Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/BXK_rhpop0RQcK8syf9a3rAeTT4.roa
File: BXK_rhpop0RQcK8syf9a3rAeTT4.roa (raw, json)
Hash identifier: z1zh4zbS3tECdDQ+peZ/F1y19Jw33Z7b53VzndWPKIY=
Subject key identifier: 05:72:BF:AE:1A:68:A7:44:50:70:AF:2C:C9:FF:5A:DE:B0:1E:4D:3E
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 019358BD6F7798AF6BEEDBA7BA0C50BF5633
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/BXK_rhpop0RQcK8syf9a3rAeTT4.roa
Signing time: Sat 23 Nov 2024 11:17:10 +0000
ROA not before: Sat 23 Nov 2024 11:17:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
62.72.168.0/24 maxlen: 24
62.72.185.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.4.0/22 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:bd:6f:77:98:af:6b:ee:db:a7:ba:0c:50:bf:56:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Nov 23 11:17:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0572bfae1a68a7445070af2cc9ff5adeb01e4d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:50:37:94:f4:a0:b6:d3:9f:5a:e5:9a:02:8e:
2e:63:87:12:17:5c:c7:f2:3c:52:e6:3e:3b:53:51:
b5:0d:d6:a6:25:35:22:4d:a5:ee:64:ba:c7:47:dc:
39:4a:26:b5:40:3d:36:01:f2:60:40:87:7a:1e:9e:
31:4e:15:2d:2d:da:72:76:e8:52:62:f5:e3:32:7e:
e4:b6:b4:98:a4:ee:c8:d8:34:a2:16:a6:ea:f7:19:
ac:c4:d5:33:1e:69:51:ce:46:93:92:3f:65:d1:a5:
4a:c4:1c:79:3d:17:ab:be:09:e0:88:b5:c4:fb:d4:
5e:be:a7:46:f0:85:e5:10:7f:b9:7b:29:b0:a4:d9:
48:4d:8c:be:46:61:d4:a6:be:ca:ac:ea:d7:e9:cd:
7f:7b:9b:55:ef:30:45:eb:f7:b8:bb:a9:47:8f:ce:
43:2f:12:0f:4a:a2:65:7f:0a:c7:33:20:f2:1e:ea:
f0:de:04:61:1e:4d:21:c4:9c:94:78:ba:3c:56:42:
2a:2e:b3:2b:d6:28:19:cb:9d:2d:04:37:67:d2:0b:
60:44:09:43:cb:b0:84:30:ba:99:cd:35:b1:1f:dc:
cd:7b:4d:74:4e:81:b9:c6:a2:15:34:94:8d:fa:c3:
1c:de:99:29:0f:ae:14:41:1c:84:39:b6:96:75:c3:
a7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:72:BF:AE:1A:68:A7:44:50:70:AF:2C:C9:FF:5A:DE:B0:1E:4D:3E
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/BXK_rhpop0RQcK8syf9a3rAeTT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.168.255
62.72.185.0/24
81.21.2.0-81.21.7.255
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:d8:c7:0a:7d:23:2e:dc:a2:a1:77:69:41:d3:9b:c9:a0:72:
1e:d5:bf:6f:9b:08:3d:44:04:08:eb:b0:8b:02:bd:f9:55:4a:
c3:35:54:ff:50:a3:8f:c8:d7:a3:5f:db:b3:fc:9e:ba:68:bb:
b7:b9:57:cf:5c:bc:ef:48:87:f2:ae:29:61:7f:f4:98:6d:b7:
b7:91:0b:03:e6:5b:8f:b1:d5:3c:3d:44:07:21:de:80:64:5e:
2a:a1:27:5a:cf:a3:e1:3b:d6:b7:94:cf:10:0b:4f:cb:d1:27:
89:5c:2e:99:bf:91:da:76:ba:77:47:a9:88:9c:53:e9:0d:e5:
4d:29:f9:94:81:c5:0c:4c:64:2a:68:86:60:5d:ff:7a:97:91:
ee:dc:1d:70:19:19:2d:7d:28:23:26:d8:e0:ad:ed:f7:6b:a6:
1e:de:dd:d1:60:5e:c6:f1:0b:4b:21:d4:fc:83:73:38:3c:f9:
a3:0a:40:27:d3:a6:1c:bd:8d:69:c9:3e:bd:38:a5:7a:15:83:
91:03:7b:30:20:c7:53:7f:2b:71:9a:78:6a:4d:4d:1b:ad:c8:
e1:15:2f:8b:63:50:05:00:a0:be:c0:5c:5b:e3:02:ea:b6:1c:
16:b2:f7:27:ee:de:d6:dc:10:26:a2:d0:06:3f:d3:4e:af:c6:
cf:33:0d:98
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAZNYvW93mK9r7tunugxQv1YzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjQxMTIzMTExNzEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTcyYmZhZTFhNjhhNzQ0NTA3MGFmMmNjOWZmNWFkZWIwMWU0ZDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulA3lPSgttOfWuWaAo4uY4cSF1zH
8jxS5j47U1G1DdamJTUiTaXuZLrHR9w5Sia1QD02AfJgQId6Hp4xThUtLdpyduhS
YvXjMn7ktrSYpO7I2DSiFqbq9xmsxNUzHmlRzkaTkj9l0aVKxBx5PRervgngiLXE
+9RevqdG8IXlEH+5eymwpNlITYy+RmHUpr7KrOrX6c1/e5tV7zBF6/e4u6lHj85D
LxIPSqJlfwrHMyDyHurw3gRhHk0hxJyUeLo8VkIqLrMr1igZy50tBDdn0gtgRAlD
y7CEMLqZzTWxH9zNe010ToG5xqIVNJSN+sMc3pkpD64UQRyEObaWdcOnhQIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFAVyv64aaKdEUHCvLMn/Wt6wHk0+MB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvQlhLX3JocG9wMFJRY0s4c3lmOWEzckFlVFQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBAE+SKID
BAA+SKgDBAA+SLkwDAMEAVEVAgMEA1EVAAMEALA5PzANBgkqhkiG9w0BAQsFAAOC
AQEAKtjHCn0jLtyioXdpQdObyaByHtW/b5sIPUQECOuwiwK9+VVKwzVU/1Cjj8jX
o1/bs/yeumi7t7lXz1y870iH8q4pYX/0mG23t5ELA+Zbj7HVPD1EByHegGReKqEn
Ws+j4TvWt5TPEAtPy9EniVwumb+R2na6d0epiJxT6Q3lTSn5lIHFDExkKmiGYF3/
epeR7twdcBkZLX0oIybY4K3t92umHt7d0WBexvELSyHU/INzODz5owpAJ9OmHL2N
ack+vTilehWDkQN7MCDHU38rcZp4ak1NG63I4RUvi2NQBQCgvsBcW+MC6rYcFrL3
J+7e1twQJqLQBj/TTq/GzzMNmA==
-----END CERTIFICATE-----
Generated at Mon Nov 25 21:59:52 2024 by rpki-client on console-ams.rpki-client.org