Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/bzBKU6eXwwqqdUb44TjC--f-OGs.roa
File: bzBKU6eXwwqqdUb44TjC--f-OGs.roa (raw, json)
Hash identifier: N+aQKh7fLRs10CI0m1PR+mgex0T+v81/a1yP3YRoLKs=
Subject key identifier: 6F:30:4A:53:A7:97:C3:0A:AA:75:46:F8:E1:38:C2:FB:E7:FE:38:6B
Certificate issuer: /CN=7f03a1f8c334fdbf4b78def0c592ff0490ddf4b0
Certificate serial: 018CC793FADE345F7BAFD3C889F20F71811C
Authority key identifier: 7F:03:A1:F8:C3:34:FD:BF:4B:78:DE:F0:C5:92:FF:04:90:DD:F4:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/bzBKU6eXwwqqdUb44TjC--f-OGs.roa
Signing time: Tue 02 Jan 2024 00:30:13 +0000
ROA not before: Tue 02 Jan 2024 00:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 185.13.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:fa:de:34:5f:7b:af:d3:c8:89:f2:0f:71:81:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f03a1f8c334fdbf4b78def0c592ff0490ddf4b0
Validity
Not Before: Jan 2 00:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f304a53a797c30aaa7546f8e138c2fbe7fe386b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:14:81:20:8f:1f:6a:d3:9b:13:3c:64:06:cb:
fb:c5:42:8d:8f:4e:2c:69:e1:cf:17:a2:7e:25:6a:
ab:2b:1e:7e:ae:0a:d5:2f:e4:01:a2:62:f2:b9:31:
e5:f2:be:c9:0b:98:70:c3:65:0d:1d:93:37:39:79:
63:d3:1e:73:da:8d:9f:9a:fb:52:b2:c2:35:7a:75:
e8:b9:e8:14:a0:81:d0:32:5c:7d:0d:0d:73:21:e0:
02:9a:d8:98:91:5b:96:8a:db:4b:fe:92:08:0a:37:
ba:d4:e1:64:7c:a9:bb:d2:d3:1a:25:d9:43:76:35:
9e:2a:ee:d1:6f:93:98:26:38:1b:8b:b8:b9:b1:54:
7c:49:42:97:3a:70:5f:ce:7d:2d:99:97:9e:be:be:
ff:f1:2a:86:61:25:62:05:c4:2c:73:02:74:2d:e8:
96:13:aa:b7:8c:f5:0d:31:a5:f4:8f:1c:d1:5d:f5:
fb:b6:40:8f:10:1d:71:72:08:17:53:b6:17:1f:fe:
47:81:c0:52:2c:4e:cb:82:87:34:94:85:fa:c8:3e:
54:b2:07:62:06:33:b4:c8:65:f4:19:2e:75:5a:8b:
98:4a:84:e3:bf:b8:e3:d7:74:9e:e4:02:1d:f2:5a:
72:8d:98:ce:a4:86:b5:a7:3e:04:f8:86:df:99:89:
4e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:30:4A:53:A7:97:C3:0A:AA:75:46:F8:E1:38:C2:FB:E7:FE:38:6B
X509v3 Authority Key Identifier:
keyid:7F:03:A1:F8:C3:34:FD:BF:4B:78:DE:F0:C5:92:FF:04:90:DD:F4:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/bzBKU6eXwwqqdUb44TjC--f-OGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.13.14.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:a5:bb:9f:25:93:e8:9c:0c:b4:6b:87:45:c1:76:bf:6c:8e:
6b:f6:a8:c4:fe:ab:4a:3d:1d:69:f4:47:9f:38:04:79:ec:b1:
64:e9:ee:8a:53:27:85:a4:90:25:a3:72:e5:6f:70:ac:20:0c:
04:af:42:53:61:62:7b:a2:f6:bb:ff:92:0f:4f:31:9a:cc:0e:
b8:bd:ff:53:45:73:03:43:8c:1a:f9:5d:7b:2c:02:a9:31:ed:
aa:15:36:66:52:e9:fb:fe:90:41:3c:05:d3:c8:02:85:2a:b0:
c6:ec:58:6e:26:7b:b8:17:b8:d5:d8:7c:06:c5:bb:60:50:4f:
7a:78:fa:c7:be:7d:de:88:d4:d9:75:08:51:22:73:1a:b6:ed:
3c:07:8a:6a:01:77:21:f4:bb:3c:e2:f4:91:67:38:ba:76:2b:
9b:ee:cf:77:a7:cf:66:d1:a0:ee:a5:b9:e1:79:5a:29:8c:98:
18:11:e4:35:d1:40:19:5d:65:31:7f:d3:46:36:d0:2a:65:ab:
c3:d7:48:62:c0:3b:b2:4f:7b:21:c9:0f:17:49:09:b2:82:bb:
c1:95:2a:b2:9d:48:36:68:16:b6:ea:6c:4f:99:b1:3f:17:1c:
73:5f:95:c6:8d:b7:73:11:bd:42:18:b2:fc:3f:0b:26:0a:0c:
75:f4:03:c7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHk/reNF97r9PIifIPcYEcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmMDNhMWY4YzMzNGZkYmY0Yjc4ZGVmMGM1OTJmZjA0OTBk
ZGY0YjAwHhcNMjQwMTAyMDAzMDEzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjMwNGE1M2E3OTdjMzBhYWE3NTQ2ZjhlMTM4YzJmYmU3ZmUzODZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhSBII8fatObEzxkBsv7xUKNj04s
aeHPF6J+JWqrKx5+rgrVL+QBomLyuTHl8r7JC5hww2UNHZM3OXlj0x5z2o2fmvtS
ssI1enXouegUoIHQMlx9DQ1zIeACmtiYkVuWittL/pIICje61OFkfKm70tMaJdlD
djWeKu7Rb5OYJjgbi7i5sVR8SUKXOnBfzn0tmZeevr7/8SqGYSViBcQscwJ0LeiW
E6q3jPUNMaX0jxzRXfX7tkCPEB1xcggXU7YXH/5HgcBSLE7Lgoc0lIX6yD5Usgdi
BjO0yGX0GS51WouYSoTjv7jj13Se5AId8lpyjZjOpIa1pz4E+IbfmYlOIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG8wSlOnl8MKqnVG+OE4wvvn/jhrMB8GA1UdIwQY
MBaAFH8DofjDNP2/S3je8MWS/wSQ3fSwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZndPaC1NTTBfYjlMZU43d3haTF9CSkRkOUxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8zZmUxYTAtYzZmZC00YmM0LWFhZTEt
OWVlMDA2OTQyYjRiLzEvYnpCS1U2ZVh3d3FxZFViNDRUakMtLWYtT0dzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8zZmUxYTAtYzZmZC00YmM0LWFhZTEtOWVlMDA2OTQyYjRi
LzEvZndPaC1NTTBfYjlMZU43d3haTF9CSkRkOUxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQ0OMA0G
CSqGSIb3DQEBCwUAA4IBAQAupbufJZPonAy0a4dFwXa/bI5r9qjE/qtKPR1p9Eef
OAR57LFk6e6KUyeFpJAlo3Llb3CsIAwEr0JTYWJ7ova7/5IPTzGazA64vf9TRXMD
Q4wa+V17LAKpMe2qFTZmUun7/pBBPAXTyAKFKrDG7FhuJnu4F7jV2HwGxbtgUE96
ePrHvn3eiNTZdQhRInMatu08B4pqAXch9Ls84vSRZzi6diub7s93p89m0aDupbnh
eVopjJgYEeQ10UAZXWUxf9NGNtAqZavD10hiwDuyT3shyQ8XSQmygrvBlSqynUg2
aBa26mxPmbE/FxxzX5XGjbdzEb1CGLL8PwsmCgx19APH
-----END CERTIFICATE-----
Generated at Thu May 2 17:55:35 2024 by rpki-client on console-ams.rpki-client.org