Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/bzgi7y6lwXGvHXvYPoyTtfdw6M8.roa
File: bzgi7y6lwXGvHXvYPoyTtfdw6M8.roa (raw, json)
Hash identifier: HJmeV/HSD+OPJiNd4YwcrvKnTkJyehBNgReUvazpr7g=
Subject key identifier: 6F:38:22:EF:2E:A5:C1:71:AF:1D:7B:D8:3E:8C:93:B5:F7:70:E8:CF
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 018CC94E140CAE6F1D5D0E7C28AB7B4B5D50
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/bzgi7y6lwXGvHXvYPoyTtfdw6M8.roa
Signing time: Tue 02 Jan 2024 08:33:06 +0000
ROA not before: Tue 02 Jan 2024 08:33:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62294
IP address blocks: 176.100.34.0/24 maxlen: 24
37.114.57.0/24 maxlen: 24
2a00:ccc5::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:14:0c:ae:6f:1d:5d:0e:7c:28:ab:7b:4b:5d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Jan 2 08:33:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f3822ef2ea5c171af1d7bd83e8c93b5f770e8cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e8:e0:6e:28:01:8a:aa:56:d8:b6:8d:7c:01:
db:0a:7c:53:af:36:9d:ef:5e:a3:7a:47:32:0c:5b:
36:b8:5f:a8:7b:c3:77:68:53:6c:a2:61:aa:42:ea:
64:f9:90:d9:f2:27:53:2a:c0:ab:9f:32:c2:a3:8d:
4d:f8:c0:73:04:04:27:d8:d1:cb:00:e0:9d:4e:ef:
30:ca:ac:a4:4c:60:4f:16:87:a8:27:dd:95:19:fc:
25:9a:4c:c4:43:50:cf:cb:a2:a0:c8:54:be:08:f6:
28:ae:59:e7:68:4f:e3:68:13:af:0d:f1:56:7c:1c:
f3:a0:95:b3:29:77:b7:9d:21:d8:e4:23:68:d9:9c:
21:a9:0e:79:a4:fd:86:47:14:97:44:43:c7:12:18:
a5:ea:4c:8c:3b:c0:2d:12:cd:3d:e9:24:77:68:63:
1d:d1:6b:a1:00:64:59:45:13:02:83:b9:54:3d:45:
62:46:ef:b2:f0:34:da:65:cf:ba:f3:8a:cd:39:61:
4f:4d:d4:24:e4:8d:ce:68:16:54:cf:de:4a:82:00:
77:8d:bd:be:da:ed:ee:df:d4:3d:23:05:e0:cd:f8:
10:f4:f4:35:b2:f1:e6:c0:8f:fd:de:51:f2:09:46:
e7:a0:0a:a6:e2:4a:d3:63:31:ff:36:d0:4e:7a:fd:
ee:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:38:22:EF:2E:A5:C1:71:AF:1D:7B:D8:3E:8C:93:B5:F7:70:E8:CF
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/bzgi7y6lwXGvHXvYPoyTtfdw6M8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.57.0/24
176.100.34.0/24
IPv6:
2a00:ccc5::/32
Signature Algorithm: sha256WithRSAEncryption
ad:17:5d:ea:c6:ba:6f:31:dd:11:53:0e:5b:da:26:4a:c9:9f:
83:b7:89:26:01:a2:07:2b:e3:99:ae:39:9c:24:c0:37:4b:02:
cd:82:c1:83:f3:42:e9:00:fc:24:5d:c6:06:c9:d7:26:00:52:
e4:f7:87:d7:0f:11:e5:90:9a:e7:cc:9d:d4:4e:46:9c:6a:67:
a1:f7:09:e5:00:fd:74:f2:0c:7f:6c:a2:86:fc:bf:67:d0:d4:
45:38:88:3e:4d:a2:75:d9:af:06:75:3e:82:51:eb:80:96:c9:
62:f4:09:99:25:e4:23:61:8a:14:7d:ac:b0:d6:86:90:0f:cd:
fd:36:8a:90:05:0b:c3:15:69:0a:37:d4:03:b8:c3:ca:6b:0d:
54:53:81:57:8f:9b:f5:bc:ce:70:6d:62:48:43:4f:47:54:da:
45:68:3b:d9:e6:5b:3a:20:de:0c:f4:1d:95:b8:0c:26:a9:8a:
0f:e2:6e:cc:36:0c:b0:7a:16:e6:09:b5:77:35:c5:2c:2a:9d:
b0:0f:63:e1:94:16:2f:43:e1:6c:b7:1d:2b:8a:34:77:ca:f9:
da:b3:2c:e9:0c:51:79:97:2c:8f:1b:50:b1:4e:0b:01:8c:20:
cd:30:f3:4f:fd:bb:f0:22:3f:c6:25:14:c8:c0:5c:47:3f:62:
4b:fb:ed:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:49:07 2024 by rpki-client on console-ams.rpki-client.org