Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/bfmFbDra-6hZJoAKZPkidrJ9Q78.roa
File: bfmFbDra-6hZJoAKZPkidrJ9Q78.roa (raw, json)
Hash identifier: nG0HerAoGqMAo9L3MP93DVwxuHHpHfRJeA5vVVIeHnU=
Subject key identifier: 6D:F9:85:6C:3A:DA:FB:A8:59:26:80:0A:64:F9:22:76:B2:7D:43:BF
Certificate issuer: /CN=0a06b65cbb97667abdff9b861a22f9d01d1d46cb
Certificate serial: 018CC492E34EE99CF210C260D811A4E68421
Authority key identifier: 0A:06:B6:5C:BB:97:66:7A:BD:FF:9B:86:1A:22:F9:D0:1D:1D:46:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/bfmFbDra-6hZJoAKZPkidrJ9Q78.roa
Signing time: Mon 01 Jan 2024 10:30:09 +0000
ROA not before: Mon 01 Jan 2024 10:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209615
IP address blocks: 91.132.236.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 19:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:e3:4e:e9:9c:f2:10:c2:60:d8:11:a4:e6:84:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a06b65cbb97667abdff9b861a22f9d01d1d46cb
Validity
Not Before: Jan 1 10:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6df9856c3adafba85926800a64f92276b27d43bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c4:25:72:8c:6a:0e:41:77:25:b5:e6:ce:67:
33:53:f4:17:3e:7e:05:c2:9b:a3:fe:78:25:2c:1c:
ce:f9:7b:44:2f:32:af:df:45:99:7f:53:68:7c:32:
12:57:85:a4:71:44:78:3f:7d:96:b7:7a:bb:bb:7c:
82:44:89:56:7a:bc:22:dc:8b:c0:d9:12:0e:ae:8b:
92:bb:5d:ca:1f:cb:0b:42:30:0f:c3:61:22:88:9b:
8a:d5:74:26:5a:8d:01:1e:dc:2d:b9:df:4d:05:0c:
f4:66:fc:5a:11:c2:b7:f8:87:e1:1f:ec:97:fc:93:
fb:d8:4f:5a:6e:29:de:93:e0:c9:5c:00:01:97:33:
19:a7:9c:2f:1d:39:05:5a:4b:ef:92:f8:1b:fa:12:
ca:c4:59:08:2f:3d:1d:ec:10:53:fe:fa:51:06:fd:
9f:1d:6c:f8:35:b1:8a:e6:ba:17:c6:5b:b0:8c:30:
d0:17:62:42:a9:a6:04:c4:e3:4d:28:65:35:12:93:
bf:d3:23:32:45:11:b4:fe:c7:b1:ae:bc:f6:64:b4:
49:45:3a:de:45:52:4e:3a:f0:01:16:f6:ad:b9:cd:
16:2a:25:dc:80:b9:0d:38:80:64:8a:ed:9c:a5:11:
6c:f2:0b:af:25:0c:7d:23:48:d3:65:ce:4f:34:83:
b6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F9:85:6C:3A:DA:FB:A8:59:26:80:0A:64:F9:22:76:B2:7D:43:BF
X509v3 Authority Key Identifier:
keyid:0A:06:B6:5C:BB:97:66:7A:BD:FF:9B:86:1A:22:F9:D0:1D:1D:46:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/bfmFbDra-6hZJoAKZPkidrJ9Q78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.236.0/22
Signature Algorithm: sha256WithRSAEncryption
47:78:1e:29:97:85:97:d9:36:57:0e:a2:75:bb:06:a0:7e:c6:
da:c8:16:89:49:04:ac:1f:9a:4a:1d:75:87:a2:65:be:23:51:
ad:24:b2:7d:c5:80:69:72:78:33:7d:4d:d4:56:ae:3a:c2:1c:
79:04:3e:72:54:06:00:59:6e:56:e1:c5:90:50:4f:89:13:6d:
e3:ca:b6:b1:24:2a:b1:95:9f:5c:ad:b1:5b:9f:f9:3f:05:dd:
ba:35:24:f5:68:ab:de:99:5f:28:cc:78:f6:92:98:df:5a:db:
cd:22:c4:62:72:c5:35:ff:8d:c6:4a:b5:11:d1:8f:2b:bf:d2:
1b:57:c8:b8:cb:df:f8:f4:bd:c0:3a:15:c6:b4:41:b0:5c:f8:
80:e5:24:c9:5d:f4:0d:70:54:ff:80:20:bc:72:9a:fd:03:a8:
78:5b:2c:81:a3:05:27:83:a4:48:62:58:74:ef:cf:51:d7:97:
94:13:12:1a:57:5f:97:ff:ad:b7:88:a2:ab:ac:4e:28:8b:19:
7e:03:35:72:c9:c4:67:87:94:72:35:a1:fd:1b:c0:a0:2b:7e:
18:24:5b:c7:90:fb:b4:0c:c0:fc:51:90:f5:1e:ca:19:4e:37:
ef:20:e9:36:e4:7c:30:90:84:36:7d:8a:9c:e2:2e:0f:f1:91:
b3:75:1e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 01:13:49 2024 by rpki-client on console-fra.rpki-client.org