Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/bne_oo3EfRn38AF3NQPwMbJFd6g.roa
File: bne_oo3EfRn38AF3NQPwMbJFd6g.roa (raw, json)
Hash identifier: GUEqbNxHSfMLsoXoGfkGCDzUkZZ7zSvUFjF2LJscWiI=
Subject key identifier: 6E:77:BF:A2:8D:C4:7D:19:F7:F0:01:77:35:03:F0:31:B2:45:77:A8
Certificate issuer: /CN=1ef498bab7f3bb97166da579294a8b471450e75c
Certificate serial: 018D59F4EB6EDBDF77BCE03E1E8EED880A27
Authority key identifier: 1E:F4:98:BA:B7:F3:BB:97:16:6D:A5:79:29:4A:8B:47:14:50:E7:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvSYurfzu5cWbaV5KUqLRxRQ51w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/bne_oo3EfRn38AF3NQPwMbJFd6g.roa
Signing time: Tue 30 Jan 2024 10:40:39 +0000
ROA not before: Tue 30 Jan 2024 10:40:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57902
IP address blocks: 185.74.40.0/22 maxlen: 22
185.87.228.0/22 maxlen: 22
2a05:4680::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvSYurfzu5cWbaV5KUqLRxRQ51w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 16:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:59:f4:eb:6e:db:df:77:bc:e0:3e:1e:8e:ed:88:0a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef498bab7f3bb97166da579294a8b471450e75c
Validity
Not Before: Jan 30 10:40:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e77bfa28dc47d19f7f001773503f031b24577a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9f:60:38:18:0b:69:49:b3:1e:98:99:82:f6:
2f:77:e1:c9:e7:41:20:13:e2:15:7d:d3:42:cf:5a:
aa:86:a4:76:bd:8d:25:5b:f0:2a:53:48:c7:56:27:
94:5b:e3:10:ff:ab:99:2e:a0:bf:d3:a4:be:b5:5f:
e7:b2:5b:ee:f3:19:32:49:9b:74:48:77:89:b7:c5:
56:e3:ca:00:f6:d0:f2:4f:f3:07:37:bf:fa:51:1d:
ab:ae:e7:a5:7b:3b:ba:03:15:3d:b1:8d:3a:5d:75:
54:14:0b:85:01:ab:11:ae:89:05:11:d0:ac:6e:6e:
da:68:72:a8:8a:6d:a8:01:7b:35:e5:92:e2:89:dd:
b0:e1:6e:be:17:e8:a3:c8:e9:5c:45:a7:a2:a3:db:
f8:68:82:ab:09:bd:b2:2e:f2:b5:ea:d6:11:09:8b:
94:48:6b:94:22:d9:c4:b4:db:63:0b:10:bc:91:5e:
be:15:74:ea:02:bf:1d:fb:c5:73:c0:92:ed:a0:0b:
71:c2:59:fb:30:22:29:9b:df:68:26:a7:f3:b5:68:
d0:ae:cd:24:de:8d:61:ea:64:fd:9f:dd:4c:f7:04:
0b:06:b7:01:0c:75:5c:bf:d8:b1:df:ee:4d:eb:d4:
00:80:bf:63:0d:c3:6e:9c:b4:d7:91:d0:4c:68:53:
8a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:77:BF:A2:8D:C4:7D:19:F7:F0:01:77:35:03:F0:31:B2:45:77:A8
X509v3 Authority Key Identifier:
keyid:1E:F4:98:BA:B7:F3:BB:97:16:6D:A5:79:29:4A:8B:47:14:50:E7:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvSYurfzu5cWbaV5KUqLRxRQ51w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/bne_oo3EfRn38AF3NQPwMbJFd6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.74.40.0/22
185.87.228.0/22
IPv6:
2a05:4680::/29
Signature Algorithm: sha256WithRSAEncryption
44:56:ad:42:64:cb:04:5e:06:54:e9:ec:9e:3c:60:8c:e7:3c:
e5:f8:3a:12:7d:fe:6b:f0:05:f6:bf:8e:ed:28:e9:6d:22:21:
2b:9a:c9:d8:48:90:78:67:0d:18:35:0b:72:5b:d1:50:fb:7e:
c0:36:65:b9:af:bd:66:d1:a7:9a:12:21:27:7e:5b:79:a1:b3:
4e:98:03:e2:e8:86:a9:78:23:ab:be:3b:d2:c8:45:95:06:e3:
e3:9d:38:b7:d6:e3:d3:b2:60:4c:0d:70:63:99:12:f4:bf:88:
3d:24:36:94:ab:fa:4b:e6:d1:2b:b0:85:6f:d8:53:30:09:0a:
95:43:6f:b5:0e:f6:3d:c1:43:6b:ca:38:ac:42:b1:82:26:90:
90:28:92:73:6c:80:66:85:66:c4:88:bd:b5:69:74:de:1e:8d:
5e:ce:b3:d2:c4:6f:4f:44:52:47:f4:49:ef:14:83:c3:be:fd:
9e:2c:70:30:d7:70:0e:20:57:ae:84:6f:e8:78:fa:84:02:5f:
a4:4d:c8:2a:61:e8:7e:79:6c:1a:f6:9f:fa:a2:c6:0e:01:44:
75:82:47:80:cc:62:2b:fb:c4:4e:0b:5c:50:26:59:c4:f1:85:
45:9a:0f:08:4e:76:fb:40:02:7b:7b:b8:36:89:20:ce:87:81:
f1:bc:cc:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 23:11:59 2024 by rpki-client on console-ams.rpki-client.org