1b:94:4e:81:26:d0:c3:3f:61:04:ec:7b:
f3:ec:d4:ce:c8:3a:75:f5:26:29:9c:05:06:7d:fe:
ca:17:d2:e4:e0:68:db:b5:b0:87:81:af:27:44:ea:
fa:1c:9a:42:1b:0e:5a:21:90:1f:16:13:67:68:ae:
7d:ab:0b:c6:61:11:47:81:d8:2a:9e:d3:ea:05:59:
cc:4e:17:ce:d8:f9:78:dd:c5:bd:72:93:7e:b3:1f:
e5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:2B:44:C1:22:C3:BC:F1:A2:59:CC:B0:BD:6B:DF:8E:C1:24:3A:22
X509v3 Authority Key Identifier:
keyid:CE:D3:0C:25:11:41:DD:B6:48:D0:5A:2C:28:4B:33:C8:7C:51:75:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/BStEwSLDvPGiWcywvWvfjsEkOiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.198.0/24
Signature Algorithm: sha256WithRSAEncryption
93:7d:11:8b:0f:dd:4d:b6:0c:28:19:84:c8:d3:eb:0e:19:db:
9f:1e:b9:50:98:41:b2:3b:2d:37:8d:6b:de:6f:37:c8:72:d3:
0f:aa:32:dd:73:00:c1:d4:aa:67:d6:98:f6:cd:3b:ba:c2:c0:
ca:40:4a:1a:77:6a:a7:56:cb:9f:0e:2d:ac:01:de:35:65:52:
47:62:2c:44:5e:76:6c:a4:25:a3:3b:7d:ef:bf:ed:be:a7:a4:
3b:08:36:44:7b:9a:37:ee:d5:33:d2:91:0c:67:ed:62:43:93:
91:ba:62:ca:61:2e:23:b1:02:ba:87:18:64:3e:32:b9:9d:f1:
37:2f:00:e2:3f:b9:f1:e6:04:65:49:1e:2d:70:ab:47:78:ae:
0c:81:b4:ab:a0:80:92:2d:54:ab:d6:77:36:ef:3d:93:4a:8e:
31:f1:ed:68:e0:86:f1:b9:76:fa:d7:5a:14:bd:d8:f1:ea:f0:
b5:10:4a:8b:ed:b7:03:9b:6b:b0:50:01:44:7a:88:ed:f6:e3:
4f:db:19:dd:51:25:8e:95:6a:52:89:e3:e6:db:a7:e3:9c:d5:
c0:fc:50:8e:53:39:03:81:e5:8d:73:13:50:49:9b:0f:17:76:
3b:b5:81:48:7e:d6:86:67:87:4f:b3:8a:62:dc:d1:4d:f6:83:
69:a6:a4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 00:10:30 2024 by rpki-client on console-fra.rpki-client.org