Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/bld-BCUIkqrySWclgtxoFZkfsNE.roa
File: bld-BCUIkqrySWclgtxoFZkfsNE.roa (raw, json)
Hash identifier: RTO7hiCLq0TDsh6JliTZr79vuytRi9u4rJkGHPlLWvI=
Subject key identifier: 6E:57:7E:04:25:08:92:AA:F2:49:67:25:82:DC:68:15:99:1F:B0:D1
Certificate issuer: /CN=dd0b663c45d7bc2724d168485087581e14448fb6
Certificate serial: 018CC801AF99706EA2CD42BCF5507E713710
Authority key identifier: DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/bld-BCUIkqrySWclgtxoFZkfsNE.roa
Signing time: Tue 02 Jan 2024 02:30:02 +0000
ROA not before: Tue 02 Jan 2024 02:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9051
IP address blocks: 82.112.161.0/26 maxlen: 26
82.112.160.0/21 maxlen: 24
193.227.160.0/19 maxlen: 24
37.209.248.0/21 maxlen: 24
213.175.160.0/19 maxlen: 24
185.124.212.0/22 maxlen: 24
2a06:b540::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 10:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:af:99:70:6e:a2:cd:42:bc:f5:50:7e:71:37:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd0b663c45d7bc2724d168485087581e14448fb6
Validity
Not Before: Jan 2 02:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e577e04250892aaf249672582dc6815991fb0d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:09:e8:b9:a0:f8:0b:f0:1f:35:5e:da:fd:d2:
47:81:f4:f7:ed:fe:ff:3f:35:f9:57:ba:3e:33:f6:
24:8e:6e:53:b4:35:09:e5:66:d9:96:df:57:21:37:
9e:10:9b:ae:d7:d5:95:13:4e:4e:70:7c:a9:fc:ff:
19:1d:e5:ab:5c:0f:73:07:74:ba:81:00:4e:30:5b:
ed:55:8e:17:be:b9:7a:ee:c2:9c:00:d4:0d:79:33:
58:c8:2c:09:e7:25:80:d1:c8:fc:35:04:0f:73:9b:
dd:58:ad:02:d8:e0:ea:9d:33:b3:3f:8f:f3:cd:44:
47:4a:02:c2:04:43:45:e6:77:a6:14:9d:27:11:83:
d8:65:81:58:02:aa:96:34:2e:f2:6f:0b:0f:1e:2d:
1f:72:bc:c2:81:15:8a:28:38:3f:d4:ae:e9:47:78:
8c:df:46:7b:c8:0d:65:ff:06:9a:a9:15:07:01:c2:
70:5e:b6:57:73:13:9f:c0:24:4d:a9:61:c2:39:29:
e5:fb:c8:b8:aa:e7:49:f1:46:3a:b2:66:2b:d3:c5:
2e:e1:0c:87:0d:3a:98:9b:b5:ff:fc:ac:24:42:c5:
89:6e:03:5a:77:1a:57:a7:b6:cf:81:90:71:30:f9:
56:f1:47:81:89:00:86:c6:78:bb:95:88:35:00:22:
2b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:57:7E:04:25:08:92:AA:F2:49:67:25:82:DC:68:15:99:1F:B0:D1
X509v3 Authority Key Identifier:
keyid:DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/bld-BCUIkqrySWclgtxoFZkfsNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.248.0/21
82.112.160.0/21
185.124.212.0/22
193.227.160.0/19
213.175.160.0/19
IPv6:
2a06:b540::/29
Signature Algorithm: sha256WithRSAEncryption
9d:06:07:0d:eb:9d:ef:00:59:30:11:19:db:d1:96:2b:f9:d7:
d8:63:c3:a5:5a:92:88:9a:b8:b2:1e:4c:9c:95:35:ed:12:30:
c6:69:11:8c:0a:e0:36:72:95:dc:ee:f7:c1:3f:89:60:32:11:
2b:a9:72:07:70:14:fa:54:fe:d6:0d:99:6a:27:b2:dd:75:89:
23:ed:17:6e:02:06:a4:e1:fe:22:d1:2c:82:12:d5:26:da:ef:
c4:f8:9f:a1:ee:63:f2:19:9c:c2:c0:52:df:8c:d5:d2:92:bb:
af:61:fc:0d:6b:48:1a:e4:f3:af:76:39:70:a9:db:5b:1b:42:
30:92:91:e1:aa:03:52:b5:dc:a5:39:bf:92:bf:f1:73:8b:8c:
64:53:d4:fa:d0:77:b0:f4:bb:b6:df:f0:46:56:50:0d:6a:88:
c1:6b:04:17:61:17:f4:95:36:e2:7f:42:59:c5:6d:2a:3b:2c:
c3:95:da:c6:d7:85:f5:98:08:75:ac:a3:87:cd:b4:cc:22:8a:
87:60:1b:be:a0:ac:a2:9e:df:75:83:59:ee:ef:78:db:87:26:
41:07:f3:74:33:42:98:05:86:22:a2:50:34:20:40:17:b4:ec:
35:40:40:98:a7:fc:c1:8d:35:d1:43:7c:f0:e7:e0:7c:e7:9e:
5c:e1:0b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 16:13:42 2024 by rpki-client on console-ams.rpki-client.org