Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/BWa41T1lqcy7cxRxyAxlMziFIQ0.roa
File: BWa41T1lqcy7cxRxyAxlMziFIQ0.roa (raw, json)
Hash identifier: azftsiZpu2Mvo1P8HxqYLA821FmAwo97GFXu5NX6Kak=
Subject key identifier: 05:66:B8:D5:3D:65:A9:CC:BB:73:14:71:C8:0C:65:33:38:85:21:0D
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 018CC50151B2C1246EB4584DA1DF46B43B85
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/BWa41T1lqcy7cxRxyAxlMziFIQ0.roa
Signing time: Mon 01 Jan 2024 12:30:47 +0000
ROA not before: Mon 01 Jan 2024 12:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 53363
IP address blocks: 91.194.11.0/24 maxlen: 24
146.19.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:51:b2:c1:24:6e:b4:58:4d:a1:df:46:b4:3b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jan 1 12:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0566b8d53d65a9ccbb731471c80c65333885210d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ae:8d:81:9b:ef:51:11:54:1d:10:f2:57:d1:
40:2b:45:61:7e:7d:59:e5:d2:06:28:99:04:c2:88:
dd:d8:31:06:3c:1d:90:df:8b:f6:f8:ad:1e:99:64:
af:be:2d:05:22:9d:8f:c6:1c:d6:cb:7c:77:d9:01:
60:6a:bc:d4:0b:70:fa:fb:94:65:39:81:fb:d3:26:
54:a4:87:59:7d:8e:a2:4b:e6:76:53:02:cc:ae:64:
a6:58:c6:64:2a:38:a2:50:fd:ec:08:10:80:f5:d2:
30:42:07:83:17:7b:9f:b1:34:c2:d9:ed:1a:f8:97:
b9:7d:ce:e3:98:c6:cd:90:53:b3:c5:5f:e0:2e:c3:
23:d3:89:f4:03:af:92:6d:51:0a:e3:fb:32:4b:d6:
db:99:8d:5f:d7:35:1e:26:6c:6b:90:d1:a1:63:24:
ae:0d:a7:5f:b7:9f:9e:2b:33:ea:14:f0:f8:fa:89:
02:c1:bd:d1:33:a2:bf:94:5c:ce:db:8c:52:da:0e:
ee:52:f5:ca:c3:00:78:0d:19:1b:ea:b8:aa:20:be:
d8:c6:3e:85:92:63:10:e3:ca:49:b8:12:d3:69:27:
6b:4c:a2:94:8c:83:a2:d2:ab:03:2d:ad:43:11:36:
de:8e:04:28:e3:38:84:69:69:c1:c1:c2:31:fa:3a:
de:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:66:B8:D5:3D:65:A9:CC:BB:73:14:71:C8:0C:65:33:38:85:21:0D
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/BWa41T1lqcy7cxRxyAxlMziFIQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.11.0/24
146.19.106.0/24
Signature Algorithm: sha256WithRSAEncryption
e8:66:f6:f4:1f:26:5e:30:35:f6:cc:08:00:a3:2d:fd:81:82:
c8:03:67:3d:da:62:c8:0b:59:b7:2b:89:6a:ab:cf:78:4d:66:
0c:0a:2a:8e:ef:ba:38:6a:eb:5a:92:d2:65:54:76:98:89:25:
83:c1:e5:08:d6:ae:b1:44:12:bf:12:62:b6:e0:bb:a5:8e:e3:
86:2f:6f:c1:7b:8c:d7:33:02:9f:a8:13:4a:a0:f1:74:fb:4d:
c3:9a:1a:66:52:3e:97:3f:11:3d:a9:92:27:b6:7d:ca:92:78:
b2:cc:3c:59:39:1d:39:38:56:45:df:82:64:19:0a:62:a6:20:
df:d1:8d:ce:48:4c:f2:18:e3:73:29:c4:e4:5e:44:9f:7d:df:
4e:24:87:f7:50:8d:18:c9:b5:15:c8:60:ea:01:ef:3f:a4:02:
8d:ab:24:1c:fe:13:51:f1:04:00:8e:92:6b:75:54:0c:41:bd:
8f:99:74:19:fd:d0:70:5a:f1:5d:bf:20:9e:38:c3:ae:ad:8a:
67:56:53:3f:ed:cf:48:c9:e5:39:bd:f3:29:cd:86:35:11:7f:
ba:2d:54:0c:fd:58:b5:1e:72:33:e8:d2:f6:6a:70:58:a4:85:
4e:48:b5:a5:e2:7e:15:2f:2e:1b:e5:61:dc:6c:2f:e4:4e:34:
19:5c:7a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 18:24:43 2024 by rpki-client on console-fra.rpki-client.org