Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/bjlxVUZeW1IvJshaa5vmaZRKYZQ.roa
File: bjlxVUZeW1IvJshaa5vmaZRKYZQ.roa (raw, json)
Hash identifier: iyQKGsXJsEgtCfkNRg/fw7jttf/gMKzVRANfdNNszNc=
Subject key identifier: 6E:39:71:55:46:5E:5B:52:2F:26:C8:5A:6B:9B:E6:69:94:4A:61:94
Certificate issuer: /CN=f82554a856a422b061ae64c577630f91d408cd4a
Certificate serial: 018F4FBED1C423DD9C2BDDCAC32EBCDF838B
Authority key identifier: F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/bjlxVUZeW1IvJshaa5vmaZRKYZQ.roa
Signing time: Mon 06 May 2024 21:10:56 +0000
ROA not before: Mon 06 May 2024 21:10:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207849
IP address blocks: 89.234.168.0/22 maxlen: 22
2a00:5881:b100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 14:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4f:be:d1:c4:23:dd:9c:2b:dd:ca:c3:2e:bc:df:83:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f82554a856a422b061ae64c577630f91d408cd4a
Validity
Not Before: May 6 21:10:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e397155465e5b522f26c85a6b9be669944a6194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:43:60:88:80:08:6e:f1:45:b4:47:39:6f:fd:
7c:08:b2:59:16:32:1b:e9:99:40:64:1c:f8:b1:07:
df:f4:b1:e4:d1:43:38:c0:ec:08:af:36:61:9d:f1:
7d:ff:3e:12:68:d1:78:21:15:9a:68:5a:3d:f3:28:
8d:9d:2a:8b:8f:60:db:74:0a:43:ab:6f:8a:de:06:
28:37:f9:fd:ab:c7:c4:e7:5f:fa:7f:47:fb:50:eb:
78:1a:29:fb:f2:e4:53:95:99:36:c7:14:c6:31:ba:
26:4a:3b:f8:dc:b7:2d:9e:fb:72:4e:a0:12:ce:b0:
28:98:26:a4:8c:75:6f:bc:b8:7e:35:6c:64:e9:be:
be:87:fb:dc:ec:b1:d5:bc:21:fe:0f:57:f2:1b:73:
2b:9a:c5:ff:5d:3f:d4:63:c4:c0:9b:40:44:c2:a6:
a0:5c:29:2f:ec:95:db:8f:83:45:3e:1e:09:47:86:
e4:6e:e8:64:37:3c:da:71:1a:02:05:f7:7b:da:ed:
8d:c0:14:60:d6:a2:16:80:bd:07:eb:6a:12:79:04:
e8:28:63:4c:e3:af:69:3a:74:20:7a:b1:4c:66:df:
54:02:65:f6:fd:ee:98:e8:b8:fd:fc:7f:60:3b:5d:
d0:6d:ae:66:10:a7:e7:99:5a:48:67:b2:ab:2c:30:
92:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:39:71:55:46:5E:5B:52:2F:26:C8:5A:6B:9B:E6:69:94:4A:61:94
X509v3 Authority Key Identifier:
keyid:F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/bjlxVUZeW1IvJshaa5vmaZRKYZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.234.168.0/22
IPv6:
2a00:5881:b100::/40
Signature Algorithm: sha256WithRSAEncryption
4c:0b:fd:76:91:20:5b:5c:ef:30:51:c2:a8:65:4e:8a:3b:3b:
bd:87:fd:66:d6:d6:cf:04:e8:5d:3e:76:18:12:7d:99:0e:f2:
dd:0a:ec:2a:50:9b:97:9b:ed:9a:28:be:40:18:84:6b:14:1a:
2f:c4:ec:03:2f:8c:06:01:cb:49:2b:18:a5:70:08:d2:6b:5b:
86:e0:a3:f9:c8:db:d4:ab:02:53:72:15:cd:73:05:2b:bc:b0:
a1:90:cf:19:bb:95:91:52:1d:01:64:0f:bc:ef:72:6c:ff:43:
67:34:53:28:4f:08:27:14:34:2f:e9:81:4d:70:08:e4:68:4d:
80:38:cf:ed:bb:9c:45:7f:d4:aa:35:7b:7e:ce:ba:3b:03:0d:
5e:4f:9d:40:36:8b:7a:35:e1:33:5e:b2:74:7c:19:17:b3:e2:
e5:5c:37:57:8a:08:ae:33:6c:a2:e0:83:9e:46:16:80:5a:27:
13:f8:ae:d0:e9:72:9e:fe:53:2f:90:0f:c3:90:eb:49:5f:8d:
1b:e6:5e:64:60:33:92:b7:ae:7e:7f:de:a0:68:58:44:84:5a:
60:ac:f6:a4:56:d9:b3:7e:d7:75:19:21:a8:51:f3:c6:98:01:
97:dd:0b:02:44:49:8b:33:df:66:30:ae:56:66:c3:44:66:7c:
a7:93:9c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 22:59:31 2024 by rpki-client on console-ams.rpki-client.org