Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/bCH348E03rmWXRVgXl4UwQ81fK0.roa
File: bCH348E03rmWXRVgXl4UwQ81fK0.roa (raw, json)
Hash identifier: CyQP5qWaavjwSoSW6VH4WFNTKVvMYiVvSUUsbscu1Jo=
Subject key identifier: 6C:21:F7:E3:C1:34:DE:B9:96:5D:15:60:5E:5E:14:C1:0F:35:7C:AD
Certificate issuer: /CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Certificate serial: 018CCA994EA02FB7465AA737FA474B890576
Authority key identifier: 62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/bCH348E03rmWXRVgXl4UwQ81fK0.roa
Signing time: Tue 02 Jan 2024 14:34:53 +0000
ROA not before: Tue 02 Jan 2024 14:34:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206747
IP address blocks: 213.248.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:4e:a0:2f:b7:46:5a:a7:37:fa:47:4b:89:05:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Validity
Not Before: Jan 2 14:34:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c21f7e3c134deb9965d15605e5e14c10f357cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c3:79:af:2d:e5:b9:a5:61:65:f8:ae:c3:96:
36:3c:fd:d9:b4:f4:06:b6:7d:5b:d6:da:09:d8:c2:
1c:db:0b:bf:a7:1f:5a:e0:45:5b:88:f4:ab:57:23:
a1:2c:06:15:95:0f:c3:dd:a1:5d:c0:06:58:7f:c5:
2d:a1:41:e1:0b:63:df:da:b7:ff:bf:e5:36:8d:af:
1c:77:7d:ea:96:58:d3:08:a5:4b:cc:f7:2c:01:1d:
93:9c:a8:14:8e:f8:fb:da:74:42:8d:7e:f7:b2:84:
31:70:7f:76:aa:fd:14:e1:03:db:42:ca:3d:46:7a:
9d:15:e3:51:85:00:5b:f2:96:52:65:41:0c:cc:b5:
75:5a:b7:bb:ad:0e:3b:db:bd:8a:8f:37:77:6a:48:
0e:97:9b:44:68:a5:4f:d4:6f:9b:76:99:dd:fc:70:
67:b7:67:67:f8:84:57:d5:54:5f:81:a1:c6:d5:16:
0e:73:c5:48:41:ae:98:a3:39:56:23:ad:43:7a:47:
09:1a:53:84:ec:c0:3a:b0:df:bc:9d:79:e1:89:e6:
c3:79:47:31:fa:12:15:6f:cb:bc:3a:4d:8d:6d:4d:
0c:79:23:a4:0f:cf:db:c8:52:47:72:12:01:7f:8f:
dd:02:0f:94:da:84:9b:f0:06:11:09:35:cb:cd:87:
d3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:21:F7:E3:C1:34:DE:B9:96:5D:15:60:5E:5E:14:C1:0F:35:7C:AD
X509v3 Authority Key Identifier:
keyid:62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/bCH348E03rmWXRVgXl4UwQ81fK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.248.192.0/24
Signature Algorithm: sha256WithRSAEncryption
47:a1:ed:87:d4:15:8c:2b:ea:2e:e4:7b:c7:bd:4e:d1:d3:cb:
1b:c1:23:d8:52:a6:78:6a:04:de:1e:c3:b8:02:f4:b2:84:e0:
26:ef:e0:e5:15:9e:5c:cf:2e:b2:a4:bf:3d:75:b0:ed:4c:c1:
35:59:b3:75:d0:68:0d:02:eb:75:29:ae:60:44:b5:a3:bc:87:
d9:3a:53:46:19:b9:c9:cb:e9:60:d6:00:d5:a9:14:47:21:16:
1f:d1:05:27:b5:f4:19:8a:ea:af:a7:62:1a:0b:1a:8d:2b:ca:
da:e4:a8:da:88:a0:26:5f:ee:fe:cb:5f:b7:bd:a2:3b:39:96:
81:d9:cf:a1:c0:27:97:df:0d:07:0d:3a:02:fc:e4:de:e4:8e:
42:ff:fd:59:9f:c1:ff:37:5c:89:55:d5:78:43:d9:97:fd:82:
a8:9a:ef:d5:79:e5:00:62:b7:23:50:c6:bd:e0:df:a4:98:fa:
ac:00:14:3a:9c:91:98:c4:e0:ea:0e:d6:bf:22:32:cb:18:5f:
47:e1:e0:d8:51:21:b0:cd:af:8f:df:37:fc:8c:41:84:5c:a1:
7b:ad:99:1e:be:5e:97:39:0e:ad:d7:7f:f7:3d:68:2e:a6:e4:
66:c1:a2:83:16:4e:c6:ad:3f:c7:21:d9:a4:44:16:67:0b:3f:
df:99:77:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:45:24 2024 by rpki-client on console-fra.rpki-client.org