Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/bh-kpbZlQOlVFbn7aPxnueHIB-s.roa
File: bh-kpbZlQOlVFbn7aPxnueHIB-s.roa (raw, json)
Hash identifier: FWtr1jgysolO262jJKy/Sg2mGivDc9WOTQTjJR3OlBo=
Subject key identifier: 6E:1F:A4:A5:B6:65:40:E9:55:15:B9:FB:68:FC:67:B9:E1:C8:07:EB
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 018CC79445C1534113B13D3EB9B66DC0C023
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/bh-kpbZlQOlVFbn7aPxnueHIB-s.roa
Signing time: Tue 02 Jan 2024 00:30:32 +0000
ROA not before: Tue 02 Jan 2024 00:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 36040
IP address blocks: 194.122.80.0/22 maxlen: 22
2001:680:4004::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:45:c1:53:41:13:b1:3d:3e:b9:b6:6d:c0:c0:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jan 2 00:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e1fa4a5b66540e95515b9fb68fc67b9e1c807eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8b:b6:bb:48:41:71:fc:3c:d7:e2:c6:c6:94:
e1:6f:b5:28:ad:65:75:4b:d0:d7:d3:6e:5b:5a:e2:
11:d2:e1:c3:74:e9:87:5e:6d:c2:8a:e3:ec:e5:33:
d9:18:f4:e4:bb:7b:48:dd:e8:12:ad:7a:6e:1f:05:
93:46:24:16:f4:0c:0c:b6:c8:49:94:47:ac:44:a6:
9e:94:94:79:ab:cd:21:0a:5a:84:c8:9b:d4:45:ef:
de:00:2d:dd:95:cf:1d:c4:5f:2b:3c:0a:93:48:c5:
b1:c1:89:14:56:e4:6a:a2:72:06:0c:d2:c4:65:36:
b6:45:8f:00:da:63:e0:a1:ad:77:1c:99:ca:fc:8c:
8c:f7:7b:d3:4f:90:ab:77:5a:fa:ca:14:45:b7:6a:
99:6a:76:b2:e8:ce:d0:61:b8:9d:f5:93:36:dc:25:
35:21:d2:72:04:1b:12:4b:8a:de:b8:2a:6d:a7:cc:
66:ec:78:ba:15:c3:d6:24:07:b3:57:37:60:6a:cc:
a7:4f:03:9d:7f:ba:ff:bb:17:86:3d:b3:d0:7f:02:
19:cf:90:1d:08:95:09:f2:f1:72:bb:ab:10:d4:07:
1f:91:d5:eb:ea:3f:ab:82:31:43:39:bf:68:f0:c8:
e2:b6:03:a0:de:7e:5b:2c:59:d1:49:1d:e4:59:53:
8b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:1F:A4:A5:B6:65:40:E9:55:15:B9:FB:68:FC:67:B9:E1:C8:07:EB
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/bh-kpbZlQOlVFbn7aPxnueHIB-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.122.80.0/22
IPv6:
2001:680:4004::/48
Signature Algorithm: sha256WithRSAEncryption
40:a0:9e:cd:20:bf:23:a7:4e:65:90:58:1c:a5:61:11:17:08:
0c:c5:91:df:f5:95:45:d5:be:51:1e:0c:9c:e1:7f:3e:58:0f:
39:01:0c:05:d1:fb:e2:e7:31:8a:96:99:d4:27:e5:dd:97:9a:
a6:b5:87:9b:d2:1e:6a:5f:77:92:8e:48:04:f9:26:be:e7:c4:
9c:d3:88:53:0e:4f:e1:bb:93:2c:20:17:61:6a:43:0c:ec:2d:
74:6f:14:ab:24:b4:69:88:74:8b:e4:ae:15:21:f6:57:0f:9f:
38:17:61:7e:13:50:44:f1:07:2c:d6:6e:24:af:fa:d7:19:3b:
83:f2:6e:18:3e:b2:00:37:8d:30:e8:d5:b8:22:ca:bc:76:f1:
8b:32:33:31:30:4c:7c:de:c5:ad:e8:ba:d6:5f:e0:64:95:97:
32:09:6d:8d:75:8a:d4:9d:a4:89:b8:a4:29:fd:0d:8f:64:99:
78:aa:19:ca:4d:2f:db:4a:93:79:44:c4:b2:3a:99:87:3b:84:
33:ef:9d:d3:bf:a7:dd:d7:6f:2c:9d:59:39:74:3a:82:95:29:
92:5a:ec:d5:0d:08:ef:bd:a5:d8:d0:02:17:24:df:8b:18:74:
90:5b:be:f3:ec:e9:b7:a9:37:2f:4c:39:47:de:98:ba:e1:08:
72:98:0e:ce
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzHlEXBU0ETsT0+ubZtwMAjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjQwMTAyMDAzMDMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTFmYTRhNWI2NjU0MGU5NTUxNWI5ZmI2OGZjNjdiOWUxYzgwN2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiou2u0hBcfw81+LGxpThb7UorWV1
S9DX025bWuIR0uHDdOmHXm3CiuPs5TPZGPTku3tI3egSrXpuHwWTRiQW9AwMtshJ
lEesRKaelJR5q80hClqEyJvURe/eAC3dlc8dxF8rPAqTSMWxwYkUVuRqonIGDNLE
ZTa2RY8A2mPgoa13HJnK/IyM93vTT5Crd1r6yhRFt2qZanay6M7QYbid9ZM23CU1
IdJyBBsSS4reuCptp8xm7Hi6FcPWJAezVzdgasynTwOdf7r/uxeGPbPQfwIZz5Ad
CJUJ8vFyu6sQ1AcfkdXr6j+rgjFDOb9o8MjitgOg3n5bLFnRSR3kWVOLSQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFG4fpKW2ZUDpVRW5+2j8Z7nhyAfrMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvYmgta3BiWmxRT2xWRmJuN2FQeG51ZUhJQi1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCwnpQMA8E
AgACMAkDBwAgAQaAQAQwDQYJKoZIhvcNAQELBQADggEBAECgns0gvyOnTmWQWByl
YREXCAzFkd/1lUXVvlEeDJzhfz5YDzkBDAXR++LnMYqWmdQn5d2Xmqa1h5vSHmpf
d5KOSAT5Jr7nxJzTiFMOT+G7kywgF2FqQwzsLXRvFKsktGmIdIvkrhUh9lcPnzgX
YX4TUETxByzWbiSv+tcZO4Pybhg+sgA3jTDo1bgiyrx28YsyMzEwTHzexa3outZf
4GSVlzIJbY11itSdpIm4pCn9DY9kmXiqGcpNL9tKk3lExLI6mYc7hDPvndO/p93X
byydWTl0OoKVKZJa7NUNCO+9pdjQAhck34sYdJBbvvPs6bepNy9MOUfemLrhCHKY
Ds4=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:39:55 2024 by rpki-client on console-fra.rpki-client.org