Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/bMgG-YKJdRlrtS6AMBxcdiRC7ZU.roa
File: bMgG-YKJdRlrtS6AMBxcdiRC7ZU.roa (raw, json)
Hash identifier: eiQIhIGfrHWjznQoqOUCj+ID7gpuyUMLFZdTGbOr80w=
Subject key identifier: 6C:C8:06:F9:82:89:75:19:6B:B5:2E:80:30:1C:5C:76:24:42:ED:95
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 0192ADBE84B37A4677BE927720C62385DAED
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/bMgG-YKJdRlrtS6AMBxcdiRC7ZU.roa
Signing time: Mon 21 Oct 2024 06:23:16 +0000
ROA not before: Mon 21 Oct 2024 06:23:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 89.31.122.0/24 maxlen: 24
185.195.67.0/24 maxlen: 24
188.214.35.0/24 maxlen: 24
2a03:f80:420::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Oct 2024 13:11:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ad:be:84:b3:7a:46:77:be:92:77:20:c6:23:85:da:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Oct 21 06:23:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6cc806f9828975196bb52e80301c5c762442ed95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f6:a3:b0:f5:b9:08:38:2e:8f:a9:ad:64:f7:
63:d4:c4:d5:3b:2b:99:d7:33:b7:9e:e4:33:1c:25:
b7:f3:61:72:4c:b7:32:db:b3:63:bb:c7:e7:74:77:
61:c2:9d:3c:12:d1:d2:e5:87:aa:3a:51:92:96:95:
f0:55:e3:b1:a6:05:58:5b:b8:e5:c8:38:83:3a:b7:
59:ae:e6:3a:01:a2:aa:25:04:0b:c5:e0:70:a4:e5:
09:57:16:28:01:dd:d4:a4:fb:a5:b8:fa:72:b2:04:
43:4a:c0:82:67:32:eb:90:3d:d8:54:51:00:89:e8:
cc:44:fd:b2:1e:eb:ae:f9:90:d1:42:13:3c:8d:9b:
6b:b2:1b:15:6c:22:93:ce:a6:73:76:2c:47:c9:0d:
2d:d4:e2:7c:7d:3a:61:2d:08:75:63:7f:77:8a:46:
ea:c1:69:72:ac:d8:82:96:29:75:d2:d2:2a:77:be:
6e:08:bb:a4:17:63:45:2a:a5:28:3d:41:e8:5a:ed:
a4:e5:2f:90:7a:2e:3a:39:d0:0c:fe:82:88:b9:57:
4c:ed:98:4a:f4:9e:62:9c:03:5e:be:3f:6d:17:cb:
1e:eb:44:e6:6f:b5:b9:8c:0b:5a:eb:69:87:1a:e6:
ae:39:15:35:e5:c8:d1:ca:1e:67:7d:93:87:52:d1:
4d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C8:06:F9:82:89:75:19:6B:B5:2E:80:30:1C:5C:76:24:42:ED:95
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/bMgG-YKJdRlrtS6AMBxcdiRC7ZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.31.122.0/24
185.195.67.0/24
188.214.35.0/24
IPv6:
2a03:f80:420::/48
Signature Algorithm: sha256WithRSAEncryption
0d:50:3b:ea:e5:0a:62:be:bd:75:3e:01:bd:95:a3:93:34:4f:
1c:5f:e7:fa:1f:46:28:17:fe:71:f3:20:ef:a6:23:87:e1:f4:
60:db:2d:7c:57:24:b4:2e:b0:2e:50:1e:3a:a8:9c:e5:a2:3e:
64:68:62:64:d4:a4:6f:b0:32:48:54:91:63:b3:ce:e2:f6:38:
b8:8b:bf:48:85:54:de:81:7e:00:57:f8:b9:5f:c2:b2:57:86:
d4:0f:a7:5f:4f:1d:09:17:59:3d:33:6d:c8:9e:b5:97:97:5b:
b6:a1:c4:53:59:b6:9b:ae:a4:0b:55:88:ce:76:c8:2a:e2:70:
bd:36:9d:f9:67:84:5f:07:03:e8:fe:79:40:f0:9e:d9:86:70:
e3:b0:21:29:3d:b4:07:8e:cc:78:c7:1b:20:af:eb:cc:14:7e:
51:ae:4a:0f:8f:4c:b3:5e:48:32:1f:fd:fe:c1:ed:2c:0d:e3:
30:12:4f:30:4b:71:85:17:67:43:1f:0c:6a:af:da:15:b8:cb:
08:6b:0c:f7:fb:d0:92:c2:be:9c:d3:4f:9e:35:b0:e8:d7:93:
33:be:0c:95:8d:b5:bd:1c:eb:58:e5:e0:89:7e:f3:01:2d:fe:
b8:03:2e:3a:55:9d:34:06:8e:bf:f2:83:6a:3e:24:10:53:8a:
e1:cd:52:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 18:57:34 2024 by rpki-client on console-ams.rpki-client.org