Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/BHvyhif9GMmanQ3F4qPzZc7jyh0.roa
File: BHvyhif9GMmanQ3F4qPzZc7jyh0.roa (raw, json)
Hash identifier: qtVN5rYzyJvdsPOba6knt9gr32YKqWxnGzjt5BgpMZ4=
Subject key identifier: 04:7B:F2:86:27:FD:18:C9:9A:9D:0D:C5:E2:A3:F3:65:CE:E3:CA:1D
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 019358BD6FEE176880201CBDA8058EE3989F
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/BHvyhif9GMmanQ3F4qPzZc7jyh0.roa
Signing time: Sat 23 Nov 2024 11:17:10 +0000
ROA not before: Sat 23 Nov 2024 11:17:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 176.57.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:bd:6f:ee:17:68:80:20:1c:bd:a8:05:8e:e3:98:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Nov 23 11:17:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=047bf28627fd18c99a9d0dc5e2a3f365cee3ca1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:61:cd:f9:3b:d6:82:99:a4:6c:17:88:84:b2:
6a:c9:29:13:00:b8:06:2c:05:1a:39:42:a9:33:bf:
e8:8e:c6:f7:0b:95:57:b5:a9:90:25:ad:5b:c6:6a:
c6:e7:3f:cd:3c:f3:2c:7c:c5:c0:88:0c:6d:91:12:
dc:4d:60:d2:87:d9:a4:16:ae:98:40:16:b1:95:9c:
f5:06:ab:fc:8e:bf:01:19:f1:f4:b9:59:81:c5:9f:
39:cd:6e:49:d4:a7:f2:38:bc:92:ac:a8:4f:40:68:
8b:21:3a:65:15:6f:3f:5a:47:c8:ab:12:31:65:b1:
93:e7:f7:42:6e:f7:05:01:3f:1f:30:2a:f8:c8:6c:
24:22:ac:2a:e3:39:ed:ed:24:af:d1:2e:f5:26:51:
1a:06:b2:c2:29:67:c9:6d:81:e9:db:0f:b6:60:f1:
4a:50:30:cf:83:ba:89:ef:4f:f9:38:c7:d1:8f:4f:
b0:ca:6c:84:8b:0e:be:49:c9:f7:5a:d2:03:cd:f7:
a4:6f:b5:76:82:85:92:de:e2:36:e6:41:d1:11:05:
72:41:c1:02:89:de:ca:0d:05:31:21:ec:31:a1:7f:
0f:2f:66:c3:e9:6d:62:ec:c4:b5:18:3d:85:2c:e4:
a6:21:f5:a2:20:38:95:01:ea:5b:be:88:56:8e:f8:
1f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:7B:F2:86:27:FD:18:C9:9A:9D:0D:C5:E2:A3:F3:65:CE:E3:CA:1D
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/BHvyhif9GMmanQ3F4qPzZc7jyh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.57.55.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:84:59:8f:d3:1f:cd:d6:9d:d1:d9:52:23:82:0b:3d:e1:2d:
3c:9d:e3:e0:95:34:37:ea:7b:af:43:06:ed:af:2a:a7:c5:32:
4e:f6:f8:a7:c7:0e:15:70:2e:e2:e7:64:4b:b3:66:cc:36:41:
cc:24:c4:e2:ed:65:d9:3e:fd:2a:de:57:a6:db:39:3d:5d:73:
0c:f9:17:d2:75:b7:8d:22:a8:a9:ad:44:b6:e5:4f:e6:7e:ed:
05:ca:02:98:c3:ad:63:07:81:23:27:f1:1b:3e:d9:0a:e9:b0:
b5:25:8f:5f:39:38:99:54:ae:35:75:ce:4c:34:a1:b6:71:09:
01:65:d9:42:e2:c5:7f:3d:3a:22:5f:5c:90:cb:40:41:7a:14:
f3:99:c0:d4:60:78:51:00:07:64:7b:47:74:3c:77:f5:78:88:
69:c3:2e:73:23:dc:6e:9a:16:62:e7:e6:84:86:f1:e9:6b:fc:
01:0e:06:88:46:ca:17:bb:e8:9d:24:bc:09:37:0b:7b:5e:b7:
12:c2:fa:20:21:a1:9b:b5:dd:9e:6c:04:fb:a3:22:b5:45:ad:
d6:9d:1a:b1:08:76:87:b2:07:28:d8:15:d7:42:e2:1f:41:c8:
03:89:1d:04:c1:02:b3:da:24:ba:8b:e2:11:0f:0e:68:91:2a:
c3:2d:c6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:31:18 2024 by rpki-client on console-fra.rpki-client.org