Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/BbIH7YxcuJqs-_Gbe97t1Kh6uRA.roa
File: BbIH7YxcuJqs-_Gbe97t1Kh6uRA.roa (raw, json)
Hash identifier: OCb2MMWSr32S3L1puzeoKzoyKeqzD13rPIRmBXAOJwg=
Subject key identifier: 05:B2:07:ED:8C:5C:B8:9A:AC:FB:F1:9B:7B:DE:ED:D4:A8:7A:B9:10
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 01934FBD0E414502C5E0BD76BA55054004AC
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/BbIH7YxcuJqs-_Gbe97t1Kh6uRA.roa
Signing time: Thu 21 Nov 2024 17:20:10 +0000
ROA not before: Thu 21 Nov 2024 17:20:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213827
IP address blocks: 45.133.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 06:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4f:bd:0e:41:45:02:c5:e0:bd:76:ba:55:05:40:04:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Nov 21 17:20:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05b207ed8c5cb89aacfbf19b7bdeedd4a87ab910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:52:bd:3d:62:f1:c3:e6:60:8e:2a:30:ae:98:
82:74:46:7a:04:92:9e:a0:9a:65:ec:75:53:d3:2a:
97:21:38:bc:37:7e:5f:0d:e6:eb:c9:6f:61:ff:f2:
d9:73:87:d7:ee:4d:5f:1e:ea:0a:db:ee:7d:7c:67:
63:a6:eb:b0:bf:ea:c5:07:85:3a:6f:7a:cb:a6:9b:
35:fa:19:54:eb:ac:d4:62:67:e7:57:18:80:9e:ac:
11:60:a5:11:ed:1c:17:e4:d6:62:42:86:0b:ff:a6:
1e:e0:9c:64:3c:03:f7:95:48:54:91:92:91:83:27:
1f:3b:b0:c7:4c:20:16:48:18:96:3a:ba:b6:e5:86:
e7:8b:4b:b6:2a:d1:22:b5:38:c3:26:7a:37:71:ee:
16:a1:94:9e:32:36:5a:e7:47:5c:58:f1:df:c6:bb:
93:0e:a0:5e:8b:8a:0c:b9:0a:aa:ac:7c:3d:ee:c7:
cf:56:cc:89:63:05:db:3a:2b:a1:8c:72:5a:58:45:
ed:05:2d:12:fb:15:10:05:6d:5f:ed:0b:42:59:05:
e3:f3:cb:92:11:a3:35:cd:58:da:fd:97:3b:c2:35:
c7:43:62:03:53:f0:61:53:b1:e7:a1:ea:d4:07:04:
44:77:31:74:a3:dd:e0:74:6f:b8:a5:f0:b4:55:44:
55:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B2:07:ED:8C:5C:B8:9A:AC:FB:F1:9B:7B:DE:ED:D4:A8:7A:B9:10
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/BbIH7YxcuJqs-_Gbe97t1Kh6uRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.105.0/24
Signature Algorithm: sha256WithRSAEncryption
62:d1:39:e0:b2:68:11:ba:4b:1d:dd:cb:22:19:1e:86:b6:b6:
71:7f:34:97:07:c3:9b:3c:3b:68:9a:36:ab:e9:98:58:82:9d:
88:f7:00:3a:5b:2d:bc:4e:05:c2:3d:e8:f4:4c:af:4f:d2:62:
ef:b0:01:13:6a:d0:59:34:54:cd:96:83:f1:e3:17:8d:20:40:
94:34:4c:c4:61:43:ef:c1:66:2d:9d:bd:a0:6e:ce:cc:35:c5:
66:59:e6:d4:b2:a0:93:8e:b0:30:56:ed:aa:6f:26:86:16:a6:
90:4b:fa:e4:d0:d9:60:cb:79:18:e0:1f:9f:81:83:fa:cc:e2:
32:35:76:17:54:df:5b:1c:02:20:d9:57:3a:69:32:f2:ab:0a:
9d:fc:fb:2d:8f:f5:dc:35:b1:1f:36:80:64:31:c0:bd:58:5a:
3f:69:6f:d7:99:fe:7c:66:0d:06:cb:58:87:3e:2d:32:66:ce:
5a:a1:2f:0b:e0:94:c8:20:32:95:e9:26:23:32:ea:32:6e:78:
4e:95:bf:9c:fb:7a:f2:25:c5:41:85:ba:06:80:c3:3d:45:05:
22:7e:0c:70:b0:e4:b8:fb:93:87:9a:5b:b6:4e:6f:e7:47:69:
d0:85:52:22:ba:b2:a5:89:57:83:70:65:0a:6b:69:25:58:d5:
ed:e7:f6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:39:03 2024 by rpki-client on console-ams.rpki-client.org