Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/25e6d6-ced1-4283-8c9f-c84ccba4e607/1/bugVZ5L9oBf1JaEoKlEs1NHSqOs.roa
File: bugVZ5L9oBf1JaEoKlEs1NHSqOs.roa (raw, json)
Hash identifier: h5oA8EsrTZZy3r6wKnJjQMCPA0A59Yt919MkhExfKeM=
Subject key identifier: 6E:E8:15:67:92:FD:A0:17:F5:25:A1:28:2A:51:2C:D4:D1:D2:A8:EB
Certificate issuer: /CN=b543ef9bc3c2132361c1240972a180912bf7a859
Certificate serial: 018CC7955789704E8E70C609A4545156F91D
Authority key identifier: B5:43:EF:9B:C3:C2:13:23:61:C1:24:09:72:A1:80:91:2B:F7:A8:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUPvm8PCEyNhwSQJcqGAkSv3qFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/25e6d6-ced1-4283-8c9f-c84ccba4e607/1/bugVZ5L9oBf1JaEoKlEs1NHSqOs.roa
Signing time: Tue 02 Jan 2024 00:31:42 +0000
ROA not before: Tue 02 Jan 2024 00:31:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200647
IP address blocks: 185.67.196.0/22 maxlen: 24
2a05:1280::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/25e6d6-ced1-4283-8c9f-c84ccba4e607/1/tUPvm8PCEyNhwSQJcqGAkSv3qFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/25e6d6-ced1-4283-8c9f-c84ccba4e607/1/tUPvm8PCEyNhwSQJcqGAkSv3qFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUPvm8PCEyNhwSQJcqGAkSv3qFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 May 2024 03:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:57:89:70:4e:8e:70:c6:09:a4:54:51:56:f9:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b543ef9bc3c2132361c1240972a180912bf7a859
Validity
Not Before: Jan 2 00:31:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ee8156792fda017f525a1282a512cd4d1d2a8eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a7:d6:8a:25:c6:7f:08:3b:1b:55:bd:ff:1b:
18:9f:27:0d:75:d8:10:31:8c:61:fb:72:a8:11:db:
ef:17:66:fd:4a:39:cb:03:6a:b1:5b:7b:c6:a0:ca:
53:00:7d:2a:3f:a9:3d:2c:df:c5:10:15:60:84:2c:
76:ce:3a:d5:60:6b:78:ff:76:d8:e6:bc:59:8b:3d:
72:49:56:20:a5:8b:c6:da:84:48:aa:e8:9f:2b:65:
17:90:73:77:a3:f5:3d:33:14:07:65:1d:cf:b6:3e:
02:ee:e4:5e:af:d6:e7:01:33:d7:ec:31:f2:0c:82:
72:97:c6:e8:27:5b:18:34:dd:41:b6:f5:06:d0:08:
93:72:7f:03:36:13:f7:df:7b:99:b2:aa:26:5c:70:
95:b0:09:7e:29:24:5f:d6:10:e8:b3:4d:e5:c1:0c:
1e:40:e1:2c:e3:01:d6:8f:a7:5f:62:14:3a:0d:9e:
67:49:b2:48:cf:1d:98:fe:8c:79:5c:64:63:ab:91:
6f:58:54:3b:ed:5e:01:3e:94:36:16:b6:8d:3a:3c:
55:e3:38:5e:79:05:fa:c6:85:78:5e:e2:72:db:06:
7a:7e:ba:0a:51:30:2c:10:90:b9:fe:93:ac:df:81:
7d:f1:a9:49:61:20:f0:14:c3:12:b2:78:e4:ca:db:
e1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E8:15:67:92:FD:A0:17:F5:25:A1:28:2A:51:2C:D4:D1:D2:A8:EB
X509v3 Authority Key Identifier:
keyid:B5:43:EF:9B:C3:C2:13:23:61:C1:24:09:72:A1:80:91:2B:F7:A8:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUPvm8PCEyNhwSQJcqGAkSv3qFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/25e6d6-ced1-4283-8c9f-c84ccba4e607/1/bugVZ5L9oBf1JaEoKlEs1NHSqOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/25e6d6-ced1-4283-8c9f-c84ccba4e607/1/tUPvm8PCEyNhwSQJcqGAkSv3qFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.67.196.0/22
IPv6:
2a05:1280::/29
Signature Algorithm: sha256WithRSAEncryption
26:bd:73:bc:75:fc:0c:8d:a5:96:e6:b2:b3:e2:d5:46:88:7f:
04:17:15:53:44:7b:9e:fa:d8:1f:38:06:78:c3:7d:87:c7:c7:
51:24:8c:52:cc:00:0d:e2:e6:74:c7:e4:7e:a7:25:44:b0:51:
40:64:0a:f3:a1:6d:d1:ed:44:f8:89:10:a0:f4:e1:6f:7d:40:
9b:d3:4e:36:30:12:c7:c5:b4:14:a8:c4:01:2d:e3:00:91:02:
b9:60:aa:28:d6:04:3d:a6:5c:08:3c:2f:bf:f5:14:e7:ae:6a:
ed:e2:3b:66:97:2f:17:b6:8e:78:8b:33:7e:10:42:58:19:8a:
63:59:e1:52:e7:e3:ea:5a:66:0f:62:9c:0e:b0:4b:1a:dd:a2:
2e:ae:0a:73:67:5b:91:a6:6b:49:ea:c8:30:7a:d3:a9:31:4b:
21:36:6a:17:12:32:ff:ad:99:35:ba:59:4b:15:b6:70:bc:f5:
aa:e5:f1:48:83:5d:92:ed:65:02:29:f4:dc:b7:39:88:d7:d6:
d3:3e:0a:70:a0:33:d1:9a:97:ef:c1:5c:82:87:dc:b7:c6:4f:
96:ef:ad:ae:28:eb:f1:25:e8:ee:3d:ee:2f:d3:dd:17:77:8b:
43:9c:7a:5b:6c:72:2f:1a:c3:6c:76:4c:c6:b0:d0:91:51:52:
f3:f5:c3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 09:58:19 2024 by rpki-client on console-fra.rpki-client.org