Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/BFe5yiFUn0D1HOLzBsXMStcu6lo.roa
File: BFe5yiFUn0D1HOLzBsXMStcu6lo.roa (raw, json)
Hash identifier: CnWkE+4ssBFuD/IZs6CdrUKmGLo1nK9/KPzjEhTievo=
Subject key identifier: 04:57:B9:CA:21:54:9F:40:F5:1C:E2:F3:06:C5:CC:4A:D7:2E:EA:5A
Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial: 018CC6B936B8CC42C5C7D2F3038F66109DB4
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/BFe5yiFUn0D1HOLzBsXMStcu6lo.roa
Signing time: Mon 01 Jan 2024 20:31:16 +0000
ROA not before: Mon 01 Jan 2024 20:31:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42831
IP address blocks: 45.11.236.0/23 maxlen: 23
45.11.238.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:36:b8:cc:42:c5:c7:d2:f3:03:8f:66:10:9d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Validity
Not Before: Jan 1 20:31:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0457b9ca21549f40f51ce2f306c5cc4ad72eea5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5c:10:04:c3:ca:83:52:95:08:58:16:b6:30:
0d:2e:58:f3:9c:e7:49:ec:2e:16:3d:0c:8c:4d:e9:
db:7c:0a:eb:6b:00:61:a0:83:c3:86:db:da:bc:92:
24:9b:c7:d3:8f:2c:d9:44:04:5c:0b:b3:c8:cc:1a:
5a:a3:37:23:d0:86:a7:49:9e:aa:cc:28:52:e0:83:
ef:16:8e:32:b8:9f:8f:6a:0b:bf:43:9a:a6:fa:a3:
f7:7b:98:42:e4:f8:5d:3d:d3:df:4a:41:ed:c0:41:
d6:15:d4:f8:47:0c:89:71:fe:da:e8:1b:4a:ed:cc:
ed:e1:b8:2d:40:2a:07:a4:f0:58:06:ce:fa:56:66:
52:85:c9:97:03:f7:d5:4f:7f:d7:0e:9c:3e:b0:ea:
d0:cc:ab:75:4a:09:9d:d5:8c:2a:7a:ee:a7:11:f0:
32:98:20:d0:af:6f:5a:74:3b:2c:d0:d0:78:39:16:
2b:4b:9d:3f:d5:b4:4e:92:8e:62:c6:f7:e9:63:22:
67:4e:c0:84:42:8a:ef:4d:85:07:c7:99:ff:76:4c:
be:fd:3b:fb:dd:a9:d7:7a:8e:d3:8a:02:ab:fd:db:
c6:bc:85:84:dd:ab:c5:85:f3:b5:e0:fa:22:5a:7f:
a5:41:a5:98:7c:14:41:89:2f:d9:86:5b:ed:1c:67:
6f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:57:B9:CA:21:54:9F:40:F5:1C:E2:F3:06:C5:CC:4A:D7:2E:EA:5A
X509v3 Authority Key Identifier:
keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/BFe5yiFUn0D1HOLzBsXMStcu6lo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.236.0/22
Signature Algorithm: sha256WithRSAEncryption
73:2a:bc:27:cb:29:4d:c4:75:38:16:7d:12:8a:99:ff:cb:9a:
02:03:f7:24:a5:e6:14:a1:d6:7d:4e:05:41:eb:1a:1c:c9:92:
c5:ff:2a:2e:56:4d:ab:1e:bd:da:87:f0:b2:6d:b0:fe:0d:4d:
f3:ad:c8:fc:67:97:4b:a2:9b:85:c0:82:b2:ed:5b:74:a8:b4:
6d:73:12:af:01:1f:9d:16:ea:d3:1c:bf:c1:fd:75:e6:82:a0:
44:85:21:8f:b6:d4:73:60:08:90:2d:0e:c3:a5:fc:c4:c3:30:
32:29:a4:0b:18:a1:6b:72:a1:3c:e0:38:1f:60:50:39:05:0a:
db:dd:2c:60:a8:bd:e3:0b:94:e5:f6:b6:75:16:e7:b8:e4:18:
75:11:bb:53:38:90:3a:bc:8e:14:23:bc:f5:1d:1d:57:e7:d3:
66:ad:a9:b6:bb:67:f0:aa:58:ca:50:f7:37:7d:4a:4d:44:f3:
30:9b:71:15:f6:90:86:39:ef:9b:34:63:39:0a:83:af:08:07:
c7:32:ff:ce:c4:82:a3:58:23:81:26:90:ac:1c:d3:44:6a:dd:
87:88:71:07:28:54:4d:21:be:14:ec:78:b6:f7:49:05:85:79:
b4:da:69:34:ac:91:38:11:6a:67:89:74:25:98:26:55:44:69:
aa:e2:28:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:05:31 2024 by rpki-client on console-ams.rpki-client.org