Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/BZZi1U4-E7QtpjYA2GJdsHKBiGs.roa
File: BZZi1U4-E7QtpjYA2GJdsHKBiGs.roa (raw, json)
Hash identifier: YKqb2NQwNcS04l9LjK0qkEY4Qzfh3eaKxKIYJ/A24G8=
Subject key identifier: 05:96:62:D5:4E:3E:13:B4:2D:A6:36:00:D8:62:5D:B0:72:81:88:6B
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018F774DEA15AFCA19D5792D2DB4553B9121
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/BZZi1U4-E7QtpjYA2GJdsHKBiGs.roa
Signing time: Tue 14 May 2024 13:32:25 +0000
ROA not before: Tue 14 May 2024 13:32:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211025
IP address blocks: 88.220.58.0/24 maxlen: 24
195.136.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Jun 2024 16:26:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:77:4d:ea:15:af:ca:19:d5:79:2d:2d:b4:55:3b:91:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: May 14 13:32:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=059662d54e3e13b42da63600d8625db07281886b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:91:49:8d:8a:61:09:b7:0c:f4:65:3b:fd:22:
ea:04:ab:71:8b:9b:05:1d:4f:20:ad:62:35:da:78:
88:3c:ad:3f:d7:9e:83:ff:6f:18:33:0c:75:5a:f6:
b9:5a:22:72:98:ed:f5:93:24:47:0a:85:71:5f:86:
ad:4b:e7:04:ef:d4:55:52:60:c1:e6:d5:c0:44:8d:
c6:dd:6b:33:bb:95:c1:26:7a:8c:df:de:4b:40:59:
a8:1f:74:7c:f0:ff:d0:30:76:b6:6f:91:12:c9:95:
39:d3:8a:af:6e:1d:c7:fa:6f:45:2f:cd:80:e6:94:
80:7d:61:f1:c8:cc:12:5f:58:55:cc:73:05:31:3e:
e5:88:92:e4:72:e8:aa:cc:27:a0:a4:f4:ae:b5:d3:
4c:79:bd:c2:b5:6e:ec:e4:75:dc:6a:25:08:79:40:
27:52:7c:0b:86:cc:25:d3:a8:9f:14:f7:76:b1:7d:
68:51:8d:80:a3:30:75:16:01:11:cd:97:d9:aa:c1:
8b:a1:10:51:85:dc:01:a7:1a:0b:b5:1e:f4:d3:df:
de:a8:57:68:31:35:07:17:d1:c4:21:1d:fa:22:5d:
74:09:91:96:e7:02:9e:b4:db:c5:43:f8:e7:e8:1f:
ac:5f:0e:93:dc:56:e3:28:fd:c9:f7:6b:d1:35:77:
67:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:96:62:D5:4E:3E:13:B4:2D:A6:36:00:D8:62:5D:B0:72:81:88:6B
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/BZZi1U4-E7QtpjYA2GJdsHKBiGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.220.58.0/24
195.136.70.0/24
Signature Algorithm: sha256WithRSAEncryption
62:f0:c1:ea:99:d6:43:45:7b:4f:7f:35:31:f7:5d:53:fa:22:
c1:1e:75:db:54:bc:b9:1f:5d:49:98:5f:81:ed:f6:e3:b0:dc:
c5:e3:fe:d5:59:b5:f3:d8:2a:dc:70:7e:8d:5b:6f:51:41:0b:
7c:65:c3:c6:a0:64:7c:10:55:3f:64:60:01:2d:fd:7f:55:fe:
e1:e2:74:e7:e6:eb:41:e9:05:08:52:b6:d8:0e:a8:45:1f:68:
ef:73:de:37:69:f8:a6:a6:48:04:33:52:31:31:d8:95:4d:7c:
06:6f:ff:d2:9e:20:83:55:39:fb:e9:6a:bd:35:c1:0e:be:e3:
b1:18:d0:33:05:ed:bf:ad:d8:87:5a:a1:dc:0f:27:d1:41:46:
1d:33:ec:f0:5d:39:c7:67:cf:f2:a3:d3:54:08:f8:ce:11:d8:
04:44:bf:cc:3a:5b:0a:23:8a:45:96:2b:8a:02:6b:74:4a:4a:
f6:49:37:96:1a:95:f4:b1:70:bf:67:60:f1:99:be:49:0c:35:
73:66:21:0d:2a:af:4f:27:5d:09:b5:f9:bb:86:c4:e2:2b:91:
6a:be:be:38:bd:ca:f2:55:ad:9d:86:42:d1:db:06:45:e9:eb:
e6:21:42:99:a4:7e:47:0b:a1:2e:77:11:5b:1c:d2:af:85:2f:
76:04:12:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:59:53 2024 by rpki-client on console-fra.rpki-client.org