Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/a646af-e61d-48b6-89d2-eba988a548e7/1/BklK6VC0nBC-GDMuDCSgVN6rK8A.roa
File: BklK6VC0nBC-GDMuDCSgVN6rK8A.roa (raw, json)
Hash identifier: WSA6E+fFGyE38rFQaVd+t6PNTiqwP8EFrBaghimG14s=
Subject key identifier: 06:49:4A:E9:50:B4:9C:10:BE:18:33:2E:0C:24:A0:54:DE:AB:2B:C0
Certificate issuer: /CN=6460129c221f7a47812885a64838b12ee6b15ed5
Certificate serial: 018CC2DAF6B3AC41FDFE0CA41FD0D038C2DC
Authority key identifier: 64:60:12:9C:22:1F:7A:47:81:28:85:A6:48:38:B1:2E:E6:B1:5E:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGASnCIfekeBKIWmSDixLuaxXtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/a646af-e61d-48b6-89d2-eba988a548e7/1/BklK6VC0nBC-GDMuDCSgVN6rK8A.roa
Signing time: Mon 01 Jan 2024 02:29:39 +0000
ROA not before: Mon 01 Jan 2024 02:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199942
IP address blocks: 185.41.236.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/a646af-e61d-48b6-89d2-eba988a548e7/1/ZGASnCIfekeBKIWmSDixLuaxXtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/a646af-e61d-48b6-89d2-eba988a548e7/1/ZGASnCIfekeBKIWmSDixLuaxXtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGASnCIfekeBKIWmSDixLuaxXtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 01:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:f6:b3:ac:41:fd:fe:0c:a4:1f:d0:d0:38:c2:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6460129c221f7a47812885a64838b12ee6b15ed5
Validity
Not Before: Jan 1 02:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=06494ae950b49c10be18332e0c24a054deab2bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5d:9c:38:b6:3f:78:f4:29:46:66:5d:91:b3:
d9:ed:af:72:57:47:f9:fa:be:30:88:16:07:55:7e:
49:0a:81:54:cc:69:49:fd:37:1e:b2:b0:bb:dc:cc:
cc:20:1e:00:d2:18:88:ca:26:4f:9a:ed:4a:43:00:
b3:a3:c3:a2:a6:31:98:ad:e9:df:24:54:5f:3e:d6:
2f:18:63:5e:48:ab:2a:11:70:16:6a:76:3f:2f:4d:
b6:db:6e:d4:09:e1:84:45:3a:a5:ca:28:5a:1c:7c:
bb:20:f1:f4:3a:81:4b:ea:2e:1a:8c:e4:f5:50:fa:
65:38:36:d0:c3:99:96:e9:7e:ea:ec:c7:13:be:f2:
23:44:39:1a:da:a0:74:3b:fe:9c:31:73:a4:26:6a:
9d:c6:58:3e:d2:38:98:47:ae:85:1e:a6:ea:a0:ac:
f5:34:f1:31:dc:fd:db:34:ee:67:d0:73:f5:d5:92:
37:00:95:33:11:3e:99:3f:ea:07:bd:aa:c8:00:ba:
7f:d0:a1:f4:59:a1:49:e1:e6:df:91:aa:22:cd:a9:
ea:03:b8:1e:d4:d7:8b:26:0c:16:1b:3a:d5:7b:f5:
f4:e9:ac:cf:24:70:ec:c0:7a:95:33:0f:af:81:8a:
e3:2e:64:83:c5:76:17:85:fe:2a:6c:d8:0d:e0:b0:
dc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:49:4A:E9:50:B4:9C:10:BE:18:33:2E:0C:24:A0:54:DE:AB:2B:C0
X509v3 Authority Key Identifier:
keyid:64:60:12:9C:22:1F:7A:47:81:28:85:A6:48:38:B1:2E:E6:B1:5E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGASnCIfekeBKIWmSDixLuaxXtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a646af-e61d-48b6-89d2-eba988a548e7/1/BklK6VC0nBC-GDMuDCSgVN6rK8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a646af-e61d-48b6-89d2-eba988a548e7/1/ZGASnCIfekeBKIWmSDixLuaxXtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.41.236.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:11:f6:bf:b4:55:1c:f5:01:82:58:b9:3e:2c:49:58:3e:3e:
13:4e:41:89:25:72:a1:a8:3d:c5:5c:d3:e7:a7:41:24:be:05:
64:cc:c3:e1:a1:02:a1:34:f4:a2:62:8a:ba:48:bd:8a:07:70:
d3:88:92:a6:00:ff:67:d6:7e:97:b1:dc:77:c2:fd:88:11:36:
ed:1a:0f:02:a0:07:9a:08:87:6c:f6:ba:3a:c9:08:f7:f5:9d:
12:87:b3:90:73:00:3d:5e:61:ad:fd:31:9d:cf:c1:8c:0f:16:
4d:bd:ba:78:9e:f2:1d:d3:8c:1f:25:0c:d8:be:af:88:8d:5c:
23:25:ba:b3:ae:a9:98:1f:d2:22:64:a6:6b:4a:c3:67:85:55:
2b:21:79:52:cf:ce:0f:ac:ae:ff:32:a2:f3:3c:01:e7:d2:5d:
18:95:3a:99:83:1a:97:ce:99:06:7d:57:0c:a5:47:0b:a5:8d:
8e:77:ce:91:ac:4c:94:71:24:36:06:b8:f1:7e:c3:91:90:5b:
a2:b6:63:ef:2b:a8:84:35:98:bd:c5:83:9f:14:a3:42:c8:a2:
7b:21:91:84:25:90:52:ef:e2:27:b2:58:5b:1e:f6:7a:20:47:
01:89:aa:6c:87:f8:d1:96:90:73:be:b5:1e:66:4d:15:31:e3:
4c:c5:a1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 09:39:38 2024 by rpki-client on console-fra.rpki-client.org