Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/btPvnb5o4dsLMaVyZkGPQqo5Gt0.roa
File: btPvnb5o4dsLMaVyZkGPQqo5Gt0.roa (raw, json)
Hash identifier: ftiD2VCz/hoSe4pql+bwdRWvMT0MlljUgTs3ttQX72Y=
Subject key identifier: 6E:D3:EF:9D:BE:68:E1:DB:0B:31:A5:72:66:41:8F:42:AA:39:1A:DD
Certificate issuer: /CN=bd7d8178cec5cd376548a9049117f469c0a7431c
Certificate serial: 018CC2DABBF606A8603631E898EDDE885FA0
Authority key identifier: BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/btPvnb5o4dsLMaVyZkGPQqo5Gt0.roa
Signing time: Mon 01 Jan 2024 02:29:24 +0000
ROA not before: Mon 01 Jan 2024 02:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 131171
IP address blocks: 178.255.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Jun 2024 22:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:bb:f6:06:a8:60:36:31:e8:98:ed:de:88:5f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7d8178cec5cd376548a9049117f469c0a7431c
Validity
Not Before: Jan 1 02:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ed3ef9dbe68e1db0b31a57266418f42aa391add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5b:ec:65:5b:ef:ee:2e:2b:10:f3:fc:93:7c:
51:f2:96:ce:2f:74:64:90:c5:43:15:26:f6:16:79:
68:b1:ec:51:88:13:f2:d8:6d:cb:a4:57:a9:86:c1:
82:a7:2e:8a:af:bd:af:33:74:76:83:20:e2:af:cb:
68:79:5f:fc:22:cf:b2:b9:a5:18:a8:68:a7:34:68:
8b:db:ee:dc:29:6b:85:5c:e5:05:81:64:84:bf:98:
29:ec:6d:31:02:85:6c:23:e7:f4:82:60:a7:de:fa:
13:0c:b8:a5:66:d1:2e:0a:9e:b0:49:82:c3:c7:96:
57:c1:4c:ef:69:14:43:14:14:99:fc:da:98:b2:eb:
0f:db:c5:10:7f:58:4e:34:df:f3:a7:e4:ae:33:5d:
b8:a4:3d:97:84:19:95:02:1e:db:d5:9a:66:60:cc:
b1:c3:0a:40:d2:a9:32:7d:ec:01:e9:a2:34:3f:6c:
57:53:7a:b2:d9:63:8c:2f:10:ad:91:39:d7:6d:c1:
c8:7d:ea:58:5f:6c:f1:ce:ea:1e:e6:3a:08:f9:04:
bc:53:17:81:6c:2c:61:ba:62:1c:11:c0:96:2e:82:
07:25:55:f4:38:fc:1b:99:b5:86:23:16:44:84:38:
b4:32:5a:63:ae:54:43:fe:77:86:ad:06:64:0e:87:
21:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D3:EF:9D:BE:68:E1:DB:0B:31:A5:72:66:41:8F:42:AA:39:1A:DD
X509v3 Authority Key Identifier:
keyid:BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/btPvnb5o4dsLMaVyZkGPQqo5Gt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.255.10.0/24
Signature Algorithm: sha256WithRSAEncryption
81:17:76:c8:af:99:ad:f0:78:ff:0f:52:61:d1:dd:19:5b:9b:
ed:c6:4d:e3:27:0b:a3:83:49:6e:c9:2e:ae:29:49:e2:3a:91:
e3:89:c4:9b:b5:f1:55:50:b2:ef:92:48:8b:3f:7b:78:cd:a9:
8d:59:86:df:0b:91:90:97:90:93:c4:65:33:56:e5:8b:46:21:
12:21:62:47:3d:2c:ad:80:96:60:d8:74:df:73:9d:a9:44:b9:
ce:3c:44:70:aa:19:f9:41:83:fc:e1:ad:3a:d5:aa:5e:f0:0f:
be:ef:f0:67:68:48:64:a6:b0:a1:0b:50:d2:ad:c2:f6:34:8a:
17:92:97:6a:53:b8:89:00:d2:e0:95:9e:1e:b7:50:c0:64:06:
db:a6:0f:54:09:9d:6f:66:fd:8a:15:68:de:68:21:0b:a2:7c:
ac:5f:2c:70:a3:92:5e:32:29:61:8b:b2:3b:cf:a9:9f:5d:1c:
84:88:28:5c:f4:4f:6f:62:fd:55:ec:51:e7:77:f8:52:6d:a2:
c4:1a:07:8a:1a:3b:61:6f:e3:80:d0:51:59:8f:39:43:9c:69:
14:a1:9a:03:bd:51:91:e2:6a:5e:d2:51:af:61:b3:8c:b1:0c:
33:0b:0d:0c:a1:a0:08:87:ae:f9:cc:fb:f9:4f:23:39:c8:f8:
08:c2:b1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 07:24:43 2024 by rpki-client on console-fra.rpki-client.org