Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/BWqSCkexhHkIzvsarflfsiz4xws.roa
File: BWqSCkexhHkIzvsarflfsiz4xws.roa (raw, json)
Hash identifier: lOVkkxPlquCXcIL+cR2fnTJqVPwkvyDXLQKMDJCwGug=
Subject key identifier: 05:6A:92:0A:47:B1:84:79:08:CE:FB:1A:AD:F9:5F:B2:2C:F8:C7:0B
Certificate issuer: /CN=360a9d26dbb3ea5dfaae83b61908add8fc6dd36f
Certificate serial: 018CC4938CE943C0681EFF5E3C104BB710B3
Authority key identifier: 36:0A:9D:26:DB:B3:EA:5D:FA:AE:83:B6:19:08:AD:D8:FC:6D:D3:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgqdJtuz6l36roO2GQit2Pxt028.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/BWqSCkexhHkIzvsarflfsiz4xws.roa
Signing time: Mon 01 Jan 2024 10:30:53 +0000
ROA not before: Mon 01 Jan 2024 10:30:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57075
IP address blocks: 185.104.130.0/23 maxlen: 24
2a06:3084::/30 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.mft
rsync://rpki.ripe.net/repository/DEFAULT/NgqdJtuz6l36roO2GQit2Pxt028.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:8c:e9:43:c0:68:1e:ff:5e:3c:10:4b:b7:10:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=360a9d26dbb3ea5dfaae83b61908add8fc6dd36f
Validity
Not Before: Jan 1 10:30:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=056a920a47b1847908cefb1aadf95fb22cf8c70b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:32:e0:16:6e:cc:74:5a:b3:84:17:4b:36:a5:
31:53:47:7c:3a:6f:2e:aa:54:ff:b2:5a:45:19:81:
61:d7:a0:06:fd:60:86:02:b4:ef:30:3b:8b:9d:51:
d0:52:b5:2c:0a:25:f3:73:f5:04:2c:da:74:f2:91:
c3:38:76:83:f9:15:28:de:89:bc:ab:30:3a:97:d1:
6e:ae:aa:7a:04:3a:5f:b5:c5:b9:22:9f:5e:34:83:
8d:60:c0:87:12:22:74:b6:ca:e0:1f:76:16:c8:5b:
1a:3d:8a:27:65:56:a2:60:6f:b0:8a:5b:23:f5:ad:
5a:40:b8:6f:d6:59:c3:37:b8:39:ca:66:5a:28:06:
c3:e2:28:d4:21:9d:fd:68:c5:40:ba:0e:6b:35:0b:
85:0a:4a:de:aa:81:44:00:b5:6c:b6:75:cd:a9:55:
d9:a9:05:66:e1:79:44:88:ba:4b:23:b1:43:a9:d1:
b3:69:79:c3:56:96:ac:e0:7a:2b:7b:5d:b0:98:9a:
7f:35:74:e8:7e:d1:c7:21:2d:01:2f:37:07:fe:cc:
91:b8:78:43:dc:3e:b3:ae:cf:d3:5b:fe:7f:33:b0:
fe:39:9e:42:6b:2c:f8:f8:a7:a7:4c:ba:ab:2d:a9:
49:da:27:78:58:07:24:4b:b3:f7:37:7c:27:2f:0f:
24:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:6A:92:0A:47:B1:84:79:08:CE:FB:1A:AD:F9:5F:B2:2C:F8:C7:0B
X509v3 Authority Key Identifier:
keyid:36:0A:9D:26:DB:B3:EA:5D:FA:AE:83:B6:19:08:AD:D8:FC:6D:D3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgqdJtuz6l36roO2GQit2Pxt028.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/BWqSCkexhHkIzvsarflfsiz4xws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.130.0/23
IPv6:
2a06:3084::/30
Signature Algorithm: sha256WithRSAEncryption
34:75:8b:9c:da:97:73:3a:45:e8:1e:ee:32:03:5b:9e:9a:54:
a0:95:9c:98:70:8a:e5:0a:01:d5:9c:14:00:d6:ab:3c:6b:f2:
c2:9b:44:66:1d:cc:55:0a:8d:73:13:a7:b7:f7:06:35:09:b1:
5e:5a:17:49:b1:68:a7:0a:84:89:fb:59:5d:5f:80:2f:1b:fa:
cf:4b:0a:af:30:f9:3c:2f:bd:a9:af:55:b1:f8:0e:d6:93:40:
56:66:46:a6:14:3a:93:51:c0:c4:1d:fc:19:04:39:73:10:79:
d7:22:7f:b3:6b:9c:55:57:83:a8:40:4c:9f:81:47:3a:9b:a4:
9e:f9:c9:6a:5d:5c:09:06:5a:bf:e5:bb:89:00:94:81:eb:71:
08:50:93:a2:78:10:00:ce:4b:c2:9f:8a:aa:77:07:59:f9:9f:
de:b4:20:bc:ad:2e:25:e5:06:d2:ec:4c:e9:e6:05:98:29:0a:
6c:0b:65:46:13:36:a8:a8:d5:5f:c5:99:6d:63:90:84:fe:8b:
16:75:a5:71:8e:11:d1:aa:e4:68:58:c6:64:41:97:27:b3:18:
63:39:40:c5:3a:ac:35:06:00:64:28:cc:4e:f6:92:15:6b:88:
45:f1:35:44:7f:dd:8f:d5:e3:3a:f6:90:20:94:5f:f5:cf:39:
51:b7:c0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:55:00 2024 by rpki-client on console-ams.rpki-client.org