Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/Bkg2pm5q2fYJFQWV8GTjWK3GI4k.roa
File: Bkg2pm5q2fYJFQWV8GTjWK3GI4k.roa (raw, json)
Hash identifier: 3yswKjvcZEV1OZjckujfoBGmCCvoppTNrnGrFd/R27E=
Subject key identifier: 06:48:36:A6:6E:6A:D9:F6:09:15:05:95:F0:64:E3:58:AD:C6:23:89
Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial: 018CC3B73FC56E0557AD70FAF00C89650B45
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/Bkg2pm5q2fYJFQWV8GTjWK3GI4k.roa
Signing time: Mon 01 Jan 2024 06:30:15 +0000
ROA not before: Mon 01 Jan 2024 06:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212623
IP address blocks: 2a13:b487:4200::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:3f:c5:6e:05:57:ad:70:fa:f0:0c:89:65:0b:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Validity
Not Before: Jan 1 06:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=064836a66e6ad9f609150595f064e358adc62389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:74:84:7c:3c:89:57:3f:11:77:f5:85:39:88:
0b:da:47:6e:23:ec:4f:4d:2a:ce:ba:a3:37:13:c1:
e4:c3:bb:f7:34:b5:e3:17:e4:b5:4e:c5:f7:60:60:
e0:8b:31:46:97:2c:fa:71:9f:3c:52:63:36:d9:c2:
fa:39:be:55:f0:6c:0a:e8:00:fb:66:ce:c2:d3:eb:
b3:be:69:71:68:7c:b8:64:0d:1d:51:78:35:f2:87:
f7:0a:bc:23:bc:51:d0:b5:e4:9d:27:49:99:b0:7f:
b9:74:48:7b:01:b1:2f:61:20:12:e0:77:44:56:e3:
71:d7:48:24:57:c8:a4:64:ad:33:ee:c2:c0:33:a1:
13:b5:3c:4a:c7:f9:94:33:1a:01:29:47:fb:3e:77:
ff:8a:6a:69:da:98:71:ff:1a:c4:d8:67:79:f9:80:
6d:10:05:56:78:f7:e8:45:4b:11:69:76:f5:98:0f:
d5:85:c3:d6:81:83:c1:b6:82:0e:95:dc:36:3e:94:
6c:c7:30:62:8a:ed:45:69:b1:45:a5:6f:67:fd:13:
31:dc:6c:c8:56:12:78:eb:58:5e:09:71:74:52:c9:
01:41:1b:9f:05:64:53:f5:f8:0d:bd:03:1d:40:47:
fe:ea:4c:ee:c1:cd:e9:82:55:89:f4:e7:c4:8d:d1:
e4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:48:36:A6:6E:6A:D9:F6:09:15:05:95:F0:64:E3:58:AD:C6:23:89
X509v3 Authority Key Identifier:
keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/Bkg2pm5q2fYJFQWV8GTjWK3GI4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:b487:4200::/40
Signature Algorithm: sha256WithRSAEncryption
cc:79:48:5a:e8:f8:bc:53:d7:d8:aa:a1:18:ea:b2:23:e1:9a:
33:74:f5:13:88:b4:50:94:55:12:3b:88:a3:75:b1:16:7d:ed:
28:59:3a:c5:80:ef:21:1f:03:6c:71:0c:1b:79:2c:3f:ab:e2:
84:8b:0d:11:8a:3d:6a:93:ac:06:8b:8d:c4:cd:bc:53:db:30:
3c:0a:5f:45:77:b6:7b:55:cb:23:5d:2e:6d:85:30:14:07:8d:
3e:77:8c:e4:ac:b3:c9:cb:93:5b:bf:96:8e:a5:82:27:c0:00:
21:f9:39:a9:e8:1d:05:a0:bb:96:76:18:b1:c1:f2:2c:45:ab:
2c:7f:40:fc:b3:e3:dd:2a:13:fd:d6:14:e3:a1:c6:13:b5:7a:
21:55:66:77:77:37:9e:43:27:44:20:20:b6:3e:04:b7:80:25:
f3:e6:be:6b:0f:ab:f9:53:ca:c4:3e:32:4b:9a:e3:85:4c:bc:
95:38:d8:55:84:5d:0c:af:68:16:07:ad:30:dd:bc:d2:b4:08:
fb:7d:b3:eb:fd:14:03:af:55:03:69:7d:ec:15:f5:aa:bf:b7:
f8:1b:b7:72:cf:80:df:ae:00:46:f6:9f:60:29:8f:1d:b0:89:
db:09:35:cf:e6:6e:17:50:f7:40:7a:ab:63:00:71:6c:59:fe:
3d:da:46:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:09:29 2024 by rpki-client on console-ams.rpki-client.org