Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/BaEihTi1C26SE417AYiSDifgW0c.roa
File: BaEihTi1C26SE417AYiSDifgW0c.roa (raw, json)
Hash identifier: aMN2juILFAbzUnAtdWmCCBswxxnsYUZt5W4ZamRpASU=
Subject key identifier: 05:A1:22:85:38:B5:0B:6E:92:13:8D:7B:01:88:92:0E:27:E0:5B:47
Certificate issuer: /CN=1ee5efbf65897160d55a52dc3a22c017876cd06c
Certificate serial: 01909D239A2A37F7CA99A63DC2CB669A8868
Authority key identifier: 1E:E5:EF:BF:65:89:71:60:D5:5A:52:DC:3A:22:C0:17:87:6C:D0:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/BaEihTi1C26SE417AYiSDifgW0c.roa
Signing time: Wed 10 Jul 2024 14:54:34 +0000
ROA not before: Wed 10 Jul 2024 14:54:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205394
IP address blocks: 46.226.72.0/21 maxlen: 24
139.28.100.0/22 maxlen: 22
139.28.100.0/24 maxlen: 24
139.28.101.0/24 maxlen: 24
185.176.124.0/22 maxlen: 24
185.180.172.0/23 maxlen: 24
185.201.164.0/22 maxlen: 24
2a00:5a00::/32 maxlen: 48
2a0a:c840::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 18:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9d:23:9a:2a:37:f7:ca:99:a6:3d:c2:cb:66:9a:88:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ee5efbf65897160d55a52dc3a22c017876cd06c
Validity
Not Before: Jul 10 14:54:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05a1228538b50b6e92138d7b0188920e27e05b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:13:71:9d:4a:6e:5a:ae:3f:b9:1f:38:47:95:
9b:e9:57:4b:45:f6:7e:2a:c8:98:65:c5:ce:89:67:
b0:30:a7:28:1b:a2:a9:ed:1f:c2:3d:11:ac:2f:fa:
99:83:4d:36:42:ab:64:5e:bc:3a:d1:b6:7c:39:d1:
bc:67:5b:db:8a:8e:b4:38:54:e1:c2:14:6b:a5:04:
8c:cf:02:88:15:54:10:ab:ee:95:e0:db:17:0f:e7:
12:65:a3:dc:bd:56:27:44:85:3b:dd:fa:70:2c:de:
6f:60:c9:a0:8e:be:8f:68:87:f6:44:59:83:44:95:
16:fa:c7:55:dd:0f:e9:74:94:f2:b2:16:b2:d1:96:
23:5f:20:77:b1:17:a8:da:7b:e5:56:b6:6c:35:ec:
b9:76:72:28:f7:55:a8:ca:a2:fb:4e:9a:c9:79:1d:
47:d9:71:d9:86:f9:3b:95:10:89:34:13:5a:6a:9a:
4e:ec:c1:5c:aa:8e:02:aa:a6:20:40:00:07:1a:49:
95:cf:9a:1e:25:dd:74:e0:d0:d0:ff:44:0c:a3:e9:
96:71:f0:6a:7a:6f:e3:19:ce:45:4b:6f:fb:ef:4e:
1e:f5:33:d4:bd:db:a2:dc:16:9e:c2:87:a5:0b:12:
16:54:66:3b:cf:df:50:3f:22:57:eb:5b:6f:36:6d:
8b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A1:22:85:38:B5:0B:6E:92:13:8D:7B:01:88:92:0E:27:E0:5B:47
X509v3 Authority Key Identifier:
keyid:1E:E5:EF:BF:65:89:71:60:D5:5A:52:DC:3A:22:C0:17:87:6C:D0:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/BaEihTi1C26SE417AYiSDifgW0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.72.0/21
139.28.100.0/22
185.176.124.0/22
185.180.172.0/23
185.201.164.0/22
IPv6:
2a00:5a00::/32
2a0a:c840::/29
Signature Algorithm: sha256WithRSAEncryption
97:cf:5c:22:66:42:66:20:85:68:ba:b4:88:25:11:bc:95:aa:
39:1d:bf:cc:0f:a5:67:5a:db:02:8c:10:47:04:94:ca:59:75:
ba:c7:ea:7b:b4:00:b7:f5:64:34:8e:fb:2d:ad:51:d3:49:d2:
ce:9b:6d:f9:7a:e6:6a:a5:d9:9d:5e:31:fb:f8:f0:86:ed:58:
f8:d1:16:36:cf:fa:96:57:57:61:52:a2:49:3d:62:b5:08:75:
4b:ad:fb:d0:c1:46:7c:29:ab:e6:ec:42:a0:44:5a:65:42:0e:
59:a2:e4:3f:71:02:e5:52:13:15:06:84:a9:96:bc:c5:fb:47:
dd:92:7c:b4:bf:c8:48:ce:e8:b0:cc:2a:c0:23:0b:fb:66:a3:
25:26:e9:58:af:7f:59:d0:b7:01:00:67:05:bd:51:5a:3a:d9:
90:f8:fb:73:d2:79:38:51:b3:2c:23:a9:bd:b7:70:0c:e3:5e:
b6:3e:68:c8:d3:19:cf:a6:27:b0:9d:e0:ea:98:0a:9a:47:3e:
70:cc:02:ae:5b:46:49:e7:58:28:b4:73:ec:37:1a:3f:ed:40:
40:38:bb:31:c4:70:b8:9d:0b:16:e2:28:bf:bc:43:6a:e5:3a:
a6:0b:53:76:5f:a6:11:2b:c0:9e:bb:4d:98:5a:9c:df:98:50:
1b:77:79:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 23:51:15 2024 by rpki-client on console-fra.rpki-client.org