Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/BphWXrm3BxuErHcGI93smpNgIt8.roa
File: BphWXrm3BxuErHcGI93smpNgIt8.roa (raw, json)
Hash identifier: wH3OwbMyCENp6LU3tz6G9wG1QiuDY+uWFRFu6RfWO8A=
Subject key identifier: 06:98:56:5E:B9:B7:07:1B:84:AC:77:06:23:DD:EC:9A:93:60:22:DF
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 018CC7941C8A6CD6C9E8E9F3B5786BF4F5D1
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/BphWXrm3BxuErHcGI93smpNgIt8.roa
Signing time: Tue 02 Jan 2024 00:30:21 +0000
ROA not before: Tue 02 Jan 2024 00:30:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56340
IP address blocks: 109.248.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:1c:8a:6c:d6:c9:e8:e9:f3:b5:78:6b:f4:f5:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 00:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0698565eb9b7071b84ac770623ddec9a936022df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:0e:6e:e3:ec:b8:66:66:4d:99:3d:8e:41:f9:
03:05:cd:06:12:e1:68:2b:a9:16:fb:35:73:c6:41:
0f:1e:1a:13:bf:02:c1:34:84:bb:52:8f:75:24:8b:
d2:1a:4a:f9:c5:4c:3c:28:12:8f:5b:fd:bd:ba:0b:
27:ac:aa:39:71:f7:0c:8b:50:cf:10:07:e3:11:02:
13:9a:ba:e5:0f:a0:db:a7:22:c9:2d:f3:d9:b0:c9:
51:d6:a4:38:ee:17:2c:9f:10:cb:40:b3:83:d7:f1:
d3:78:c2:e1:32:ed:14:68:3d:36:3b:96:fc:59:a5:
14:e2:30:a3:3c:be:77:c6:25:2a:a6:45:57:9b:b1:
be:58:9d:1a:82:af:67:52:29:d3:b0:63:fb:d0:b4:
b1:d5:05:4c:1b:d9:c6:9c:fe:0b:48:b9:01:5c:61:
33:65:85:64:e1:cf:9a:32:2a:c7:12:a3:2d:6a:6f:
bb:dd:3e:37:aa:12:e5:90:ae:3a:56:07:9f:25:7a:
6d:9e:2e:ce:55:f0:1f:2c:9a:09:d4:25:7c:6b:ef:
d2:b5:a2:e2:58:73:2e:7d:3d:28:5c:2f:87:c5:e6:
b1:79:e2:6e:a7:5a:1d:16:fd:2b:ca:65:b3:08:57:
d0:16:b6:ed:ea:b5:0f:9d:e3:57:71:1a:59:e2:d5:
0f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:98:56:5E:B9:B7:07:1B:84:AC:77:06:23:DD:EC:9A:93:60:22:DF
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/BphWXrm3BxuErHcGI93smpNgIt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.248.171.0/24
Signature Algorithm: sha256WithRSAEncryption
42:7b:ff:50:8e:e2:55:1c:fa:78:53:15:d1:79:38:9f:9f:05:
08:37:08:52:67:90:88:b3:5c:b1:13:b6:9f:d5:09:cd:d4:c3:
c1:00:74:25:7f:f5:0e:14:b4:5c:ce:84:0a:0d:3c:c6:1e:16:
58:6c:8c:9e:5f:d6:a6:e8:39:7a:f9:42:53:67:bd:7e:06:88:
cc:0b:48:13:a7:a7:eb:88:25:f5:b7:86:c8:6a:a3:e5:30:e6:
aa:32:74:df:6f:ad:b7:04:19:fd:0c:c6:e4:fa:6d:fc:63:d7:
49:c6:64:e6:b8:c8:99:87:73:42:e0:f1:37:ba:d7:79:8f:92:
27:9a:c8:36:c6:85:10:dd:9c:8e:0c:23:50:79:5e:58:db:11:
b6:e7:7f:a7:07:36:be:5f:80:e4:36:60:0d:83:bb:37:27:71:
1f:83:d6:14:24:b9:0f:47:e4:e5:4f:18:55:81:95:7d:96:ba:
4b:70:e4:bb:b4:dd:f3:c5:61:d0:ba:39:d8:09:d4:5c:c3:1e:
b3:18:a0:c9:97:ce:99:94:cf:1d:73:d2:a0:64:47:ea:ff:5a:
65:47:ef:14:f0:94:40:b1:6b:37:3e:73:3c:40:0d:8a:e8:46:
5f:b7:b0:4a:71:c0:1f:03:01:8d:13:2b:c4:22:0a:1a:0c:70:
f6:b2:6b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:48:27 2024 by rpki-client on console-fra.rpki-client.org