Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/BFR1EZn9FYut0HCUGXdaBPDKitg.roa
File: BFR1EZn9FYut0HCUGXdaBPDKitg.roa (raw, json)
Hash identifier: 962DLRqeBP4K9dOKZZvI0o7xrn965pIUbHVn1zMQFp0=
Subject key identifier: 04:54:75:11:99:FD:15:8B:AD:D0:70:94:19:77:5A:04:F0:CA:8A:D8
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A40B88F90CAB4F3E06E3C0B393F56
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/BFR1EZn9FYut0HCUGXdaBPDKitg.roa
Signing time: Tue 02 Jan 2024 12:33:35 +0000
ROA not before: Tue 02 Jan 2024 12:33:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204584
IP address blocks: 92.38.41.0/24 maxlen: 24
93.171.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Jun 2024 14:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:40:b8:8f:90:ca:b4:f3:e0:6e:3c:0b:39:3f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0454751199fd158badd0709419775a04f0ca8ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cf:cd:0e:d6:fb:b2:30:d9:f5:1f:b5:69:c7:
1a:9c:da:59:fc:49:0e:ad:d6:ea:47:fb:ac:60:8c:
7f:80:25:c1:a5:a5:dd:92:4a:2b:ff:dd:28:8e:35:
9a:f4:b9:0a:46:d9:69:a9:3c:4c:53:e7:40:85:eb:
a9:7b:9d:8e:48:29:e4:74:c6:10:8c:3a:78:90:85:
94:25:50:71:82:18:6e:63:00:43:0e:89:5e:b4:f6:
2c:0b:c4:be:e0:c8:32:ce:db:95:e4:2a:62:47:f0:
eb:ca:20:cc:58:8c:dc:ec:36:25:56:56:82:7e:ab:
ef:c9:90:47:b3:a4:24:5f:b2:60:10:ba:48:d6:e2:
fb:48:d2:36:8b:81:07:11:b4:4c:53:a5:18:0f:fc:
99:36:1e:eb:e8:e3:f7:dd:20:f5:d1:17:72:0f:6e:
f1:2b:18:b3:47:b9:00:17:e0:d5:92:04:09:57:0a:
84:ec:73:ad:ac:2c:ed:fe:e8:6b:6f:75:f8:c1:b8:
f0:5b:a5:3d:fa:5a:10:81:e6:5d:7c:7b:39:1d:90:
40:e5:4a:40:dc:1d:49:b3:d3:5d:14:db:28:0e:db:
94:0d:2e:f1:81:7c:62:15:4d:c0:ca:e1:0f:42:55:
55:c9:75:20:de:cd:a4:26:cc:72:cc:6a:ff:da:a6:
22:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:54:75:11:99:FD:15:8B:AD:D0:70:94:19:77:5A:04:F0:CA:8A:D8
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/BFR1EZn9FYut0HCUGXdaBPDKitg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.41.0/24
93.171.214.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:16:42:03:48:66:be:77:89:62:4f:18:56:26:f9:84:ff:55:
0b:88:7f:bb:27:90:3d:fd:06:15:6e:44:9f:b0:8f:4c:5e:1c:
41:4c:52:59:d2:ee:a5:ac:65:0c:2f:8c:26:62:3f:3f:81:76:
e7:5f:af:d4:a1:a1:a6:36:65:10:5b:27:78:4d:46:c1:8e:50:
63:31:cd:cb:4e:26:24:a6:7d:cc:ed:0a:9c:1e:a4:ba:33:5b:
8c:33:e6:ed:6f:e2:04:09:c7:9c:26:2c:d2:b6:f3:b2:e9:69:
9b:60:a3:ed:9f:91:e4:13:4b:f5:7d:c1:b3:15:35:35:09:4f:
e8:61:fc:bd:24:02:c9:78:bd:38:69:ae:fa:16:a8:79:0c:18:
74:fb:5e:2e:c9:51:50:f6:21:1b:a2:c0:d6:75:18:ef:b7:0b:
05:83:58:6d:f5:30:f4:01:18:7f:cf:b3:b7:90:2c:94:4a:0e:
d7:3e:e7:e8:a2:e6:59:f0:05:8d:97:72:0e:62:94:4a:e4:49:
3b:dc:30:eb:7b:69:37:71:a2:c2:88:45:7c:c7:f3:58:46:73:
8d:e1:21:22:cd:8d:b2:96:a4:ff:19:4e:ce:49:53:23:ca:29:
6f:4b:f3:66:28:d1:e8:d8:f1:b5:fb:bd:f0:18:c7:7f:b6:d5:
ca:f4:04:d4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzKKkC4j5DKtPPgbjwLOT9WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjQwMTAyMTIzMzM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDU0NzUxMTk5ZmQxNThiYWRkMDcwOTQxOTc3NWEwNGYwY2E4YWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlc/NDtb7sjDZ9R+1accanNpZ/EkO
rdbqR/usYIx/gCXBpaXdkkor/90ojjWa9LkKRtlpqTxMU+dAheupe52OSCnkdMYQ
jDp4kIWUJVBxghhuYwBDDoletPYsC8S+4MgyztuV5CpiR/DryiDMWIzc7DYlVlaC
fqvvyZBHs6QkX7JgELpI1uL7SNI2i4EHEbRMU6UYD/yZNh7r6OP33SD10RdyD27x
KxizR7kAF+DVkgQJVwqE7HOtrCzt/uhrb3X4wbjwW6U9+loQgeZdfHs5HZBA5UpA
3B1Js9NdFNsoDtuUDS7xgXxiFU3AyuEPQlVVyXUg3s2kJsxyzGr/2qYiNwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFARUdRGZ/RWLrdBwlBl3WgTwyorYMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvQkZSMUVabjlGWXV0MEhDVUdYZGFCUERLaXRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXCYpAwQA
XavWMA0GCSqGSIb3DQEBCwUAA4IBAQCqFkIDSGa+d4liTxhWJvmE/1ULiH+7J5A9
/QYVbkSfsI9MXhxBTFJZ0u6lrGUML4wmYj8/gXbnX6/UoaGmNmUQWyd4TUbBjlBj
Mc3LTiYkpn3M7QqcHqS6M1uMM+btb+IECcecJizStvOy6WmbYKPtn5HkE0v1fcGz
FTU1CU/oYfy9JALJeL04aa76Fqh5DBh0+14uyVFQ9iEbosDWdRjvtwsFg1ht9TD0
ARh/z7O3kCyUSg7XPufoouZZ8AWNl3IOYpRK5Ek73DDre2k3caLCiEV8x/NYRnON
4SEizY2ylqT/GU7OSVMjyilvS/NmKNHo2PG1+73wGMd/ttXK9ATU
-----END CERTIFICATE-----
Generated at Mon Jun 10 22:24:08 2024 by rpki-client on console-ams.rpki-client.org