Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/BglJepmkLUiiQ0LheXbXjPiCvLg.roa
File: BglJepmkLUiiQ0LheXbXjPiCvLg.roa (raw, json)
Hash identifier: xXcB+y9OHnftpL2fSRIkHTOlm6FZAMcau0ffKR5N1D4=
Subject key identifier: 06:09:49:7A:99:A4:2D:48:A2:43:42:E1:79:76:D7:8C:F8:82:BC:B8
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 018CC8DE19326A39CE47C836219D5CCC0534
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/BglJepmkLUiiQ0LheXbXjPiCvLg.roa
Signing time: Tue 02 Jan 2024 06:30:47 +0000
ROA not before: Tue 02 Jan 2024 06:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209181
IP address blocks: 95.214.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:19:32:6a:39:ce:47:c8:36:21:9d:5c:cc:05:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Jan 2 06:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0609497a99a42d48a24342e17976d78cf882bcb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:df:94:36:ad:b2:0d:6e:29:15:62:dd:24:81:
c1:5a:d7:2c:1f:86:44:b9:e7:0f:79:32:61:e4:93:
fa:09:f8:29:e3:b7:2d:e9:d4:70:8b:26:50:02:8b:
c7:88:be:e7:a3:f4:1a:d3:ff:a5:84:30:39:14:56:
c5:5f:40:7b:e5:a3:f9:d5:c1:21:8b:15:0b:19:2e:
75:5a:29:85:c1:26:a5:84:6e:80:0d:12:7f:ca:71:
0d:dd:93:d8:48:75:a9:57:30:e1:50:ec:ca:5a:32:
b7:90:fb:cd:38:ab:e5:43:b8:5a:04:a1:27:a5:c0:
8e:f8:3f:16:92:42:60:e1:4e:7a:a9:23:04:73:45:
3d:e9:6a:d3:e4:0d:a7:56:89:e6:07:17:50:cd:a8:
3d:03:93:13:90:0e:98:52:a2:0d:53:5d:a7:61:ec:
06:87:ae:51:39:ca:8c:c5:a2:09:22:ef:2b:1c:6a:
f5:51:80:4d:f9:9b:dd:63:db:6c:b6:ed:16:f0:ab:
4e:b8:1f:5c:9d:7e:ad:e7:f9:ab:2b:5c:50:02:d1:
4f:5c:d4:e1:66:24:bc:fd:3b:6e:fb:9a:a6:8f:49:
fa:3f:1d:e3:0d:d6:2d:66:1c:54:7c:f9:18:59:ed:
c2:41:a3:19:09:37:2c:17:f3:7a:91:3c:03:9c:dd:
ad:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:09:49:7A:99:A4:2D:48:A2:43:42:E1:79:76:D7:8C:F8:82:BC:B8
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/BglJepmkLUiiQ0LheXbXjPiCvLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.183.0/24
Signature Algorithm: sha256WithRSAEncryption
14:dd:d7:1a:5a:b5:f6:89:70:b1:be:d2:43:10:8d:c8:37:9d:
f5:b2:bb:b7:65:ca:05:cc:2a:d3:6b:f3:31:11:51:0c:b7:48:
ac:8b:e7:05:dc:61:37:7e:b9:6c:84:f4:df:a9:fa:6a:60:4f:
2a:06:54:7b:09:de:54:ae:db:b3:e9:0e:7b:73:6a:a9:07:ee:
12:c0:48:80:72:92:82:aa:c7:a3:53:2e:01:2a:79:96:06:69:
ff:e0:64:01:66:4f:45:84:87:a3:0b:01:5b:a5:bd:d5:7c:86:
54:22:ab:fe:c2:6f:84:bb:85:b9:c0:4e:dd:f8:a0:f3:46:28:
8a:a6:0c:2f:d7:b3:58:75:21:52:59:e8:30:7d:2d:a4:6d:89:
0e:b8:ec:7d:ff:62:7c:4f:88:5f:8c:f4:e1:50:68:13:2f:e7:
df:76:af:c0:06:e9:96:29:f1:e1:c1:17:d2:08:29:77:89:0e:
04:74:c1:c7:f3:5f:78:5a:05:98:20:cc:e0:47:96:ab:3a:0e:
39:01:a9:0f:b4:e7:69:02:21:56:1c:46:96:9c:54:02:53:ab:
c6:cf:aa:54:ad:38:3e:24:ca:b7:fb:d2:83:06:29:f1:7e:ab:
bb:08:b6:10:bc:29:1e:31:53:91:d7:f9:69:48:04:21:5c:67:
90:00:da:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:29:00 2024 by rpki-client on console-fra.rpki-client.org