Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/B0V48ZEWlyYIig5s51L4Yuy2APc.roa
File: B0V48ZEWlyYIig5s51L4Yuy2APc.roa (raw, json)
Hash identifier: x5dqisgVW9kx4TbM/w9rgJONTgVwPDDqdeu232WmKzU=
Subject key identifier: 07:45:78:F1:91:16:97:26:08:8A:0E:6C:E7:52:F8:62:EC:B6:00:F7
Certificate issuer: /CN=bb79847a3fe8e5c78844027ccaf0bd6e9da4624a
Certificate serial: 018CC94D242D4161630FB055EF1562F3238B
Authority key identifier: BB:79:84:7A:3F:E8:E5:C7:88:44:02:7C:CA:F0:BD:6E:9D:A4:62:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/B0V48ZEWlyYIig5s51L4Yuy2APc.roa
Signing time: Tue 02 Jan 2024 08:32:05 +0000
ROA not before: Tue 02 Jan 2024 08:32:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56648
IP address blocks: 185.20.5.0/24 maxlen: 24
2a13:2900::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:24:2d:41:61:63:0f:b0:55:ef:15:62:f3:23:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb79847a3fe8e5c78844027ccaf0bd6e9da4624a
Validity
Not Before: Jan 2 08:32:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=074578f191169726088a0e6ce752f862ecb600f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:76:be:af:de:f1:50:d1:fe:cc:28:17:7d:1b:
53:05:aa:9a:e0:e8:36:f1:e7:d8:c5:be:01:87:28:
b8:49:a8:95:5b:5c:2b:8f:2a:51:6c:58:6b:bd:52:
32:4f:23:10:d4:00:38:a8:d0:c7:9f:46:e8:ca:dc:
b5:c8:33:bd:b2:62:40:44:62:64:85:e8:4b:26:92:
b7:2a:f4:aa:26:9f:2f:db:2c:7a:77:f2:23:35:44:
80:4f:7b:df:03:8e:43:d0:8b:a8:c4:23:e3:3a:dd:
cf:9f:54:8d:4f:68:c0:87:9d:ff:c4:c2:fb:d0:93:
22:f0:8e:1b:f8:45:9a:2c:eb:16:c4:55:7e:de:28:
30:b5:41:39:b8:66:46:98:d6:36:cb:f2:9d:4c:d7:
19:4b:7d:6e:b0:12:83:ee:a6:95:9a:46:a8:3a:7d:
20:b7:86:85:9d:8f:d7:62:86:0f:0b:60:d5:e1:d9:
64:ae:6c:0c:ad:7d:78:f2:94:45:55:eb:45:da:12:
9c:bc:74:b8:ba:aa:1a:d5:17:47:f4:32:2b:56:63:
12:d8:f1:0a:85:ba:f5:31:6c:be:1f:3d:17:64:4b:
47:b4:9a:27:83:99:ef:b5:d7:c8:ef:af:ea:2e:85:
54:a5:59:be:0e:9c:07:72:0b:ac:c8:06:da:ea:aa:
cd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:45:78:F1:91:16:97:26:08:8A:0E:6C:E7:52:F8:62:EC:B6:00:F7
X509v3 Authority Key Identifier:
keyid:BB:79:84:7A:3F:E8:E5:C7:88:44:02:7C:CA:F0:BD:6E:9D:A4:62:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/B0V48ZEWlyYIig5s51L4Yuy2APc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.20.5.0/24
IPv6:
2a13:2900::/29
Signature Algorithm: sha256WithRSAEncryption
8a:b4:06:20:e4:c9:9f:25:f8:01:45:bd:47:de:67:34:00:4f:
54:c7:ba:77:d9:7d:af:b2:b1:cf:e0:4d:31:8c:e7:d6:12:5c:
6b:28:8e:f0:f2:98:81:51:2e:88:91:f4:50:11:7a:1b:5e:d0:
f1:ad:ac:c8:1b:2c:97:87:64:3f:ba:82:43:41:7f:ed:cc:27:
e5:f4:e1:ab:2f:16:1a:12:8d:08:05:b8:54:c9:90:2d:27:41:
82:23:18:28:e6:b0:a2:46:41:8d:4f:68:58:08:82:42:cc:77:
47:23:38:9a:17:9c:21:80:48:0b:89:0f:7f:57:07:54:f6:e9:
5d:e8:74:7d:ce:f9:42:cf:86:ea:fe:1b:79:62:34:e1:66:84:
e3:72:19:28:c6:ab:ea:65:9e:7b:4e:a9:2a:93:a8:78:49:82:
ac:69:1d:f5:03:15:40:8a:fc:0d:cc:55:6a:2f:57:f3:5f:57:
70:c3:b3:64:df:fd:64:05:41:dc:51:ba:86:5b:ff:5c:05:5f:
e4:48:e5:10:92:9f:ac:92:5d:cc:b1:bc:a0:99:65:57:72:97:
16:b1:b2:ba:28:52:49:76:c5:90:cd:3c:3d:2a:a6:9b:f5:84:
4b:45:a1:8b:e7:c3:23:9c:1b:87:d9:4f:5c:de:7f:34:f7:ff:
10:00:2d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:06:22 2024 by rpki-client on console-fra.rpki-client.org