Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/BIfFFHigx4hyfBIaXnnGD0dIj7s.roa
File: BIfFFHigx4hyfBIaXnnGD0dIj7s.roa (raw, json)
Hash identifier: LKmoxAMAUCK6ERwFzrpXp1nK6Mk25E5/iqI0G6M0w3k=
Subject key identifier: 04:87:C5:14:78:A0:C7:88:72:7C:12:1A:5E:79:C6:0F:47:48:8F:BB
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018CC56E098A939ABEEDD80602CCCB5EE38E
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/BIfFFHigx4hyfBIaXnnGD0dIj7s.roa
Signing time: Mon 01 Jan 2024 14:29:32 +0000
ROA not before: Mon 01 Jan 2024 14:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50673
IP address blocks: 146.185.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:09:8a:93:9a:be:ed:d8:06:02:cc:cb:5e:e3:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 1 14:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0487c51478a0c788727c121a5e79c60f47488fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:16:ce:c9:86:a1:34:0a:18:7f:11:5e:d0:ba:
8b:5f:c4:50:24:8a:56:fc:36:f8:c6:47:e7:cc:3b:
94:95:19:37:d9:2a:03:7b:0d:8f:52:c8:a9:5d:bb:
48:3e:24:ab:c1:7f:66:5c:3a:ed:b4:f1:cc:14:d0:
66:9d:0b:91:fe:e4:4b:b1:e4:aa:8c:83:97:8b:8d:
c6:5b:8c:77:60:59:af:5b:ca:e2:c6:67:4e:f1:e4:
bc:ee:44:c1:c4:37:69:c6:70:7b:86:cb:b3:63:4c:
9c:19:50:fc:a9:3f:ee:2a:64:03:29:73:ac:71:d8:
d7:e7:17:1e:a7:74:93:4e:4b:5e:62:df:ef:5f:7c:
74:1d:8f:21:c6:c8:56:f4:fc:4a:b6:e7:29:cc:09:
18:9f:59:92:c4:e0:74:68:9e:ec:9f:8a:39:ae:3a:
59:75:94:27:c9:7c:6c:d1:f5:31:86:f4:bc:3e:f1:
12:62:98:7f:7e:97:e2:b1:2f:21:0e:09:b2:9f:ed:
20:66:45:13:fd:d4:68:b0:11:c8:71:4b:6b:79:90:
4e:2e:e5:19:2c:ee:7a:82:11:46:f5:ff:cf:16:1d:
71:76:3d:aa:56:24:08:fe:c7:b1:db:5d:6b:c2:e0:
7b:0b:57:2e:6c:ca:0e:6b:e9:d6:05:0e:e2:9e:63:
11:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:87:C5:14:78:A0:C7:88:72:7C:12:1A:5E:79:C6:0F:47:48:8F:BB
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/BIfFFHigx4hyfBIaXnnGD0dIj7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.185.253.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:1a:8c:92:fb:59:35:28:1d:22:18:2d:11:a4:99:63:a9:eb:
8f:6a:8a:87:66:87:94:22:ce:d3:d2:d7:8c:9c:6f:90:6b:be:
3f:46:94:39:bb:24:4d:76:15:2e:b3:ac:f3:13:e6:00:76:97:
d7:3b:ba:7a:a4:95:14:fc:22:c1:72:b5:78:2f:9e:55:08:75:
87:30:ed:1e:f5:d2:2e:03:80:5e:8f:69:59:b9:c1:22:bf:e8:
3d:eb:e1:6a:fb:d9:e6:ef:9b:25:91:0c:d6:5b:34:c5:6b:b9:
7e:72:03:de:bf:9d:21:7f:5d:de:b3:88:45:19:71:1a:eb:6b:
87:6d:e2:77:8a:f9:e9:f2:1a:9d:dd:5b:48:f1:6b:a0:11:d3:
c7:34:15:27:b5:01:34:c4:e5:70:b5:d2:e4:df:0b:80:ba:67:
e9:c0:91:46:2e:c2:81:61:e0:7f:80:97:8f:3b:0d:73:b3:b8:
9c:47:1f:5d:52:f3:38:2e:32:2f:49:13:7f:9a:9d:2e:68:28:
a1:d9:e2:2a:00:75:19:7a:65:53:60:fa:f8:99:c8:00:33:1b:
09:96:42:94:e2:f7:51:ee:40:c3:14:ef:cb:75:91:55:0a:f2:
45:b8:19:5e:53:dd:01:69:80:4c:c4:89:20:b3:b3:d7:5c:5f:
84:14:da:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 14:48:13 2024 by rpki-client on console-ams.rpki-client.org