Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/BcTN02HOJd3rPDK5-lQKSYao2-c.roa
File: BcTN02HOJd3rPDK5-lQKSYao2-c.roa (raw, json)
Hash identifier: bdzSTZuqk3h3w9vpXuX2qtUpoQo3ZwleNKCY1DdkwT0=
Subject key identifier: 05:C4:CD:D3:61:CE:25:DD:EB:3C:32:B9:FA:54:0A:49:86:A8:DB:E7
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018CC2DADAB33B0555B23ACD981978473BCF
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/BcTN02HOJd3rPDK5-lQKSYao2-c.roa
Signing time: Mon 01 Jan 2024 02:29:31 +0000
ROA not before: Mon 01 Jan 2024 02:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199260
IP address blocks: 82.177.30.0/23 maxlen: 23
195.136.78.0/24 maxlen: 24
195.136.12.0/23 maxlen: 23
195.136.158.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Jun 2024 18:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:da:b3:3b:05:55:b2:3a:cd:98:19:78:47:3b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 02:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05c4cdd361ce25ddeb3c32b9fa540a4986a8dbe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:65:a2:40:66:42:d3:76:1d:89:47:49:eb:75:
3d:8d:26:a1:28:52:33:6e:33:56:c8:b6:92:46:0b:
4a:4b:da:68:4a:7b:aa:c7:2d:1d:31:8c:41:82:c4:
67:a1:bb:45:0d:ff:99:0c:e6:66:5b:73:11:0b:e0:
74:f0:a0:4a:1d:b3:ca:cd:06:2f:cc:30:5e:f3:80:
0e:83:7d:52:93:f7:e7:9d:25:60:28:bc:bd:4f:51:
09:49:27:09:22:dc:6a:c9:5c:4e:b5:4d:8e:0a:ec:
07:0f:00:00:30:03:0e:bb:c6:c4:2c:c9:80:55:f3:
eb:a1:f3:b4:29:3f:9b:5a:c3:22:96:52:77:5b:c0:
be:72:83:5d:fd:3d:a3:b7:fa:32:46:f8:3c:e0:8d:
fa:01:de:3d:5a:b8:d6:c1:e8:88:61:5a:ad:79:81:
b6:92:b9:05:5c:a0:16:58:20:f6:00:20:23:b4:53:
d6:cb:fd:62:1a:8f:71:d1:94:17:38:2d:0d:cf:03:
b2:82:1f:ef:7b:47:55:8d:46:aa:5d:c5:a5:c8:2d:
34:f9:42:34:82:04:57:81:d7:b1:22:7d:a8:f4:63:
8f:50:40:fe:5f:e6:34:c1:33:d4:8a:2a:98:15:5d:
21:19:e8:c3:a8:f7:cc:93:7d:17:c4:a5:83:ab:0a:
09:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C4:CD:D3:61:CE:25:DD:EB:3C:32:B9:FA:54:0A:49:86:A8:DB:E7
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/BcTN02HOJd3rPDK5-lQKSYao2-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.177.30.0/23
195.136.12.0/23
195.136.78.0/24
195.136.158.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:6d:59:2f:32:9f:a7:a4:80:fd:17:78:01:8b:d6:23:c5:f9:
a1:9f:c3:e7:7f:f0:61:cb:bb:53:dd:86:9b:a3:4e:54:7a:b8:
6d:24:fd:0f:45:1e:74:57:ce:ed:8b:b7:97:d2:d6:33:fd:5b:
f4:78:d1:26:d5:56:8d:62:f0:a7:76:85:f3:13:ee:2c:9a:0a:
4e:81:91:4c:61:ea:a7:92:a0:9f:59:50:0d:95:ca:7c:d7:32:
ea:fc:92:a7:23:53:60:97:b4:15:24:b7:55:c1:cf:e6:69:a8:
0c:bf:ab:71:33:62:95:1a:aa:1c:ec:02:1a:bf:dc:8c:c0:e2:
01:61:54:04:6e:12:97:19:6d:09:cf:c4:83:4b:c4:c6:ed:a1:
4d:18:1c:2d:31:d3:b4:8a:1e:0d:57:fa:0f:b2:c2:14:5e:ce:
42:8e:69:04:9a:e6:79:b9:50:dc:89:4e:6a:e8:19:25:aa:1b:
46:a0:d9:71:f0:a7:02:47:27:3a:7c:fb:89:6d:17:30:15:e3:
ae:dd:0a:36:c8:2d:08:e7:89:96:97:eb:11:08:26:af:30:fe:
c9:73:91:92:8d:87:97:89:8b:ad:49:61:0e:5f:75:4d:04:40:
46:a9:70:be:c4:18:14:a4:fe:3a:b5:89:26:83:6a:2b:89:4f:
2a:7b:95:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 03:18:14 2024 by rpki-client on console-fra.rpki-client.org