Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/BDCxok-rMxNDGEIVP7mTHh10ZgY.roa
File: BDCxok-rMxNDGEIVP7mTHh10ZgY.roa (raw, json)
Hash identifier: ShXc/ye9kHe1aoSJc6TiaZrn4GtpjIy+tWMH5ppmtB0=
Subject key identifier: 04:30:B1:A2:4F:AB:33:13:43:18:42:15:3F:B9:93:1E:1D:74:66:06
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 018CC4256E0F7BEBF1CC7A121F589664A3DE
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/BDCxok-rMxNDGEIVP7mTHh10ZgY.roa
Signing time: Mon 01 Jan 2024 08:30:36 +0000
ROA not before: Mon 01 Jan 2024 08:30:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210632
IP address blocks: 2a0b:b87:ff13::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:6e:0f:7b:eb:f1:cc:7a:12:1f:58:96:64:a3:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 08:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0430b1a24fab3313431842153fb9931e1d746606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e3:1b:29:1f:ac:f6:28:d1:34:36:17:c9:d3:
e0:4b:42:71:ea:4e:19:26:5f:7e:0a:1d:07:c2:8b:
4c:0c:24:71:af:74:a5:9b:a1:9d:68:ee:bd:7c:f7:
af:b9:96:e0:27:d6:f8:c3:70:c7:b3:64:04:9a:c7:
42:1f:13:b0:e3:5f:b6:79:66:69:7a:6e:19:74:81:
57:55:e6:e8:45:3b:30:be:10:55:5b:cf:ad:11:50:
c9:ef:01:f7:cf:53:b2:c5:24:88:d0:b5:61:45:14:
1d:1b:64:29:06:f0:10:8c:1b:11:ff:7a:fd:51:40:
bd:e6:28:c9:ff:50:e6:ed:23:0a:8d:55:d7:c1:dc:
65:ca:c2:90:b1:11:03:cf:ec:7f:b0:ef:71:9c:ee:
df:bc:94:90:0f:06:90:38:c4:2a:90:23:cf:7f:8b:
da:7e:04:79:c3:e0:cc:9b:02:04:6c:ef:d5:72:ea:
87:b6:47:79:3a:44:6a:7d:ed:13:d9:02:0b:47:d4:
b9:18:8a:02:03:42:82:11:9e:0b:70:0b:15:46:79:
b0:49:8f:00:40:e0:5a:ed:0b:10:3f:a9:46:4c:19:
3e:9b:c1:ce:8d:6b:7e:8b:41:6a:b2:35:af:18:c6:
b6:11:59:fd:15:39:10:a5:bd:17:94:f8:e2:28:7f:
97:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:30:B1:A2:4F:AB:33:13:43:18:42:15:3F:B9:93:1E:1D:74:66:06
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/BDCxok-rMxNDGEIVP7mTHh10ZgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b87:ff13::/48
Signature Algorithm: sha256WithRSAEncryption
18:10:f6:16:aa:bc:b0:51:21:bd:04:aa:0b:49:ce:e3:1a:0b:
e3:9f:88:81:47:96:ee:84:ec:01:f1:0d:2e:3d:4e:ff:83:48:
f1:b9:22:44:1b:ca:fd:9d:8f:48:21:38:1c:26:c8:10:2b:9f:
53:5f:e8:83:c1:b5:76:f7:59:49:ba:87:a1:46:e5:84:cc:15:
9f:57:62:5c:3d:54:00:5b:e4:90:12:96:0f:e3:8b:55:bc:0a:
b1:09:90:f9:6d:b8:d8:96:0a:39:63:63:9e:08:dd:34:e5:3d:
c1:71:1a:18:29:7f:3a:c2:06:b9:30:0a:ef:28:6a:0d:73:10:
02:d1:06:f6:ce:15:9b:8d:16:6f:53:f4:2a:ce:37:dc:21:c7:
f4:82:95:95:5b:78:42:2e:92:cd:a8:c3:16:76:69:9b:30:cd:
36:3d:c5:0d:a6:dc:06:66:fb:f8:7b:7b:9b:c5:b7:f2:80:52:
08:74:34:a0:f4:11:a3:2d:6a:9a:38:98:e2:81:0f:54:9d:9b:
ae:b6:79:18:13:5c:21:12:47:b2:fe:cf:d2:20:38:78:83:c3:
f7:85:6b:2e:0a:3b:c8:6f:42:fb:63:c3:a9:56:b3:37:bd:a4:
a4:5e:1e:96:ab:58:8f:bf:8d:de:7c:98:50:65:bf:45:eb:20:
fd:65:63:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 19:33:28 2024 by rpki-client on console-ams.rpki-client.org