Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/BTW-MiA0M_LErBUIK0cyldXiIWo.roa
File: BTW-MiA0M_LErBUIK0cyldXiIWo.roa (raw, json)
Hash identifier: h+xLiBS5mauo014CW6NpeJEpQMst5C5uzLXk2DE0lGA=
Subject key identifier: 05:35:BE:32:20:34:33:F2:C4:AC:15:08:2B:47:32:95:D5:E2:21:6A
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 0192C21B8756C35ECF899F8CD7C3A93BC8C2
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/BTW-MiA0M_LErBUIK0cyldXiIWo.roa
Signing time: Fri 25 Oct 2024 05:17:16 +0000
ROA not before: Fri 25 Oct 2024 05:17:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3320
IP address blocks: 109.203.176.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c2:1b:87:56:c3:5e:cf:89:9f:8c:d7:c3:a9:3b:c8:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Oct 25 05:17:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0535be32203433f2c4ac15082b473295d5e2216a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b2:0e:b3:ad:5a:73:f0:49:1a:18:0d:ca:9d:
92:42:46:6b:64:c8:e1:e0:b8:ba:01:01:12:9c:a9:
01:6e:2a:70:bd:96:78:c0:3b:c7:52:16:7f:09:76:
2c:d7:bd:1d:54:68:d8:1e:cf:91:e8:29:19:f6:7a:
fc:e7:2d:4c:82:60:ee:da:62:48:89:cf:37:cc:ef:
b9:43:ff:4f:9d:5e:b6:26:b9:25:65:99:bb:9f:d7:
c5:eb:f5:44:5e:ec:c4:3e:eb:42:6a:42:1b:97:be:
7b:58:a1:a0:6e:c7:7c:75:1a:3a:64:9a:74:61:fc:
e8:b5:cd:6b:78:60:24:a7:46:8c:5b:34:5c:36:b7:
7f:96:de:05:60:8b:bd:e4:e2:f8:03:6a:30:73:b2:
d4:7a:19:6c:6d:df:da:02:21:cc:8a:f6:16:62:74:
8f:f0:81:5d:b6:bb:59:b6:37:36:56:32:84:44:8c:
8e:43:66:7d:a9:ba:6d:c0:3b:d7:e3:ee:79:3d:5a:
30:cc:92:9b:1b:21:24:ee:03:9c:82:a3:f0:b7:f9:
11:c7:58:72:62:0f:15:f3:79:a2:d7:51:a2:43:58:
9e:7a:5d:1f:9e:3d:20:4c:8c:f9:41:b8:f4:6f:3a:
b4:3f:41:bb:0e:4d:9a:c2:62:77:40:fb:4d:2f:e8:
bf:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:35:BE:32:20:34:33:F2:C4:AC:15:08:2B:47:32:95:D5:E2:21:6A
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/BTW-MiA0M_LErBUIK0cyldXiIWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.203.176.0/21
Signature Algorithm: sha256WithRSAEncryption
54:f2:e6:22:28:2e:25:79:e5:52:93:45:4c:d0:2f:c9:bb:6a:
04:71:37:6d:3c:b7:7b:92:27:de:22:ea:50:c5:ea:d7:aa:4e:
bc:5e:a3:d6:7c:f3:2d:43:7c:c5:cd:d2:37:c1:e9:9b:04:1d:
d7:36:c7:02:fa:68:95:dd:09:b6:a4:0e:4e:f6:9c:85:93:0f:
d1:0f:39:15:19:c8:38:68:11:a7:c6:ef:70:af:0e:cb:86:67:
61:84:27:8d:97:c8:fc:fb:b9:36:e7:a9:be:b5:e1:6a:75:fe:
67:cf:19:99:03:fe:db:f3:be:2c:18:12:9d:82:57:44:d3:00:
da:eb:81:1b:ea:01:68:0e:63:f6:a6:b1:1a:e8:a5:12:c4:bf:
96:bc:24:fd:c5:3f:aa:9f:8a:9f:b6:11:e8:57:6f:d9:ee:9c:
70:69:d1:ef:08:b1:e2:0e:26:fa:52:ba:d2:79:ee:76:75:19:
21:21:64:fb:18:e7:00:28:37:ba:a0:6d:72:93:4b:5f:8e:82:
b1:65:93:74:05:9c:f3:16:7a:62:42:9a:38:92:b2:b2:a0:92:
ba:4e:87:fe:f9:9a:ac:f7:91:f0:59:2e:d9:72:26:33:c8:31:
df:68:44:98:7c:01:3c:1e:d0:81:8e:90:f6:15:a0:4f:8b:1e:
88:55:4f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:20:46 2024 by rpki-client on console-ams.rpki-client.org