Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/bmPmL0BoiUrEqHx31aBSAXlBFiU.roa
File: bmPmL0BoiUrEqHx31aBSAXlBFiU.roa (raw, json)
Hash identifier: Glf48AsI6LKm68EK2FRc4Sl4T9inugN/KzqOHWj1z3E=
Subject key identifier: 6E:63:E6:2F:40:68:89:4A:C4:A8:7C:77:D5:A0:52:01:79:41:16:25
Certificate issuer: /CN=bbd932f7064b1fde9a1225f332779fc22e673239
Certificate serial: 018EE0A2746DD33415BFD328CA1B453D4C0C
Authority key identifier: BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/bmPmL0BoiUrEqHx31aBSAXlBFiU.roa
Signing time: Mon 15 Apr 2024 07:22:06 +0000
ROA not before: Mon 15 Apr 2024 07:22:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1299
IP address blocks: 81.10.128.0/17 maxlen: 24
86.56.128.0/17 maxlen: 24
90.146.0.0/16 maxlen: 24
185.196.156.0/22 maxlen: 24
212.33.32.0/19 maxlen: 24
212.241.64.0/18 maxlen: 24
2a00:cf8::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 14:51:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e0:a2:74:6d:d3:34:15:bf:d3:28:ca:1b:45:3d:4c:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd932f7064b1fde9a1225f332779fc22e673239
Validity
Not Before: Apr 15 07:22:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e63e62f4068894ac4a87c77d5a0520179411625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c0:1e:61:fc:5d:e6:d3:c1:c7:f1:a9:a2:dd:
e6:2c:0a:ac:6b:78:51:13:7a:9b:00:07:e9:d7:08:
0c:b6:13:ed:4a:4c:7f:33:74:3e:0e:cb:37:a8:0a:
1e:38:af:54:60:c6:ff:45:63:f5:a0:3c:ba:ab:6c:
1a:82:f7:bb:e6:ee:2f:9d:e7:9b:a6:c6:54:bc:37:
59:9c:c7:44:fe:ae:39:c9:33:3e:7e:73:e3:4b:b5:
49:b6:75:68:a1:b5:98:47:02:10:fb:c2:1f:96:50:
de:89:27:2d:93:38:23:ff:ac:cc:1d:15:3f:4b:da:
bb:ed:d1:97:dd:8b:c1:7a:a1:a4:7b:1f:2b:25:e2:
84:05:61:9d:88:0a:f7:23:83:72:cd:90:e3:76:a7:
2b:ac:8b:c8:bf:74:e6:ff:0a:3a:07:66:7a:88:0b:
b7:55:68:56:8f:48:d4:e2:cf:b9:6f:1c:dc:1c:54:
13:bb:8f:4d:4f:c3:69:9d:1e:2a:cb:99:bd:77:9e:
b7:fc:f1:c2:e4:42:fb:fb:49:2f:29:fe:a8:54:75:
0b:c8:86:00:62:3c:c8:28:96:ef:b0:81:3b:42:a7:
07:39:b5:72:f0:78:2f:cb:cf:74:f5:f0:0e:13:20:
da:1b:81:a6:96:ba:eb:eb:58:b6:3c:b5:73:57:d3:
ef:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:63:E6:2F:40:68:89:4A:C4:A8:7C:77:D5:A0:52:01:79:41:16:25
X509v3 Authority Key Identifier:
keyid:BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/bmPmL0BoiUrEqHx31aBSAXlBFiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.10.128.0/17
86.56.128.0/17
90.146.0.0/16
185.196.156.0/22
212.33.32.0/19
212.241.64.0/18
IPv6:
2a00:cf8::/32
Signature Algorithm: sha256WithRSAEncryption
b0:97:9b:b4:46:09:0b:70:3b:d5:95:50:87:d3:89:6a:c5:75:
11:a2:d0:36:4b:13:9f:98:35:59:2a:65:cd:01:ff:f8:2b:6c:
7c:59:0c:1b:ad:24:0c:71:9c:5e:52:91:3c:e7:5a:26:db:9d:
86:87:35:ef:ac:ef:bb:4d:f9:4f:8f:f9:06:fa:43:f6:45:53:
1b:f1:cb:b9:64:4a:43:4c:79:95:4d:b5:2a:82:0a:d1:b7:a7:
b2:78:5f:69:3a:57:93:08:61:92:73:9e:1c:6e:3b:0c:8b:57:
53:46:27:be:be:38:27:63:65:89:48:07:64:04:9e:31:5c:f1:
5b:f2:db:ea:df:ee:e7:34:8a:b7:54:c5:65:21:2a:ac:a2:83:
d2:77:c0:02:76:1a:85:49:f3:e0:26:92:00:3b:8a:6e:9c:42:
73:b6:9d:14:49:95:4c:24:3d:a5:1b:6e:26:a7:01:ae:12:45:
09:a9:d3:89:4b:cd:8a:0c:f9:19:f3:26:13:35:88:ad:57:65:
f5:b0:3b:4c:4d:db:17:41:3f:bf:a9:7b:5d:e4:b9:09:fe:fc:
27:7e:c3:74:3a:e0:83:12:68:e8:9c:bd:2f:d4:99:42:1b:8d:
24:d5:4f:b1:f9:b7:cc:0c:e0:d6:3f:d3:bd:2e:a2:08:d3:0c:
9e:9d:85:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 19:37:55 2024 by rpki-client on console-ams.rpki-client.org