Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/bb-Rk5oZtp94IQVhU9o71QNJpRI.roa
File: bb-Rk5oZtp94IQVhU9o71QNJpRI.roa (raw, json)
Hash identifier: klaYXXv9C1nY1tiTOEqVjeVa3ez5w+mKgAmLFYoihJ0=
Subject key identifier: 6D:BF:91:93:9A:19:B6:9F:78:21:05:61:53:DA:3B:D5:03:49:A5:12
Certificate issuer: /CN=37ed49efac9795987771acdc77a0e228904277ad
Certificate serial: 018DA8C8B58972ED2B0C8148745F5FF213A6
Authority key identifier: 37:ED:49:EF:AC:97:95:98:77:71:AC:DC:77:A0:E2:28:90:42:77:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-1J76yXlZh3cazcd6DiKJBCd60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/bb-Rk5oZtp94IQVhU9o71QNJpRI.roa
Signing time: Wed 14 Feb 2024 18:02:22 +0000
ROA not before: Wed 14 Feb 2024 18:02:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215540
IP address blocks: 109.172.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.mft
rsync://rpki.ripe.net/repository/DEFAULT/N-1J76yXlZh3cazcd6DiKJBCd60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Jun 2024 19:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a8:c8:b5:89:72:ed:2b:0c:81:48:74:5f:5f:f2:13:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ed49efac9795987771acdc77a0e228904277ad
Validity
Not Before: Feb 14 18:02:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6dbf91939a19b69f7821056153da3bd50349a512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d6:2c:10:54:d8:36:45:39:54:d6:f3:33:40:
f5:ee:79:d5:bc:61:3a:61:13:59:d2:f4:c2:de:9d:
20:4e:f4:a6:f4:ac:8a:80:05:11:c2:28:3f:79:6e:
28:2f:e3:b6:a4:52:4f:c7:b5:35:6b:89:78:89:a6:
37:ca:fc:3e:65:32:c0:1a:9a:b8:cb:35:27:d6:b3:
c6:ef:f5:3a:c6:0d:82:0d:ab:bc:cb:ac:53:74:04:
ff:b3:0b:45:01:74:63:21:82:6c:8d:45:d6:de:7e:
7c:f1:79:5d:32:a7:d5:82:8b:89:7d:fb:18:04:71:
51:f4:e6:4a:30:3a:96:af:5c:82:a8:04:cc:82:09:
6e:1b:12:a3:f2:44:46:54:6a:a7:32:97:73:56:49:
a7:a4:86:92:33:6f:20:5b:4d:5b:68:1c:0b:c4:59:
b1:05:bb:3f:ff:9c:19:f3:f9:18:52:a4:cc:c2:9b:
39:34:2a:17:34:55:10:e5:4a:15:80:69:bc:dd:d6:
d0:22:26:01:fb:5e:9c:5f:e1:f2:c1:84:aa:dc:da:
ca:d3:59:b2:32:de:ed:88:f0:f7:5b:b0:a2:dc:1c:
5f:91:f7:e0:ac:a5:7f:5f:f9:93:67:bc:d0:71:05:
e6:e5:87:a4:8c:ef:dc:90:93:de:0f:3e:bc:47:ce:
9a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:BF:91:93:9A:19:B6:9F:78:21:05:61:53:DA:3B:D5:03:49:A5:12
X509v3 Authority Key Identifier:
keyid:37:ED:49:EF:AC:97:95:98:77:71:AC:DC:77:A0:E2:28:90:42:77:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-1J76yXlZh3cazcd6DiKJBCd60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/bb-Rk5oZtp94IQVhU9o71QNJpRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.172.92.0/22
Signature Algorithm: sha256WithRSAEncryption
35:ec:ce:dc:9e:60:a9:49:9a:1b:38:40:49:71:99:3f:c9:b9:
bd:9e:86:4b:22:15:ca:85:a6:59:68:6c:9c:88:2d:3a:0e:08:
64:b9:c7:be:3c:85:2e:db:b2:2f:b1:67:6d:9c:48:ab:bc:67:
33:31:be:c2:d4:3e:6d:7e:19:3e:ec:1f:0b:3e:31:27:cd:4c:
11:b2:61:5b:c0:60:e0:7b:c2:bb:df:48:92:98:20:d0:96:f3:
c3:51:e7:34:a9:3c:6c:ba:d9:a8:d9:1f:fa:7c:42:6b:3a:44:
82:6c:8c:80:5c:a1:62:cb:7a:c6:60:4e:6f:ee:ee:05:a6:cf:
41:7d:8e:76:48:31:85:e2:04:5c:81:e3:e2:6c:ba:f1:bf:80:
4c:74:5f:df:ba:41:4c:ab:b7:ea:05:2c:79:83:ab:af:b4:58:
da:66:8a:12:93:ba:d0:59:e5:22:34:36:6b:f1:1d:a5:54:d9:
55:da:f5:e7:76:ff:02:c2:0b:e9:76:da:0c:01:3c:7c:7f:a2:
37:2c:f7:82:01:44:ff:65:8a:9d:02:ae:69:68:53:99:e8:53:
60:c7:4c:0d:3b:da:4a:ef:8a:46:5b:aa:3d:19:16:6f:1c:c5:
37:37:8f:ea:7c:b1:bf:e7:b2:45:c0:ad:85:a0:de:67:0c:73:
e5:bc:63:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 04:26:39 2024 by rpki-client on console-ams.rpki-client.org