Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/bGv-bN0PeEoBb2DWYGbfVwxYLAA.roa
File: bGv-bN0PeEoBb2DWYGbfVwxYLAA.roa (raw, json)
Hash identifier: pTSO6JvzLTkLLsdGAwejAXxtksNQQ1002JBoFmJ+2Kg=
Subject key identifier: 6C:6B:FE:6C:DD:0F:78:4A:01:6F:60:D6:60:66:DF:57:0C:58:2C:00
Certificate issuer: /CN=d8d662dcc6fe3b81ef3de2fca3cfcedc11ebaa43
Certificate serial: 019315297FA96C0195BD375EE4DDBB449E6A
Authority key identifier: D8:D6:62:DC:C6:FE:3B:81:EF:3D:E2:FC:A3:CF:CE:DC:11:EB:AA:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/bGv-bN0PeEoBb2DWYGbfVwxYLAA.roa
Signing time: Sun 10 Nov 2024 08:21:01 +0000
ROA not before: Sun 10 Nov 2024 08:21:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200436
IP address blocks: 46.36.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 08:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:15:29:7f:a9:6c:01:95:bd:37:5e:e4:dd:bb:44:9e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d662dcc6fe3b81ef3de2fca3cfcedc11ebaa43
Validity
Not Before: Nov 10 08:21:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c6bfe6cdd0f784a016f60d66066df570c582c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4d:ab:79:67:92:3a:15:5e:fc:f1:73:76:0e:
22:98:79:27:97:42:ec:d9:ff:5b:a8:18:28:22:ab:
bc:67:2c:2a:cc:93:a2:a0:e6:9d:51:33:89:2c:d7:
47:6c:ab:40:4c:5d:45:98:8a:27:4d:69:a8:16:b8:
59:b6:8a:b3:1d:a9:f6:ac:42:9e:31:9c:1f:01:bd:
58:a6:60:b0:a7:87:99:4e:b9:6d:a6:38:85:42:bf:
cd:14:83:20:e6:e7:31:61:37:30:26:07:a1:f8:bc:
3b:71:c2:ec:a9:ad:27:5b:e8:94:b4:e6:c4:a6:f5:
5a:de:21:92:1c:71:f3:d2:e3:84:cb:34:d1:a2:5d:
3c:a7:e0:25:e9:c5:bd:61:6b:43:ae:14:89:27:77:
09:a1:6a:da:48:10:4c:16:a0:1f:b5:34:6d:70:02:
3d:4c:de:a5:36:1f:c7:57:ce:7a:68:d0:15:89:54:
3d:11:7d:b9:e4:74:0a:5e:3b:3a:c2:aa:c4:d7:90:
27:ca:6d:57:f0:e8:8a:54:48:e8:9d:26:2b:28:cf:
38:fe:e9:c9:59:4a:9a:a3:78:b4:65:b0:ca:4c:d9:
84:b9:f8:49:08:96:d1:d7:4d:2a:66:66:40:95:d1:
97:df:a3:e9:06:5e:23:17:ef:e1:43:3e:fd:1d:17:
1c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:6B:FE:6C:DD:0F:78:4A:01:6F:60:D6:60:66:DF:57:0C:58:2C:00
X509v3 Authority Key Identifier:
keyid:D8:D6:62:DC:C6:FE:3B:81:EF:3D:E2:FC:A3:CF:CE:DC:11:EB:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/bGv-bN0PeEoBb2DWYGbfVwxYLAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.106.0/24
Signature Algorithm: sha256WithRSAEncryption
93:72:e6:f1:d2:10:48:c6:15:31:13:4a:ce:f9:0b:de:ed:04:
6d:85:aa:22:54:37:a3:1b:6f:18:8a:39:6b:f3:05:f2:9b:46:
84:3c:02:51:03:38:7c:25:bd:8e:15:ba:f9:d2:45:f7:18:2e:
e6:4c:32:1e:2a:84:e2:85:d4:db:b0:9e:16:fa:10:92:b4:05:
4f:2e:2c:54:8b:e7:ce:9d:2a:c6:fe:d0:e0:3f:12:83:27:37:
35:54:2f:f3:82:8c:71:40:a4:00:71:97:a5:9c:ff:25:dc:44:
40:0b:90:e6:bc:23:2b:de:b6:15:58:6b:65:bf:61:48:2f:d3:
be:16:cb:84:c0:27:87:c1:51:91:08:be:57:57:64:07:3a:41:
af:01:d4:d7:8a:73:97:59:ec:76:f0:b2:9a:4b:b5:e3:9d:8d:
40:01:eb:50:57:52:50:66:da:27:10:d1:f6:a0:b6:e8:b6:df:
82:2e:2f:bd:21:a1:0a:af:a2:1d:d9:c0:1d:5f:a0:e1:71:d5:
5e:12:d3:bc:33:78:22:57:c8:03:b0:bf:2c:f4:57:25:c5:61:
df:e4:73:90:1d:08:49:89:26:58:c1:27:6f:53:97:68:7b:f4:
4f:83:dd:f2:bc:fc:01:a0:4b:36:ac:36:60:3b:cb:d6:dd:c0:
ad:ae:37:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:33:57 2024 by rpki-client on console-ams.rpki-client.org