Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BczznBCYKgSw7cW9_x8ASmH23bE.roa
File: BczznBCYKgSw7cW9_x8ASmH23bE.roa (raw, json)
Hash identifier: OGmlBwtpLwfYiPq+Pweio3MeAsKBgFPin792CgT0iTM=
Subject key identifier: 05:CC:F3:9C:10:98:2A:04:B0:ED:C5:BD:FF:1F:00:4A:61:F6:DD:B1
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 018CC56E1013C5B50E4EAE96914CC04C8DB5
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BczznBCYKgSw7cW9_x8ASmH23bE.roa
Signing time: Mon 01 Jan 2024 14:29:33 +0000
ROA not before: Mon 01 Jan 2024 14:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50129
IP address blocks: 185.241.122.0/24 maxlen: 24
185.241.123.0/24 maxlen: 24
194.31.104.0/22 maxlen: 22
185.225.244.0/24 maxlen: 24
185.225.246.0/24 maxlen: 24
185.225.244.0/22 maxlen: 22
185.225.245.0/24 maxlen: 24
31.15.0.0/22 maxlen: 22
185.225.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:10:13:c5:b5:0e:4e:ae:96:91:4c:c0:4c:8d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 1 14:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05ccf39c10982a04b0edc5bdff1f004a61f6ddb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cb:c9:fd:a8:e2:8d:b8:51:35:34:9d:8f:35:
b4:9d:49:dc:ee:07:32:07:46:63:e0:33:a2:27:0e:
d0:58:60:5f:a8:13:9c:9d:f3:05:15:1c:6b:a6:79:
1c:97:59:0f:2f:fe:38:c3:37:27:02:eb:7b:22:10:
53:38:c0:af:1a:b2:64:9b:25:20:90:24:df:30:10:
65:20:aa:76:f2:2f:1a:64:52:b8:e5:31:91:84:a2:
c0:53:d1:f9:05:f6:34:bb:ef:79:20:3f:e3:58:18:
08:14:a1:ec:2c:11:c7:42:77:75:18:5a:cc:bb:0b:
98:16:2f:67:d2:f8:8f:77:34:e2:9c:67:35:bd:1f:
1d:76:58:bd:8e:a5:67:3f:ac:41:c6:bc:d5:4d:3d:
0f:16:3f:b3:9b:17:05:d3:7f:ce:23:bf:5a:91:7e:
05:c1:d6:6a:6a:b4:ca:eb:76:d7:2e:b2:02:64:3a:
af:d2:be:ce:aa:d0:14:3a:76:d2:86:df:0f:86:bd:
ca:82:a6:cf:91:ce:70:48:d7:60:cd:16:66:02:71:
12:ee:01:51:65:7f:11:96:82:6e:66:1e:a8:fd:53:
ce:39:7f:ac:f6:46:06:cf:8f:99:fe:6d:5e:5a:26:
0c:ea:fe:88:05:63:7c:d0:c2:f4:47:1b:89:bc:ff:
9c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CC:F3:9C:10:98:2A:04:B0:ED:C5:BD:FF:1F:00:4A:61:F6:DD:B1
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BczznBCYKgSw7cW9_x8ASmH23bE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.15.0.0/22
185.225.244.0/22
185.241.122.0/23
194.31.104.0/22
Signature Algorithm: sha256WithRSAEncryption
47:5e:c1:fe:71:81:21:9c:29:20:af:86:1c:bb:39:2c:6a:ab:
0d:39:34:83:bd:71:6f:f1:a2:8a:34:e2:7c:35:fd:c1:90:fc:
19:f7:46:2a:d9:e1:4c:11:2d:18:90:3c:3d:e9:1b:c8:90:eb:
f9:fd:86:ee:54:61:fa:91:e4:97:7e:cb:1b:73:25:8a:55:33:
93:08:33:bb:2e:77:dd:53:01:09:61:74:72:a5:c6:5a:d1:38:
b8:93:b3:9f:a6:4f:d9:a2:43:a8:95:a4:34:1c:18:7f:12:90:
e4:70:c6:d7:a4:26:86:bd:20:a2:6c:fd:b0:0d:e5:c0:fb:fd:
cb:b4:bd:53:93:3d:68:2e:d4:de:18:32:33:4a:c1:66:c2:96:
51:7c:73:78:be:2e:25:f5:9a:db:74:da:ef:66:77:cb:53:b3:
6f:06:eb:b7:f1:ca:99:7c:9c:8b:b4:e1:95:dd:b6:67:5b:dc:
c7:73:e6:24:f6:cb:10:ff:9e:55:3c:42:8d:49:2b:12:eb:29:
88:3c:cc:36:5d:c9:56:49:dd:29:9c:45:b3:4c:fb:43:f8:95:
ea:95:da:e5:7e:f7:a0:3f:b2:15:18:5f:7f:eb:e5:b0:b5:f1:
cf:f3:88:0c:d7:c7:fc:fc:8f:76:fe:63:df:e3:4a:52:17:3b:
48:cd:fb:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:59:08 2024 by rpki-client on console-fra.rpki-client.org