Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/BQstp821StdKNXq1EvmfT_E4cHM.roa
File: BQstp821StdKNXq1EvmfT_E4cHM.roa (raw, json)
Hash identifier: M4EVcZj7LPiMPcPJZ6nUpbdFciLXRMRUK+Z9EUOuYZ8=
Subject key identifier: 05:0B:2D:A7:CD:B5:4A:D7:4A:35:7A:B5:12:F9:9F:4F:F1:38:70:73
Certificate issuer: /CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Certificate serial: 018CC72723AC33A3F7049D8D493AAAB05151
Authority key identifier: 9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/BQstp821StdKNXq1EvmfT_E4cHM.roa
Signing time: Mon 01 Jan 2024 22:31:20 +0000
ROA not before: Mon 01 Jan 2024 22:31:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201713
IP address blocks: 185.233.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft
rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 09:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:23:ac:33:a3:f7:04:9d:8d:49:3a:aa:b0:51:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Validity
Not Before: Jan 1 22:31:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=050b2da7cdb54ad74a357ab512f99f4ff1387073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b1:5d:11:60:44:46:6a:c2:db:38:02:9a:b2:
83:ac:49:ad:85:6b:6d:a7:d1:08:0a:a0:49:51:8f:
a6:36:fc:c0:6f:dc:23:06:ce:75:42:02:55:fc:35:
4a:4e:c8:9f:06:83:20:66:71:10:c7:4a:8b:21:34:
69:91:4b:bd:f9:d8:84:4f:e0:e5:5b:16:d1:d6:51:
96:6b:0f:43:e4:a8:00:e2:bf:45:bc:ae:84:a0:34:
ab:a9:ed:f6:b5:53:a0:18:ec:8e:de:df:88:13:ba:
bc:0d:2f:fa:5f:90:97:69:6c:bc:26:c9:af:7e:78:
bb:66:7b:c9:94:de:19:5e:13:99:de:fd:3c:c2:a5:
fd:60:d0:44:84:3c:45:2f:b7:2c:80:34:20:cc:ce:
15:00:48:11:8d:60:45:b3:92:84:5f:2d:fc:8d:7c:
a6:b7:5f:ca:82:d9:2e:84:6c:09:b7:6d:17:69:e7:
9c:aa:04:b3:02:69:84:73:b1:69:20:14:bc:29:a9:
cd:a6:9b:86:23:5d:58:0f:d5:6b:d1:4b:bf:c9:03:
99:8c:b3:d5:0b:d5:bb:32:69:8e:43:3b:4a:18:de:
db:9e:16:18:7d:dd:3f:fa:1f:a1:c7:a1:76:21:94:
d3:05:aa:f9:8c:c5:43:6b:17:cc:58:50:50:16:e5:
bf:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:0B:2D:A7:CD:B5:4A:D7:4A:35:7A:B5:12:F9:9F:4F:F1:38:70:73
X509v3 Authority Key Identifier:
keyid:9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/BQstp821StdKNXq1EvmfT_E4cHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.244.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:91:f9:ee:fa:4e:97:37:66:14:47:7d:c1:d5:64:a8:df:8b:
08:48:85:29:74:65:82:42:84:3b:2b:f2:72:c0:c2:d5:9b:dd:
a5:8d:78:36:33:fa:7d:75:0e:b0:ee:21:40:7f:ac:72:57:be:
85:73:9f:54:be:2f:3b:f0:9a:c5:61:da:4d:63:ae:4f:c1:df:
dd:50:ed:be:38:08:97:ae:61:0f:12:04:dc:b4:62:db:26:fd:
0a:c5:20:e3:1f:2e:43:27:6b:84:b1:1d:a8:6b:ea:87:1d:c7:
60:40:06:ae:2c:5b:fb:ab:cb:02:98:04:5e:4a:bc:ce:6d:23:
7e:0c:6f:1c:d9:f3:f7:2c:5e:81:3b:6e:53:b6:bc:f5:40:7a:
c6:3c:d2:86:c3:35:d9:a8:d0:15:35:d7:f2:fa:3b:af:e6:02:
6a:32:e6:7c:d9:60:5c:52:84:8d:c0:d9:c1:9a:ee:1f:5c:0a:
c2:3e:1b:dd:0e:e8:0f:d7:93:42:72:ab:ae:45:13:1f:fc:29:
d7:51:4c:f8:92:8e:d2:ee:11:fa:48:10:fa:59:2f:ec:30:39:
d0:9d:69:1a:c8:b9:5e:8c:50:31:37:df:cc:83:f7:fc:79:dc:
a4:cc:6a:76:5b:eb:ae:f3:5b:76:a4:bc:db:4a:79:ba:ee:74:
8d:ec:33:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 15:26:25 2024 by rpki-client on console-ams.rpki-client.org