Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/BPIxqhLCrJCG_lGKgKi50yKMVvs.roa
File: BPIxqhLCrJCG_lGKgKi50yKMVvs.roa (raw, json)
Hash identifier: qhK1yocou2kRuKfUswGjugkgurhdRzuvAoLSOV7Kr3k=
Subject key identifier: 04:F2:31:AA:12:C2:AC:90:86:FE:51:8A:80:A8:B9:D3:22:8C:56:FB
Certificate issuer: /CN=4dd1b2587490ad061cb207176bdeec81a531588c
Certificate serial: 018CC86F1EE8E84E69D355E456FFB1193E4D
Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/BPIxqhLCrJCG_lGKgKi50yKMVvs.roa
Signing time: Tue 02 Jan 2024 04:29:34 +0000
ROA not before: Tue 02 Jan 2024 04:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6774
IP address blocks: 80.231.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:1e:e8:e8:4e:69:d3:55:e4:56:ff:b1:19:3e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c
Validity
Not Before: Jan 2 04:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=04f231aa12c2ac9086fe518a80a8b9d3228c56fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:85:ff:fc:cd:2d:44:64:7a:16:07:c2:31:6b:
05:61:21:56:e0:79:66:b3:de:fa:0b:58:ab:b6:ca:
aa:74:96:fc:69:aa:6e:2d:6e:59:bc:ad:b6:53:81:
2d:29:fd:99:79:bd:70:2d:a4:18:90:8d:4c:7d:fd:
20:37:26:52:23:4e:e8:00:d6:b0:e8:fb:2b:b9:ba:
c2:28:8d:e6:53:12:85:9d:f5:a7:98:2e:42:47:a5:
3f:12:70:b8:63:f0:31:3e:c2:1f:90:26:f6:dd:74:
ff:29:95:13:41:02:21:35:4a:c3:64:85:28:13:fc:
51:44:85:04:32:66:31:35:85:2b:11:3b:2e:ce:5e:
c0:bf:c3:52:03:c9:fa:b5:ac:3d:01:f1:8d:58:9a:
9f:b7:d3:e9:9a:c7:2e:05:46:1a:93:3f:d6:db:69:
bf:9a:37:fd:29:54:db:7f:b5:81:dd:6e:00:be:78:
f7:78:7a:26:bc:04:d0:c1:41:0f:97:21:65:db:db:
2d:5a:6d:89:b1:af:d6:21:f3:ba:18:84:4e:84:a5:
e6:8e:5a:68:00:3b:de:fc:c2:20:bb:bc:b4:89:08:
e7:95:75:8d:e7:80:3f:df:6a:51:9d:20:33:71:a8:
4f:e1:83:34:ed:c2:e9:24:66:22:35:94:b8:b3:8a:
3b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F2:31:AA:12:C2:AC:90:86:FE:51:8A:80:A8:B9:D3:22:8C:56:FB
X509v3 Authority Key Identifier:
keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/BPIxqhLCrJCG_lGKgKi50yKMVvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.231.53.0/24
Signature Algorithm: sha256WithRSAEncryption
06:dc:7a:04:c7:2e:e9:1a:8d:5c:f9:9f:4e:f9:1f:f8:8a:ce:
d9:11:fd:1d:03:72:fe:46:60:41:f0:a7:68:00:b3:2d:e0:38:
0f:3e:32:23:5a:fa:a0:84:3b:00:ae:1d:c4:8b:e1:db:2d:45:
7f:76:c6:22:96:2b:c0:af:4b:e3:c2:a8:8a:34:41:e7:0c:8c:
57:75:47:b7:a1:89:c1:c6:f8:b1:9a:59:80:b0:7d:3b:c4:58:
1a:ae:d7:f7:8c:c0:d7:81:c7:1e:92:c4:e2:3e:62:2c:d9:8c:
37:f2:42:91:44:b9:9a:9f:19:74:9f:71:7e:aa:26:31:1a:a5:
5e:0b:fd:0c:b7:62:d6:a4:1e:82:ce:50:a2:44:b6:cb:5d:af:
18:55:7e:92:6a:7f:09:48:61:5d:22:da:ef:b9:f2:0c:ce:c6:
c6:3f:70:c9:00:c5:4b:fe:2c:c1:f7:dc:f7:d7:f1:f9:d0:47:
f9:a5:1c:7a:ce:99:9a:73:a8:ad:63:0c:2f:67:7f:8a:14:7b:
16:47:98:2a:bd:0e:3a:e8:27:da:57:b6:d0:d7:72:18:3d:49:
21:a1:ef:4a:e3:42:e8:f4:09:76:d0:2b:31:cd:5d:c0:f5:28:
71:43:07:f9:1b:eb:0d:0a:aa:14:8b:6f:c6:2a:04:31:0b:6e:
5c:ae:c7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:46:14 2024 by rpki-client on console-ams.rpki-client.org