Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/bg50cP1dv3iqcvsPTieLJeIel8E.roa
File: bg50cP1dv3iqcvsPTieLJeIel8E.roa (raw, json)
Hash identifier: FPNhgiz/W6VA9q+2t9FuPgStY7XTS+777R+wqXvnmy4=
Subject key identifier: 6E:0E:74:70:FD:5D:BF:78:AA:72:FB:0F:4E:27:8B:25:E2:1E:97:C1
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 019307E3FAA84F38F052C745DA8DDADCB05D
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/bg50cP1dv3iqcvsPTieLJeIel8E.roa
Signing time: Thu 07 Nov 2024 18:30:01 +0000
ROA not before: Thu 07 Nov 2024 18:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 77.47.142.0/24 maxlen: 24
212.111.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:07:e3:fa:a8:4f:38:f0:52:c7:45:da:8d:da:dc:b0:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Nov 7 18:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e0e7470fd5dbf78aa72fb0f4e278b25e21e97c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5e:f0:3c:ac:ac:2d:ff:85:af:54:42:27:9a:
50:0c:94:5c:c4:15:63:20:04:d0:21:db:db:14:e1:
95:ea:90:78:fb:ea:93:29:77:a4:6a:80:d3:e3:2d:
f5:52:5c:9c:e5:de:b8:77:ca:af:ce:9b:8f:f9:12:
2c:c1:c6:34:85:57:9b:4e:03:d1:bd:f4:80:41:18:
58:c2:e4:56:79:fd:e1:c9:3d:33:c0:f4:31:0c:01:
fe:a5:4a:9b:b6:81:e1:e9:b8:8c:a0:17:73:1f:1b:
bb:2a:c3:47:1e:55:91:0b:20:bf:5e:6b:f3:ab:ab:
66:c3:f0:8c:8d:8b:50:2e:bf:a1:6d:d3:24:07:79:
02:93:ca:65:7c:54:2e:d8:97:a8:89:fe:ce:c6:ed:
03:01:6f:29:9c:31:b4:86:6a:34:09:18:ca:af:7a:
bc:6f:ea:bc:ca:ba:98:c5:ed:17:f0:bf:36:4b:eb:
10:f2:a5:65:5e:c9:c1:20:77:3e:00:24:a2:cd:44:
90:61:41:ea:e4:78:fa:de:4d:a0:c9:45:a6:c9:1d:
3c:45:30:68:36:b4:7a:2b:d2:75:f5:6f:5d:69:88:
54:33:64:c7:56:df:4a:93:f1:62:1e:dd:7d:ff:cc:
ae:eb:cc:a1:a5:af:0e:f9:78:9a:6f:f8:71:a1:d6:
ab:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:0E:74:70:FD:5D:BF:78:AA:72:FB:0F:4E:27:8B:25:E2:1E:97:C1
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/bg50cP1dv3iqcvsPTieLJeIel8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.142.0/24
212.111.217.0/24
Signature Algorithm: sha256WithRSAEncryption
06:bd:eb:46:2a:86:fd:fc:6b:6e:9e:b9:96:24:a2:1b:1c:84:
19:4c:fa:4a:04:ac:c2:b2:1f:7c:7d:46:57:b4:04:75:76:bc:
32:e1:48:c0:22:de:e1:9b:ad:82:ee:d3:e3:aa:21:0a:21:e4:
7a:4a:2f:b8:65:e0:62:95:d6:97:6a:04:a4:00:18:39:42:67:
73:98:b2:a9:d4:a4:39:a5:4f:fb:3a:5f:81:52:6a:67:07:e5:
3f:92:b3:94:9f:b9:37:1a:65:e2:d2:44:01:94:dc:28:49:3b:
7f:91:d5:eb:89:93:44:bc:ef:f0:60:ee:a1:ab:10:31:17:f5:
41:73:56:c0:24:27:26:0f:0a:a3:29:50:c0:62:2c:33:39:87:
21:de:3c:df:3a:32:ec:ed:f5:f0:14:b7:de:bb:4e:e0:87:a1:
fd:81:bb:bd:1a:c9:76:2b:d0:72:8a:0e:f9:c5:be:09:3f:cd:
68:dd:6b:09:e7:ed:66:50:18:7e:14:df:3c:85:9f:74:da:ef:
a9:6c:23:7b:c6:35:8d:13:91:86:1d:66:d8:6f:ce:f1:38:9b:
f1:c9:35:6a:37:de:57:2c:63:af:da:a4:bb:dc:b4:af:71:17:
d4:e8:b4:41:4f:88:58:1b:85:51:d9:43:e6:78:23:ab:9a:d3:
6d:e0:63:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:40:47 2024 by rpki-client on console-fra.rpki-client.org