Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/bjcrCHtdrXXmJnzOZsOb4SnnFrg.roa
File: bjcrCHtdrXXmJnzOZsOb4SnnFrg.roa (raw, json)
Hash identifier: ojYZpze8edvwRUoS1vcS6H0YXzjZCsGNXwaIck5dH14=
Subject key identifier: 6E:37:2B:08:7B:5D:AD:75:E6:26:7C:CE:66:C3:9B:E1:29:E7:16:B8
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0192DEE374DB70F2280EF37021ECFD91226A
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/bjcrCHtdrXXmJnzOZsOb4SnnFrg.roa
Signing time: Wed 30 Oct 2024 19:25:01 +0000
ROA not before: Wed 30 Oct 2024 19:25:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 5.181.84.0/24 maxlen: 24
5.181.85.0/24 maxlen: 24
45.94.170.0/24 maxlen: 24
91.223.110.0/24 maxlen: 24
195.211.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:de:e3:74:db:70:f2:28:0e:f3:70:21:ec:fd:91:22:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 30 19:25:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e372b087b5dad75e6267cce66c39be129e716b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a0:59:09:7a:97:90:90:a0:32:6c:27:4b:db:
41:59:91:fb:de:64:16:f4:c7:f7:12:2d:55:07:d7:
40:48:b7:d3:23:7a:82:a6:0f:cd:a3:5f:98:a3:7d:
49:be:1b:b7:63:27:69:ef:8c:43:c5:27:1e:51:da:
9b:d2:da:bd:81:a5:02:73:f7:8f:7b:8b:bf:f7:e1:
a3:fc:71:20:83:b3:2d:80:47:4c:7d:62:0e:c9:19:
19:2e:31:02:62:30:fe:28:96:71:be:fb:73:81:bb:
d9:03:0d:a0:ca:a4:0c:6f:ae:62:25:2f:11:91:14:
ab:52:30:f3:64:39:9a:34:93:db:25:6b:ae:fc:10:
26:36:c6:be:a8:58:dd:67:74:a3:a8:37:69:da:c1:
c0:f8:a4:50:2e:40:31:a0:f0:9c:3b:af:e8:4f:2b:
ad:7a:a8:ab:2e:c5:53:78:10:a7:77:46:f7:40:9e:
75:b1:63:69:d1:ee:5b:3b:48:0d:8f:d2:d3:e0:e2:
4e:39:36:41:de:df:a8:48:3f:c9:a8:e2:ba:d0:93:
a7:4e:93:6e:b2:05:88:28:a8:a8:e0:68:47:65:36:
f9:5b:4e:5b:42:09:26:ff:f5:39:47:01:3e:e4:38:
f4:62:da:27:88:70:68:0d:12:b4:a2:95:e5:ed:71:
30:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:37:2B:08:7B:5D:AD:75:E6:26:7C:CE:66:C3:9B:E1:29:E7:16:B8
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/bjcrCHtdrXXmJnzOZsOb4SnnFrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.84.0/23
45.94.170.0/24
91.223.110.0/24
195.211.188.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:67:15:a3:eb:67:c5:75:16:80:d0:38:81:f5:6f:27:58:e3:
6e:5e:56:43:73:9c:85:1d:c5:00:cd:c4:39:21:d3:fc:ba:4a:
cc:f3:68:93:e3:00:cd:41:2e:94:f2:11:b6:44:4b:93:7c:55:
3b:c9:6f:3c:5f:8f:6c:ae:38:83:7f:8c:cf:34:fc:4b:2a:be:
b8:a6:b5:37:df:5e:b6:ed:30:86:26:a3:27:f2:0c:c7:b8:db:
ef:be:8f:c7:00:a5:54:e6:5a:e5:ca:1d:7a:37:fb:0b:f2:1a:
fa:91:e7:76:41:30:19:b2:f8:0b:35:cb:39:d8:eb:53:4b:e4:
54:05:72:a1:66:6f:0f:33:ee:4c:57:e6:9e:aa:54:a1:0c:6d:
63:09:5e:f9:ba:ef:bf:4f:e4:e2:45:a8:b4:89:01:99:f6:da:
e3:ac:2e:81:5a:53:93:8a:c4:78:1e:3b:24:23:55:6b:ec:9e:
bb:5c:dd:2b:69:c0:1b:56:9e:f5:9b:cc:4f:c4:4f:5a:e0:9a:
b0:51:3a:51:52:7f:56:15:e6:db:88:6d:91:d4:9d:f1:8c:e9:
ce:64:ea:6f:c6:f7:14:09:36:bb:31:25:9c:75:06:fd:d3:a5:
73:04:35:9a:0b:1e:bd:de:ae:f9:ec:8b:95:d6:48:58:09:37:
d8:bd:a2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:52:31 2024 by rpki-client on console-ams.rpki-client.org