Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/BjqDNqIWtQuc_swoJ7kQC1Jm0fA.roa
File: BjqDNqIWtQuc_swoJ7kQC1Jm0fA.roa (raw, json)
Hash identifier: bHJQ29/VS+A7/WkEwNda9Ci68L4ccimHC4kkrquI5NM=
Subject key identifier: 06:3A:83:36:A2:16:B5:0B:9C:FE:CC:28:27:B9:10:0B:52:66:D1:F0
Certificate issuer: /CN=747aae5d24b0c97a42031f3510a14e2f95bbd838
Certificate serial: 018CC4249CF9B8FD46D3227BC1E333A32B91
Authority key identifier: 74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/BjqDNqIWtQuc_swoJ7kQC1Jm0fA.roa
Signing time: Mon 01 Jan 2024 08:29:42 +0000
ROA not before: Mon 01 Jan 2024 08:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51395
IP address blocks: 185.78.124.0/22 maxlen: 22
2a05:6a00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:9c:f9:b8:fd:46:d3:22:7b:c1:e3:33:a3:2b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=747aae5d24b0c97a42031f3510a14e2f95bbd838
Validity
Not Before: Jan 1 08:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=063a8336a216b50b9cfecc2827b9100b5266d1f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:44:81:69:15:ff:64:85:a6:29:ff:0b:a2:1f:
f1:37:b0:93:0a:34:f1:60:d4:95:63:35:1d:cb:e2:
68:f7:ea:68:c1:6c:05:b8:7c:05:f8:84:4a:82:2e:
0a:ff:61:10:d0:51:ba:32:21:dc:6a:a8:e9:07:2b:
55:b2:dd:c2:6a:b1:c9:ec:7d:8d:3e:75:ed:7c:f9:
07:66:3b:d5:19:ce:d1:13:d5:d0:61:37:85:f9:ac:
15:30:ea:1c:ab:df:82:a6:e5:35:c8:8e:21:f0:b7:
c9:0c:1a:86:a3:5b:4b:08:68:8f:f3:26:31:83:51:
cd:73:b0:1c:22:bc:a6:d6:62:06:b3:0b:f9:f3:32:
f2:60:ba:29:66:76:c2:93:97:ba:65:3f:40:3f:92:
c9:99:54:43:df:38:32:29:3a:1e:5e:3a:3e:d6:6f:
87:39:ac:9a:4b:3b:60:cb:f5:ee:85:de:f2:fd:1b:
54:0c:3b:b4:0c:b1:90:fa:e3:3b:4a:a0:e1:da:a9:
7c:a0:94:02:f2:b7:4e:53:b6:d8:0e:aa:43:6d:90:
ba:8b:95:35:1a:63:99:55:10:6e:19:6b:26:31:27:
08:2f:d3:b8:5a:cd:f8:62:0e:24:80:c3:2d:c4:7c:
5e:a5:81:85:d8:3a:94:be:58:31:47:d6:34:ec:5e:
4d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:3A:83:36:A2:16:B5:0B:9C:FE:CC:28:27:B9:10:0B:52:66:D1:F0
X509v3 Authority Key Identifier:
keyid:74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/BjqDNqIWtQuc_swoJ7kQC1Jm0fA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.78.124.0/22
IPv6:
2a05:6a00::/29
Signature Algorithm: sha256WithRSAEncryption
42:42:87:78:c9:94:75:b9:e0:c9:75:8b:fc:c9:5a:15:c9:10:
27:1a:fc:d3:16:f5:c7:e4:c3:89:69:cb:a1:04:e8:4c:2c:a8:
0b:cb:40:02:49:91:b3:63:6c:6b:3a:8f:35:db:24:a6:1c:28:
75:80:9e:92:12:30:b6:b8:8f:3f:05:2a:b2:e5:a7:e1:57:95:
94:40:6b:2b:58:b9:2b:c9:88:08:22:25:c5:b0:15:0b:d1:74:
7e:99:8e:a7:b7:47:c5:22:a2:3e:69:33:34:52:3a:93:d7:4e:
f8:4d:47:22:02:7b:bb:69:dd:bc:bc:12:ab:2d:73:eb:1d:20:
6f:e1:ed:81:48:2f:d0:9b:94:fd:09:5b:05:cb:19:35:f0:39:
18:43:cd:81:b7:31:7c:4b:b7:09:ed:5b:ce:05:e3:cf:a5:0e:
3e:17:1f:a6:02:58:49:51:59:c1:08:19:80:40:b9:ac:41:99:
de:81:b8:e7:15:9d:66:01:99:d1:36:09:39:7f:e9:c5:a8:73:
b1:7f:6b:1a:7f:7b:ca:e2:d8:41:97:a4:10:01:d2:bc:9c:1e:
61:0d:78:55:7c:32:a9:83:51:32:19:fb:92:21:d1:e7:75:58:
20:d5:9d:11:af:d5:0b:cd:7a:07:39:dd:3e:3a:41:f0:5e:c5:
2e:d1:0a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 15:58:52 2024 by rpki-client on console-fra.rpki-client.org