Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/bGl_gyUdYgbAehDA5bwR3-IQ_-0.roa
File: bGl_gyUdYgbAehDA5bwR3-IQ_-0.roa (raw, json)
Hash identifier: fkCx75ReE6XX+mPRssHRUqg/jo+Fe+kiIwsPWn9+IoE=
Subject key identifier: 6C:69:7F:83:25:1D:62:06:C0:7A:10:C0:E5:BC:11:DF:E2:10:FF:ED
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 018CEEA721A41121F1C7E23DBE3ABDBCEA29
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/bGl_gyUdYgbAehDA5bwR3-IQ_-0.roa
Signing time: Tue 09 Jan 2024 14:36:19 +0000
ROA not before: Tue 09 Jan 2024 14:36:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 109.107.155.0/24 maxlen: 24
194.39.110.0/24 maxlen: 32
45.89.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ee:a7:21:a4:11:21:f1:c7:e2:3d:be:3a:bd:bc:ea:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jan 9 14:36:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c697f83251d6206c07a10c0e5bc11dfe210ffed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:3c:b6:67:5f:b6:f9:9d:40:06:e5:d1:96:ab:
49:f0:24:b4:ed:72:fe:08:2d:6f:ec:e7:eb:25:e5:
18:2b:7d:f6:e8:fd:e8:bb:8b:c6:73:98:30:11:a8:
4c:38:e6:b9:9c:2c:07:a8:e8:4b:89:d5:f0:4a:f3:
b7:b9:92:ed:f6:83:fb:97:e9:2f:68:42:22:83:66:
47:bd:e9:e8:3d:dc:a2:1b:89:85:2e:75:e5:4b:be:
48:e8:8c:e7:ef:b5:d5:1b:be:c6:f0:6e:bb:a8:24:
a8:6e:41:53:22:09:56:88:90:58:2d:bf:e1:d4:7a:
43:e8:9f:02:a3:14:84:90:7f:16:ca:00:fd:90:82:
db:57:ee:5c:8c:78:ce:3d:b0:88:e1:b7:7b:f1:f4:
fa:e9:e3:36:aa:84:02:13:86:4c:89:27:06:7a:77:
8a:0f:70:26:69:68:5f:90:7a:7d:ef:0a:f7:03:74:
c6:5c:c0:d6:2c:b8:aa:98:84:82:75:48:3b:7b:e0:
81:ad:92:cc:02:90:fa:fb:d8:9b:e8:d2:31:25:3b:
64:50:bf:65:af:71:41:c0:73:d6:85:99:29:4f:49:
be:f7:2c:b7:44:ee:25:4a:c6:55:dd:3e:f9:63:c3:
84:3e:59:86:e0:eb:11:a7:3a:e6:b1:ba:a6:43:49:
02:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:69:7F:83:25:1D:62:06:C0:7A:10:C0:E5:BC:11:DF:E2:10:FF:ED
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/bGl_gyUdYgbAehDA5bwR3-IQ_-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.62.0/24
109.107.155.0/24
194.39.110.0/24
Signature Algorithm: sha256WithRSAEncryption
21:c7:5b:88:7d:fd:72:59:23:95:ac:66:36:7a:3a:bd:92:44:
26:eb:8a:dd:3c:8f:35:9e:03:cc:e2:6c:39:a6:1b:f2:d5:de:
f6:a7:7e:32:b1:60:e3:8a:4e:8b:73:06:a1:bc:29:d4:ca:88:
8a:f5:2b:d1:bf:c7:de:0c:01:73:44:e8:b3:48:a6:a8:d3:b3:
f4:ac:75:5b:7d:28:da:f6:78:cb:0e:2b:06:b8:2e:85:d1:59:
b0:4d:c5:6d:8b:4e:dd:f0:a3:8b:a4:3b:01:ee:23:27:f4:0b:
63:5b:85:7d:9d:b5:af:bb:34:40:43:70:a6:1e:4b:0f:2a:51:
39:0d:58:b9:45:04:8b:3b:db:cf:ca:18:c6:e2:f6:45:a1:43:
74:80:4f:61:b7:62:b9:7f:19:1e:e5:10:e7:f2:c0:9a:17:9c:
6a:7a:9a:fb:4c:e4:02:90:b6:b2:ae:5e:7d:16:42:50:fd:0c:
b6:ae:7f:49:d5:4a:4b:94:49:73:a4:e6:54:95:45:f2:b2:9d:
19:31:69:9b:17:c2:03:51:09:f1:1c:67:cd:d5:62:82:12:74:
db:f2:5d:4b:ad:c3:4e:fd:d7:a5:ce:72:b3:d4:81:d3:f1:ed:
11:56:e7:c6:5f:de:69:b8:8b:ea:c3:75:77:2d:c9:90:36:87:
01:db:c9:bf
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzupyGkESHxx+I9vjq9vOopMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl
OTU5ZDgwHhcNMjQwMTA5MTQzNjE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzY5N2Y4MzI1MWQ2MjA2YzA3YTEwYzBlNWJjMTFkZmUyMTBmZmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Dy2Z1+2+Z1ABuXRlqtJ8CS07XL+
CC1v7OfrJeUYK3326P3ou4vGc5gwEahMOOa5nCwHqOhLidXwSvO3uZLt9oP7l+kv
aEIig2ZHvenoPdyiG4mFLnXlS75I6Izn77XVG77G8G67qCSobkFTIglWiJBYLb/h
1HpD6J8CoxSEkH8WygD9kILbV+5cjHjOPbCI4bd78fT66eM2qoQCE4ZMiScGeneK
D3AmaWhfkHp97wr3A3TGXMDWLLiqmISCdUg7e+CBrZLMApD6+9ib6NIxJTtkUL9l
r3FBwHPWhZkpT0m+9yy3RO4lSsZV3T75Y8OEPlmG4OsRpzrmsbqmQ0kCmQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFGxpf4MlHWIGwHoQwOW8Ed/iEP/tMB8GA1UdIwQY
MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt
NGJkNjNhZGM3MzU0LzEvYkdsX2d5VWRZZ2JBZWhEQTVid1IzLUlRXy0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0
LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALVk+AwQA
bWubAwQAwiduMA0GCSqGSIb3DQEBCwUAA4IBAQAhx1uIff1yWSOVrGY2ejq9kkQm
64rdPI81ngPM4mw5phvy1d72p34ysWDjik6LcwahvCnUyoiK9SvRv8feDAFzROiz
SKao07P0rHVbfSja9njLDisGuC6F0VmwTcVti07d8KOLpDsB7iMn9AtjW4V9nbWv
uzRAQ3CmHksPKlE5DVi5RQSLO9vPyhjG4vZFoUN0gE9ht2K5fxke5RDn8sCaF5xq
epr7TOQCkLayrl59FkJQ/Qy2rn9J1UpLlElzpOZUlUXysp0ZMWmbF8IDUQnxHGfN
1WKCEnTb8l1LrcNO/delznKz1IHT8e0RVufGX95puIvqw3V3LcmQNocB28m/
-----END CERTIFICATE-----
Generated at Fri May 3 02:07:40 2024 by rpki-client on console-fra.rpki-client.org