Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/BhnHfrEsrkNh5m_BTMqfOUhRUBU.roa
File: BhnHfrEsrkNh5m_BTMqfOUhRUBU.roa (raw, json)
Hash identifier: h63eQu5DQSeq1VXXhgj8m55iZvXtqmgMjIQhe9wIJKs=
Subject key identifier: 06:19:C7:7E:B1:2C:AE:43:61:E6:6F:C1:4C:CA:9F:39:48:51:50:15
Certificate issuer: /CN=89acb8893e94180747eec1975ed5604c4ddbe0c5
Certificate serial: 018CC94D62CBC21555C1980FB093B35DACBB
Authority key identifier: 89:AC:B8:89:3E:94:18:07:47:EE:C1:97:5E:D5:60:4C:4D:DB:E0:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iay4iT6UGAdH7sGXXtVgTE3b4MU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/BhnHfrEsrkNh5m_BTMqfOUhRUBU.roa
Signing time: Tue 02 Jan 2024 08:32:21 +0000
ROA not before: Tue 02 Jan 2024 08:32:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60917
IP address blocks: 45.158.0.0/24 maxlen: 24
45.158.3.0/24 maxlen: 24
45.158.0.0/22 maxlen: 22
45.158.2.0/24 maxlen: 24
45.158.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/iay4iT6UGAdH7sGXXtVgTE3b4MU.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/iay4iT6UGAdH7sGXXtVgTE3b4MU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iay4iT6UGAdH7sGXXtVgTE3b4MU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:62:cb:c2:15:55:c1:98:0f:b0:93:b3:5d:ac:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89acb8893e94180747eec1975ed5604c4ddbe0c5
Validity
Not Before: Jan 2 08:32:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0619c77eb12cae4361e66fc14cca9f3948515015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9d:30:79:43:67:18:5b:f6:d8:70:9e:35:1b:
03:bb:42:1e:4a:04:e7:10:07:14:f9:91:7f:89:4d:
7a:82:36:7f:b9:f0:20:9b:b7:f2:bf:a6:ff:45:0a:
89:83:60:fd:61:5a:76:e7:f5:00:37:01:fc:d3:e6:
55:7e:b8:c7:5c:c8:20:97:8c:61:8b:ae:af:dd:cb:
7f:f6:4e:87:93:c3:3b:23:b5:11:2b:17:99:04:bc:
8d:d8:e7:d4:7b:65:0b:83:48:b6:12:72:aa:12:d6:
fd:e2:7c:4a:f9:66:10:3b:d2:14:67:4e:40:ff:a4:
d3:a9:8e:49:d7:4f:9a:7e:72:f2:11:06:44:d6:a1:
b0:96:7d:f2:60:57:70:0a:61:f7:d4:de:df:6d:b0:
a8:5c:38:c4:9a:1b:9c:22:b5:37:7f:2d:bf:cd:0b:
88:1c:ef:f0:36:0a:47:5c:81:75:42:41:16:7f:0b:
35:27:8f:1f:45:d3:c3:c2:f2:fc:b2:b3:e7:b9:9b:
ef:34:9f:19:2c:70:d2:dc:6e:f7:3a:2c:5d:9f:57:
48:11:80:df:7c:c4:8b:cd:0b:3d:ab:fd:a0:04:45:
69:96:80:ce:07:45:e1:ed:47:35:9a:4c:c9:f0:b1:
bc:8c:83:77:b7:f9:0e:64:52:ea:17:61:0d:06:82:
ed:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:19:C7:7E:B1:2C:AE:43:61:E6:6F:C1:4C:CA:9F:39:48:51:50:15
X509v3 Authority Key Identifier:
keyid:89:AC:B8:89:3E:94:18:07:47:EE:C1:97:5E:D5:60:4C:4D:DB:E0:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iay4iT6UGAdH7sGXXtVgTE3b4MU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/BhnHfrEsrkNh5m_BTMqfOUhRUBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/iay4iT6UGAdH7sGXXtVgTE3b4MU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.0.0/22
Signature Algorithm: sha256WithRSAEncryption
86:7a:25:94:d0:f6:67:45:1f:d5:95:91:3e:49:4b:c3:86:72:
af:2e:02:da:ba:1c:a1:f7:72:25:0f:12:d8:d7:a6:72:c8:6e:
fe:4a:c2:bf:cf:6f:5b:04:cb:e2:fd:c2:1c:f5:f5:41:05:c8:
18:e9:35:ff:6f:28:69:94:37:89:ab:15:1d:f6:c0:6c:e1:11:
31:54:63:ad:de:75:b4:e2:95:78:79:2f:87:4a:6a:b7:8c:b3:
2f:5f:4d:b0:9a:98:47:68:8a:d1:cc:61:23:45:09:cb:8f:c2:
0e:39:ce:8c:35:4b:8c:81:80:03:f2:75:b1:5c:b6:ab:3e:2f:
71:6e:47:d5:34:e1:07:41:76:2d:09:71:4e:9c:73:52:80:74:
d3:d8:13:a0:31:52:d2:bf:4b:5e:07:e2:c2:e3:01:e6:43:be:
c4:64:01:67:b7:d3:aa:e7:bd:ba:43:c9:db:d0:af:24:9a:66:
b2:e1:f1:b2:e5:24:68:4d:1e:2e:4e:9b:11:79:00:f4:df:f4:
8f:bb:5a:69:2d:d4:f1:8b:26:3f:1e:80:5d:24:b9:63:21:3c:
76:db:41:f1:8b:b3:53:65:1f:f0:c1:81:e8:f0:36:05:43:f8:
f3:f6:9b:9e:89:3d:2d:20:96:9d:0a:e5:73:72:fc:11:88:7e:
cf:9c:d0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 07:07:04 2024 by rpki-client on console-fra.rpki-client.org