Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/23322a-a356-469b-87a6-546e2f5d7d26/1/BW4fujh8TthXw36hISnmCH5ZdNw.roa
File: BW4fujh8TthXw36hISnmCH5ZdNw.roa (raw, json)
Hash identifier: yRAvBi+Vs/ZDM3cLc3ZMFv/tlZQkZrXYPKtccDItCPY=
Subject key identifier: 05:6E:1F:BA:38:7C:4E:D8:57:C3:7E:A1:21:29:E6:08:7E:59:74:DC
Certificate issuer: /CN=ea60327c9e2a4e3e37d547b536143500d0a5dcb9
Certificate serial: 018CCA2AFAD8D49589061C997083FD4DF499
Authority key identifier: EA:60:32:7C:9E:2A:4E:3E:37:D5:47:B5:36:14:35:00:D0:A5:DC:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6mAyfJ4qTj431Ue1NhQ1ANCl3Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/23322a-a356-469b-87a6-546e2f5d7d26/1/BW4fujh8TthXw36hISnmCH5ZdNw.roa
Signing time: Tue 02 Jan 2024 12:34:23 +0000
ROA not before: Tue 02 Jan 2024 12:34:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62166
IP address blocks: 185.65.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/23322a-a356-469b-87a6-546e2f5d7d26/1/6mAyfJ4qTj431Ue1NhQ1ANCl3Lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/23322a-a356-469b-87a6-546e2f5d7d26/1/6mAyfJ4qTj431Ue1NhQ1ANCl3Lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6mAyfJ4qTj431Ue1NhQ1ANCl3Lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 22:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:fa:d8:d4:95:89:06:1c:99:70:83:fd:4d:f4:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea60327c9e2a4e3e37d547b536143500d0a5dcb9
Validity
Not Before: Jan 2 12:34:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=056e1fba387c4ed857c37ea12129e6087e5974dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b8:95:e2:9c:5a:cd:b9:8d:12:ee:3f:2a:6b:
65:ac:e8:a4:1e:d5:e0:cc:62:b3:df:93:68:58:ca:
4c:fa:9e:32:26:e6:5b:bc:b2:32:d5:d9:f8:45:7f:
1d:4f:cc:2f:9f:5d:b7:9c:d6:03:78:81:d2:17:28:
4c:52:b4:42:52:21:51:eb:e2:b9:30:ea:6e:85:e4:
b5:9d:b0:1f:cf:79:24:bc:ee:84:b9:84:46:33:a5:
e8:05:6e:d1:a5:ad:86:6f:2a:44:17:8b:03:68:f7:
92:27:81:66:90:ff:50:25:0c:d6:06:9d:c5:b4:82:
b1:42:ad:34:98:12:15:cc:68:97:2b:1e:0f:6c:dd:
02:a3:6c:d8:21:7b:df:e1:08:0d:7f:5e:ef:14:62:
76:aa:5c:a4:9a:11:ae:0c:ca:9c:b5:46:a4:0d:b2:
37:b6:dd:df:e2:df:bc:77:8d:03:ca:83:22:62:8f:
cd:91:44:3e:65:7c:b2:88:11:e4:4a:18:16:f1:0e:
60:0d:df:44:a7:35:bc:58:2b:ea:aa:59:ef:da:08:
a7:23:39:1b:4b:10:77:92:83:b5:50:f5:85:5e:d8:
c8:74:db:cf:e8:cf:69:15:d3:be:42:04:7f:e6:4f:
7c:ce:bd:f9:19:96:bc:dd:76:c2:0b:5e:9e:d5:18:
3f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:6E:1F:BA:38:7C:4E:D8:57:C3:7E:A1:21:29:E6:08:7E:59:74:DC
X509v3 Authority Key Identifier:
keyid:EA:60:32:7C:9E:2A:4E:3E:37:D5:47:B5:36:14:35:00:D0:A5:DC:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6mAyfJ4qTj431Ue1NhQ1ANCl3Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/23322a-a356-469b-87a6-546e2f5d7d26/1/BW4fujh8TthXw36hISnmCH5ZdNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/23322a-a356-469b-87a6-546e2f5d7d26/1/6mAyfJ4qTj431Ue1NhQ1ANCl3Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.106.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:7a:d6:91:38:89:86:b4:bb:e5:e4:5d:d0:85:6d:c0:8f:74:
60:f6:a2:a9:e4:16:8e:15:e2:7b:69:b5:6b:da:a3:11:25:f6:
70:63:c2:5c:ea:41:f8:07:53:3a:d0:2d:61:41:e3:9b:cb:e4:
b6:a4:6a:a5:76:24:18:5e:80:86:d5:f9:9f:48:18:99:c2:ad:
57:bf:e3:a0:19:df:38:6b:61:15:02:a4:34:85:e4:61:53:48:
84:2c:45:f7:6d:c4:25:5b:d3:3b:44:9e:6e:3e:9b:e0:3c:06:
42:9d:ca:6c:87:e9:47:49:c1:9a:19:3b:9a:a3:d4:8a:1d:b8:
86:1c:3c:05:a6:e6:4a:0e:13:f2:1e:8b:0e:29:5e:26:5d:04:
f1:61:93:08:54:dc:d6:d7:a6:e9:03:f3:c0:19:48:63:f7:45:
32:70:aa:54:8e:6a:72:53:35:6f:a9:a8:db:6a:6d:ac:2c:a5:
34:84:84:88:01:50:9f:5d:bd:05:9d:6b:f1:9c:19:af:99:98:
6c:28:81:1c:a6:e3:d7:af:77:62:89:76:27:0d:8b:dd:5b:37:
1f:2b:38:65:f4:c1:b9:15:7a:fd:64:95:64:74:a5:65:e1:de:
d4:15:55:52:67:4b:8c:b7:14:45:be:9b:c7:10:b4:42:be:cc:
37:62:5a:03
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKvrY1JWJBhyZcIP9TfSZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhNjAzMjdjOWUyYTRlM2UzN2Q1NDdiNTM2MTQzNTAwZDBh
NWRjYjkwHhcNMjQwMTAyMTIzNDIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTZlMWZiYTM4N2M0ZWQ4NTdjMzdlYTEyMTI5ZTYwODdlNTk3NGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLiV4pxazbmNEu4/KmtlrOikHtXg
zGKz35NoWMpM+p4yJuZbvLIy1dn4RX8dT8wvn123nNYDeIHSFyhMUrRCUiFR6+K5
MOpuheS1nbAfz3kkvO6EuYRGM6XoBW7Rpa2GbypEF4sDaPeSJ4FmkP9QJQzWBp3F
tIKxQq00mBIVzGiXKx4PbN0Co2zYIXvf4QgNf17vFGJ2qlykmhGuDMqctUakDbI3
tt3f4t+8d40DyoMiYo/NkUQ+ZXyyiBHkShgW8Q5gDd9EpzW8WCvqqlnv2ginIzkb
SxB3koO1UPWFXtjIdNvP6M9pFdO+QgR/5k98zr35GZa83XbCC16e1Rg/YQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAVuH7o4fE7YV8N+oSEp5gh+WXTcMB8GA1UdIwQY
MBaAFOpgMnyeKk4+N9VHtTYUNQDQpdy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNm1BeWZKNHFUajQzMVVlMU5oUTFBTkNsM0xrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8yMzMyMmEtYTM1Ni00NjliLTg3YTYt
NTQ2ZTJmNWQ3ZDI2LzEvQlc0ZnVqaDhUdGhYdzM2aElTbm1DSDVaZE53LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8yMzMyMmEtYTM1Ni00NjliLTg3YTYtNTQ2ZTJmNWQ3ZDI2
LzEvNm1BeWZKNHFUajQzMVVlMU5oUTFBTkNsM0xrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUFqMA0G
CSqGSIb3DQEBCwUAA4IBAQAOetaROImGtLvl5F3QhW3Aj3Rg9qKp5BaOFeJ7abVr
2qMRJfZwY8Jc6kH4B1M60C1hQeOby+S2pGqldiQYXoCG1fmfSBiZwq1Xv+OgGd84
a2EVAqQ0heRhU0iELEX3bcQlW9M7RJ5uPpvgPAZCncpsh+lHScGaGTuao9SKHbiG
HDwFpuZKDhPyHosOKV4mXQTxYZMIVNzW16bpA/PAGUhj90UycKpUjmpyUzVvqajb
am2sLKU0hISIAVCfXb0FnWvxnBmvmZhsKIEcpuPXr3diiXYnDYvdWzcfKzhl9MG5
FXr9ZJVkdKVl4d7UFVVSZ0uMtxRFvpvHELRCvsw3YloD
-----END CERTIFICATE-----
Generated at Fri May 17 04:31:31 2024 by rpki-client on console-fra.rpki-client.org