Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/Bss4rrMdi4RWykDfTzbBd2ejAtI.roa
File: Bss4rrMdi4RWykDfTzbBd2ejAtI.roa (raw, json)
Hash identifier: FrTD7IPBxmyP74fYduPdXZuxhv0OcwhCBMXz1o+nifs=
Subject key identifier: 06:CB:38:AE:B3:1D:8B:84:56:CA:40:DF:4F:36:C1:77:67:A3:02:D2
Certificate issuer: /CN=36eaa00ea777098b1bf036756d640e9d31d63b3b
Certificate serial: 018CC56E07AF06399EDB065ABCAD90053E40
Authority key identifier: 36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/Bss4rrMdi4RWykDfTzbBd2ejAtI.roa
Signing time: Mon 01 Jan 2024 14:29:31 +0000
ROA not before: Mon 01 Jan 2024 14:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204979
IP address blocks: 185.234.0.0/22 maxlen: 22
185.234.0.0/24 maxlen: 24
2a01:40:4949::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 13:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:07:af:06:39:9e:db:06:5a:bc:ad:90:05:3e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36eaa00ea777098b1bf036756d640e9d31d63b3b
Validity
Not Before: Jan 1 14:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=06cb38aeb31d8b8456ca40df4f36c17767a302d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:51:cc:9c:57:28:16:68:8b:8a:94:d6:45:b6:
eb:d4:77:72:c2:4e:9b:79:25:86:3f:bf:89:c4:7d:
37:b2:d6:00:66:f7:8e:63:2a:66:82:ba:03:39:10:
8a:01:af:3d:b1:2a:bb:a0:cc:43:5f:75:f7:f3:d8:
14:2e:a5:fb:18:2a:2e:70:88:b1:2a:03:b3:73:20:
d8:3d:87:97:51:68:01:85:4b:3a:aa:8f:b7:7a:96:
dc:2c:98:3b:e5:cd:9e:7f:67:7c:e9:dd:6b:fe:21:
e2:90:42:f7:ba:53:cb:d6:28:92:5a:9b:9b:f4:73:
84:be:05:8a:1b:b2:37:3d:99:bd:2f:2b:b5:b4:b1:
19:e4:97:94:0d:a8:ff:ba:e2:41:00:77:dd:54:2e:
d8:8c:e6:63:e6:cf:2d:ad:25:f2:d3:43:06:6d:6b:
e3:17:ff:23:18:f3:1a:25:c5:6f:c0:c8:bd:31:66:
ad:7d:67:82:ae:9f:b7:ae:3f:a6:d1:d8:63:96:b1:
49:6d:29:5a:33:26:1d:3e:78:89:3c:68:b9:6f:b1:
a5:53:9e:ee:39:39:72:9a:5f:5a:d4:5f:70:d3:5b:
7b:4b:7e:f9:bb:c4:fe:64:e2:60:d4:ce:b6:5c:85:
52:a4:a4:e3:32:bb:e0:79:6c:c5:eb:5e:75:f4:1b:
23:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:CB:38:AE:B3:1D:8B:84:56:CA:40:DF:4F:36:C1:77:67:A3:02:D2
X509v3 Authority Key Identifier:
keyid:36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/Bss4rrMdi4RWykDfTzbBd2ejAtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.0.0/22
IPv6:
2a01:40:4949::/48
Signature Algorithm: sha256WithRSAEncryption
3c:de:3a:5c:77:8c:fe:63:d5:0c:7e:70:72:46:93:0d:bf:51:
a8:b9:3a:4c:57:2f:ed:36:a4:21:78:49:54:d3:58:5f:64:08:
d4:07:82:0f:cb:c6:8e:73:0e:e9:ca:75:5c:8a:ce:fd:91:97:
db:69:a4:38:c5:d3:d8:f2:62:97:7a:e3:8e:c3:70:ba:ba:68:
9d:df:c5:e9:0d:6f:3a:cc:23:0f:fb:26:53:88:c1:39:38:ee:
93:0d:70:7e:13:c9:31:0a:91:2a:e1:01:73:3c:bd:ee:f9:ac:
80:37:7d:2c:b5:b9:df:3d:09:2c:d9:96:f7:3f:d8:9c:ed:9c:
a3:2a:31:25:5c:20:b5:eb:4e:f0:25:d1:b8:30:01:6f:ea:29:
11:9c:3a:7f:7d:32:40:6d:6d:5e:82:85:8f:06:3a:78:11:ac:
c6:a4:51:8c:2b:32:46:1f:00:12:ae:9f:68:b7:05:4a:3e:57:
2d:42:69:56:73:08:0c:87:51:ed:96:40:c4:f5:b6:13:d6:11:
aa:6b:18:a6:19:49:1a:0e:80:c8:77:1c:1d:26:a7:8f:b4:61:
76:5e:d8:a1:d9:64:37:68:fe:2c:fa:57:8a:2f:bc:2b:f7:06:
84:1d:de:37:84:b9:20:01:03:5e:d0:27:06:14:20:22:ec:80:
60:1a:d2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 18:37:55 2024 by rpki-client on console-ams.rpki-client.org