Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/bHHPruxCoRSgL-jk5cswyqErsoM.roa
File: bHHPruxCoRSgL-jk5cswyqErsoM.roa (raw, json)
Hash identifier: NQK05hb4S3IxdkZIozQ6r6W3sB8Tg7o+ccQO8a6agrI=
Subject key identifier: 6C:71:CF:AE:EC:42:A1:14:A0:2F:E8:E4:E5:CB:30:CA:A1:2B:B2:83
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 018CC424FC327E8241A6A1011DBDF5E99D13
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/bHHPruxCoRSgL-jk5cswyqErsoM.roa
Signing time: Mon 01 Jan 2024 08:30:07 +0000
ROA not before: Mon 01 Jan 2024 08:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213257
IP address blocks: 109.236.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 May 2024 18:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:fc:32:7e:82:41:a6:a1:01:1d:bd:f5:e9:9d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jan 1 08:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c71cfaeec42a114a02fe8e4e5cb30caa12bb283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fd:e8:83:ee:c6:ca:80:61:21:63:1d:b8:94:
7a:f5:10:37:11:e3:f5:28:f5:ce:e3:71:0a:42:fb:
2f:15:f8:eb:9f:9b:9c:9e:3a:de:ba:25:46:ce:85:
99:cf:27:99:6b:60:91:18:26:6a:bf:86:a6:1b:58:
8b:9c:65:d7:ba:a2:be:16:89:02:a6:b8:d6:2e:f9:
d4:06:9e:12:4c:6b:02:f8:fa:2d:ee:8d:3b:d1:3d:
9c:8d:c1:05:20:22:65:c3:bc:ac:e4:d9:30:69:71:
68:8c:34:b4:05:6d:aa:ef:8f:dc:c6:4e:1e:1b:2e:
00:f8:06:97:a3:de:a5:89:53:23:d8:fb:bb:61:93:
c1:36:d0:01:59:a9:d5:ba:6d:3e:60:64:d0:52:f7:
a4:35:0f:82:15:a8:7c:d1:a6:ce:a0:18:10:69:a5:
fb:7e:10:fc:38:de:0c:43:08:de:d6:8e:1e:cb:6b:
60:6c:6e:aa:32:56:d2:c5:6b:68:47:25:b2:a1:aa:
d3:d4:55:9b:c9:a1:a2:09:5c:7b:9b:ad:ff:80:74:
64:da:67:c5:b7:3b:66:fa:74:60:8c:bd:75:5b:14:
81:20:10:b7:89:db:14:1c:00:83:2d:66:ac:b8:a8:
da:9b:3d:1a:3a:17:b8:47:af:0b:bd:34:ca:bd:57:
ef:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:71:CF:AE:EC:42:A1:14:A0:2F:E8:E4:E5:CB:30:CA:A1:2B:B2:83
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/bHHPruxCoRSgL-jk5cswyqErsoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.236.49.0/24
Signature Algorithm: sha256WithRSAEncryption
64:d4:cb:5f:c0:8e:dc:d9:6a:c5:59:77:13:ce:b6:de:0b:a1:
5b:e1:1c:02:20:36:fe:a8:a5:30:3f:73:16:ed:03:98:0f:68:
7b:12:5e:2a:57:d8:a9:4a:35:34:22:70:9a:05:f1:d3:36:28:
59:ed:ec:cd:0b:72:0f:23:27:0b:30:13:81:d1:5a:69:52:27:
9f:3c:f0:4e:69:e9:ca:6b:72:6d:55:76:4a:d9:22:93:39:4a:
30:ce:1d:4f:a2:2b:83:9b:1e:9a:94:06:e8:54:74:54:2d:31:
c1:cb:25:aa:4e:89:6e:1c:41:4a:93:18:fe:2e:f2:a5:c9:be:
4d:f5:de:69:06:8a:e5:fb:0b:5d:47:9e:64:2c:60:4b:c7:9a:
2f:c7:40:00:3c:df:be:75:da:ed:c3:a9:c7:75:2c:51:4e:aa:
fa:7b:d9:77:18:93:97:ad:1e:c7:7d:df:de:18:a8:af:f3:3b:
e9:0d:e9:27:81:22:2b:8e:00:d1:0f:fe:18:0a:a5:29:00:a7:
fc:3c:f2:7f:90:26:aa:b6:31:ab:08:f1:37:08:ef:ae:d1:c3:
68:a4:ff:eb:16:d2:21:b8:4e:e7:83:60:49:14:f0:05:17:66:
b2:34:e9:5e:73:f0:94:76:e9:14:4e:5d:aa:ee:f4:da:bd:0b:
f0:f1:ae:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 03:43:15 2024 by rpki-client on console-fra.rpki-client.org