Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/BbVdaZY9Ua5c7bBOA9Zi9d00Uiw.roa
File: BbVdaZY9Ua5c7bBOA9Zi9d00Uiw.roa (raw, json)
Hash identifier: eGCle76A24PEdjOm/kZZL0Zhv+gRZpduSwg1yHz81C8=
Subject key identifier: 05:B5:5D:69:96:3D:51:AE:5C:ED:B0:4E:03:D6:62:F5:DD:34:52:2C
Certificate issuer: /CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Certificate serial: 018CC801635DD58157D96C460E8E6803A877
Authority key identifier: 30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/BbVdaZY9Ua5c7bBOA9Zi9d00Uiw.roa
Signing time: Tue 02 Jan 2024 02:29:43 +0000
ROA not before: Tue 02 Jan 2024 02:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206225
IP address blocks: 193.247.48.0/21 maxlen: 24
193.247.56.0/23 maxlen: 23
193.247.62.0/23 maxlen: 23
193.247.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:63:5d:d5:81:57:d9:6c:46:0e:8e:68:03:a8:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Validity
Not Before: Jan 2 02:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05b55d69963d51ae5cedb04e03d662f5dd34522c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:59:1b:39:f6:02:5e:a1:db:e6:ac:be:eb:62:
03:d2:7e:8f:25:57:b2:86:6c:4d:e3:8a:64:24:2c:
5d:98:f2:7d:32:a2:78:24:48:3e:2c:ea:2d:8c:48:
c4:02:41:0a:7e:f4:f6:31:d5:48:80:56:ef:e5:4d:
dd:d4:27:d9:9b:b9:4a:74:7d:28:de:d2:2d:3c:fa:
1b:81:cc:30:fb:93:e7:68:15:f6:68:5a:e5:c0:44:
33:12:ef:2c:31:b4:5e:04:87:c6:c6:c5:9a:c0:3e:
87:f3:f8:5a:9f:cf:ce:b6:ea:9f:aa:61:98:bc:7c:
f5:d5:ab:87:16:c5:17:ee:b5:ea:57:c2:20:61:41:
92:9d:57:6c:95:0a:42:ac:0c:29:ce:a9:8d:71:e1:
c9:4c:83:8e:fd:71:61:23:86:b2:5d:61:cd:4f:01:
a9:6d:d0:f7:dc:e4:8a:85:c8:e8:ec:5a:7b:d4:7a:
85:39:f5:bd:28:e0:f9:65:ac:e4:e3:cf:79:3f:36:
75:d1:8c:a2:d0:1d:a9:78:f3:3e:09:84:a1:5d:da:
20:a8:08:f8:97:3e:95:c4:b2:7e:d5:0a:8b:4b:48:
e8:1c:58:68:18:ff:22:aa:54:0f:f4:87:02:3d:7b:
f1:a0:1e:2d:92:37:4d:1d:6c:ec:dc:19:a7:10:55:
31:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B5:5D:69:96:3D:51:AE:5C:ED:B0:4E:03:D6:62:F5:DD:34:52:2C
X509v3 Authority Key Identifier:
keyid:30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/BbVdaZY9Ua5c7bBOA9Zi9d00Uiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.48.0-193.247.57.255
193.247.59.0/24
193.247.62.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:31:35:36:51:21:31:be:31:32:89:9f:b9:7a:96:fe:e4:9e:
e9:90:ff:81:e3:2c:60:c3:db:ca:8d:ec:91:71:91:f9:43:e8:
a9:ee:ba:3d:5d:f9:91:c9:8a:1b:bd:b1:0d:12:0b:8e:28:9b:
4d:76:44:ba:30:f5:70:ea:46:d4:de:62:2c:70:b9:3e:c4:40:
77:b1:7d:b9:42:3b:bc:e1:1b:a3:da:28:3c:af:e7:bc:11:bd:
6c:b6:e5:86:d4:b1:c6:b7:20:19:15:f3:cc:eb:f2:ae:3d:9c:
86:d5:df:a4:9c:3d:db:2a:5a:1c:97:49:c6:5a:0d:63:38:93:
b7:28:0d:a5:a5:3f:7b:f0:4d:ac:86:ab:c9:7e:93:ae:50:22:
27:12:b1:14:03:8a:85:63:e6:b3:95:65:64:ce:ca:77:cc:72:
f5:65:2c:01:88:73:81:46:ee:58:5a:1b:5a:6e:24:ec:ba:eb:
92:11:78:9e:11:72:b8:b2:40:c2:15:51:3a:c3:88:ed:14:f6:
84:2c:19:6c:b1:9e:48:9b:8f:46:8f:ba:7e:21:e5:ae:f6:7d:
62:a9:42:b6:53:c0:78:bb:15:15:6a:7d:0b:15:fc:f4:ec:de:
fa:69:98:10:f8:71:b9:81:25:54:95:48:d1:3b:78:08:15:ae:
2b:36:c1:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:48:34 2024 by rpki-client on console-fra.rpki-client.org