Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/bJZUYUU1k50ckkSYySGpdkBMop0.roa
File: bJZUYUU1k50ckkSYySGpdkBMop0.roa (raw, json)
Hash identifier: IPs4e7XbYqlwBtig2aI3qBSEpfKkYSJpGvK7QU+79WQ=
Subject key identifier: 6C:96:54:61:45:35:93:9D:1C:92:44:98:C9:21:A9:76:40:4C:A2:9D
Certificate issuer: /CN=fe7ce8fbfb8479cfb976b443cc3c7ce2f703ab7e
Certificate serial: 018CC2DB16BE68B07832C6FECAA78D9BD3F1
Authority key identifier: FE:7C:E8:FB:FB:84:79:CF:B9:76:B4:43:CC:3C:7C:E2:F7:03:AB:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nzo-_uEec-5drRDzDx84vcDq34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/bJZUYUU1k50ckkSYySGpdkBMop0.roa
Signing time: Mon 01 Jan 2024 02:29:47 +0000
ROA not before: Mon 01 Jan 2024 02:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3303
IP address blocks: 193.247.96.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nzo-_uEec-5drRDzDx84vcDq34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:16:be:68:b0:78:32:c6:fe:ca:a7:8d:9b:d3:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe7ce8fbfb8479cfb976b443cc3c7ce2f703ab7e
Validity
Not Before: Jan 1 02:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c9654614535939d1c924498c921a976404ca29d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:18:70:0c:2a:14:e5:8e:95:18:cc:81:af:4b:
45:fd:b2:b5:42:c0:a2:fe:1f:b3:c3:f0:13:30:2d:
ad:76:3d:dd:5d:ef:98:ed:a7:24:f0:5e:80:d2:83:
ed:17:0f:20:61:21:87:4b:61:66:94:f6:d4:85:83:
90:47:2e:61:b2:aa:48:59:32:1a:b0:dc:a4:6a:92:
1f:e1:e7:79:ff:80:df:f2:e6:1b:6c:c1:45:a2:65:
8f:18:aa:8d:fa:1f:e2:73:60:bb:f0:32:38:f7:f6:
0b:13:7d:cb:ce:8f:ca:10:12:de:0c:cd:62:cc:ef:
04:c1:f0:49:b3:5b:e9:e9:63:9f:e1:aa:fa:3d:88:
f9:79:c9:6a:67:06:40:01:b5:b6:a4:a7:72:3b:f9:
d2:7e:67:50:fc:ea:ce:1c:0a:97:12:49:28:54:36:
51:36:b0:97:d1:70:1c:44:18:f0:7c:6c:d0:4e:ea:
cb:a3:7f:2a:a4:7c:c3:48:b6:96:ea:ca:58:71:ab:
ec:59:22:ea:86:b3:d3:ef:d9:38:f7:61:72:37:5b:
90:73:bb:14:c5:fe:5e:12:bc:b0:45:90:9c:6e:ba:
d7:13:f7:2e:d7:fb:99:ec:bc:3e:50:46:99:60:66:
9d:ba:26:81:0e:1f:f8:76:5e:0f:61:ec:d6:a8:25:
56:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:96:54:61:45:35:93:9D:1C:92:44:98:C9:21:A9:76:40:4C:A2:9D
X509v3 Authority Key Identifier:
keyid:FE:7C:E8:FB:FB:84:79:CF:B9:76:B4:43:CC:3C:7C:E2:F7:03:AB:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nzo-_uEec-5drRDzDx84vcDq34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/bJZUYUU1k50ckkSYySGpdkBMop0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.96.0/22
Signature Algorithm: sha256WithRSAEncryption
77:7e:d9:34:f4:d3:86:c2:08:82:eb:3b:f9:04:e9:48:60:bf:
83:d5:f8:2d:5e:bb:5c:5d:34:22:d4:7f:f8:b5:11:fa:5d:3e:
8e:eb:d2:d0:bb:bf:63:37:4c:d1:de:39:52:0e:b2:4c:bd:10:
d1:98:2e:d4:44:26:b0:56:52:8e:2e:fd:c6:a7:61:ca:9d:71:
2e:8c:97:58:2f:46:3b:c5:6b:a2:fe:8d:44:c6:55:1d:99:d1:
bd:10:00:bd:18:41:8e:33:3c:28:af:de:11:14:3f:d9:07:98:
e8:4e:cb:bc:0a:ee:63:db:8b:b7:89:3d:a4:aa:f7:4e:ca:9c:
da:6d:57:46:06:d3:3b:6d:f1:ac:a7:68:58:ab:9b:ee:b9:26:
fc:40:08:8d:c4:4f:64:eb:06:14:eb:94:e4:05:72:a2:15:a1:
fc:90:fb:24:28:61:2c:35:0b:2a:d3:e2:dc:f6:d8:f3:06:17:
be:1b:22:17:42:54:ed:ad:b0:ee:5c:55:19:17:5c:b7:5e:7a:
a9:f9:37:d0:da:2e:19:ad:5d:1b:0f:ad:ff:86:27:e9:1a:34:
c6:bc:a6:c8:88:09:85:c0:37:09:14:90:b3:07:77:92:a6:8a:
21:39:eb:84:e6:6a:37:21:68:41:70:17:eb:4f:18:0b:00:04:
ed:14:b5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 09:18:48 2024 by rpki-client on console-fra.rpki-client.org