Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/BpsTj6dfrp4d5vmnjTBrFwuL-Ng.roa
File: BpsTj6dfrp4d5vmnjTBrFwuL-Ng.roa (raw, json)
Hash identifier: lK0GHW1vhL8skoYc8vmjps1YXbG83Wr9ZZI3kdR/mPc=
Subject key identifier: 06:9B:13:8F:A7:5F:AE:9E:1D:E6:F9:A7:8D:30:6B:17:0B:8B:F8:D8
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018F9B9687F30B0C6AC0F591487F806552C7
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/BpsTj6dfrp4d5vmnjTBrFwuL-Ng.roa
Signing time: Tue 21 May 2024 14:38:04 +0000
ROA not before: Tue 21 May 2024 14:38:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50809
IP address blocks: 37.77.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9b:96:87:f3:0b:0c:6a:c0:f5:91:48:7f:80:65:52:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: May 21 14:38:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=069b138fa75fae9e1de6f9a78d306b170b8bf8d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:be:26:ae:ab:02:da:00:7e:92:56:b6:45:b1:
1d:63:e4:b0:91:6d:33:f3:4b:9d:58:73:f8:5f:60:
69:54:e4:f2:6c:b8:76:ef:5f:b6:39:49:21:be:55:
c5:2b:4f:b9:82:a4:49:3c:94:f6:dd:41:3e:23:7e:
f9:b0:a7:f3:46:f4:9e:8e:e9:23:3d:5f:dc:18:7e:
b2:ff:3f:04:9e:92:f1:77:45:47:cd:a6:64:f0:51:
70:e9:56:f1:82:39:10:c3:53:1c:a0:bd:ad:58:cb:
e5:68:1d:e7:f6:ad:d2:28:07:78:a5:1c:a1:e8:58:
e1:85:bd:57:e3:0e:4f:85:8c:01:3b:89:2c:46:cc:
22:fc:88:0a:50:f7:4f:33:d2:d6:b9:2f:57:ed:fe:
d3:26:a6:0d:be:a9:f9:b2:7f:87:d1:16:c6:bc:1e:
c5:d5:31:05:b5:88:af:80:85:a3:61:b0:c2:5c:86:
b8:6e:33:8c:05:a8:7d:39:78:f1:0e:89:90:5c:05:
50:e0:00:43:da:b8:4e:03:4e:44:31:5f:e7:5d:18:
dc:2c:08:37:8a:69:8a:3f:c2:c5:9e:d1:2e:8f:7a:
4c:19:ee:e0:b6:20:f8:7c:33:01:b6:ce:1f:0f:7c:
2c:6f:9f:65:7a:7b:9f:ce:be:e9:d7:df:03:d9:c2:
34:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:9B:13:8F:A7:5F:AE:9E:1D:E6:F9:A7:8D:30:6B:17:0B:8B:F8:D8
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/BpsTj6dfrp4d5vmnjTBrFwuL-Ng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.148.0/24
Signature Algorithm: sha256WithRSAEncryption
39:50:4a:8e:23:ef:ee:66:59:5c:7c:ea:03:b4:02:92:c8:da:
d7:bf:08:ef:34:aa:2c:53:73:50:55:e6:91:58:d9:38:5a:9d:
13:0f:9c:ae:ee:20:fb:15:28:40:b8:7e:5e:9c:df:a6:02:75:
7a:7c:35:37:9b:dc:3b:66:a9:35:79:0b:17:fc:16:d3:60:f8:
29:d6:46:65:42:ba:78:57:04:2c:92:dc:12:b8:b2:72:0d:7b:
91:a9:25:79:50:18:90:e8:f1:32:2e:c8:fa:c6:b1:34:32:51:
85:8b:0f:72:af:62:56:b1:0c:0f:63:97:50:2b:22:e4:05:a6:
fa:6e:22:f1:8c:33:9e:50:56:f0:fd:dd:c0:87:4e:10:f9:01:
32:75:42:21:f8:52:3f:35:2d:12:e9:e3:27:7c:b1:a4:67:d2:
99:00:da:5c:ab:dd:54:4f:92:14:57:34:84:01:56:75:de:a4:
c5:56:4c:0c:24:58:94:05:d6:3f:0c:3d:9e:f1:78:fe:c1:32:
3b:40:f9:1a:64:f3:85:e8:b7:93:03:c4:f9:ef:09:d8:71:eb:
e3:11:d4:e7:82:33:a6:db:ff:40:b1:cb:cb:0a:14:63:41:81:
84:48:be:7d:88:98:49:44:f3:62:12:c8:1d:4b:70:b6:59:78:
d3:f4:12:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 17:18:04 2024 by rpki-client on console-fra.rpki-client.org