Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/BLBmBxL8kru5Q4ALGte9gvWq8jg.roa
File: BLBmBxL8kru5Q4ALGte9gvWq8jg.roa (raw, json)
Hash identifier: vr3f0ZWGj8DsGEs3IYwBbyNhZaVHlFqkNtujQXuzcQE=
Subject key identifier: 04:B0:66:07:12:FC:92:BB:B9:43:80:0B:1A:D7:BD:82:F5:AA:F2:38
Certificate issuer: /CN=aca1f4713024804c445403af63fa644b2a935d24
Certificate serial: 018CC4255969C718D328D8022489B821D766
Authority key identifier: AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/BLBmBxL8kru5Q4ALGte9gvWq8jg.roa
Signing time: Mon 01 Jan 2024 08:30:31 +0000
ROA not before: Mon 01 Jan 2024 08:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60341
IP address blocks: 185.50.92.0/22 maxlen: 22
185.47.20.0/22 maxlen: 22
185.45.116.0/22 maxlen: 22
185.32.232.0/22 maxlen: 22
2a00:c660::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:59:69:c7:18:d3:28:d8:02:24:89:b8:21:d7:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca1f4713024804c445403af63fa644b2a935d24
Validity
Not Before: Jan 1 08:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=04b0660712fc92bbb943800b1ad7bd82f5aaf238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e4:ed:0e:33:25:6a:08:fe:79:10:f2:ab:18:
a9:35:fe:72:2f:a7:b0:a1:f3:60:d3:50:62:b8:1e:
6d:f0:fb:d8:f3:81:78:d1:6c:a2:f5:01:99:91:18:
9e:db:f6:d4:32:71:b9:89:3d:da:b6:11:88:b3:4c:
55:6a:66:67:54:fa:98:f8:73:26:4e:ad:42:12:46:
f7:df:0b:5c:75:3d:c7:20:75:82:07:53:e4:b5:a5:
d7:a9:d9:f6:90:f1:05:4a:53:90:4c:e6:aa:02:67:
c4:35:2c:ce:39:b6:1f:6b:5e:c7:e3:83:89:fd:8a:
0e:30:c8:1e:73:0e:15:bf:c5:7b:43:1f:25:5f:f4:
d1:3a:03:0a:dd:ce:a7:95:c1:a0:e3:8b:2a:db:cc:
bd:8b:c1:ac:c2:d6:d5:b9:5c:fe:17:5f:60:cb:b0:
36:9a:e6:2c:af:73:b3:3f:b3:a2:23:d5:e9:4b:27:
49:27:f5:33:fd:93:04:44:1d:41:55:9d:33:11:6f:
92:b9:c8:b5:80:bf:56:b8:77:7f:25:12:f5:4f:de:
39:65:87:b4:08:40:c3:f7:28:94:af:51:5d:97:69:
5f:86:c2:55:f3:ac:78:84:b8:3d:b0:9e:fb:8d:d8:
43:9d:eb:bc:57:cc:0e:ef:91:17:d9:f9:0f:b3:7d:
21:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B0:66:07:12:FC:92:BB:B9:43:80:0B:1A:D7:BD:82:F5:AA:F2:38
X509v3 Authority Key Identifier:
keyid:AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/BLBmBxL8kru5Q4ALGte9gvWq8jg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.32.232.0/22
185.45.116.0/22
185.47.20.0/22
185.50.92.0/22
IPv6:
2a00:c660::/32
Signature Algorithm: sha256WithRSAEncryption
14:19:6b:4e:45:60:32:18:fd:dc:fb:dc:6e:00:9a:ca:b2:fa:
e9:f8:1c:c3:67:ea:22:53:f8:7b:3e:78:29:dd:76:cd:de:4c:
82:6c:e0:ae:b9:49:09:42:30:1d:bb:b8:48:4c:9e:65:09:28:
a1:a9:83:d2:65:96:80:cb:2f:78:25:46:bc:ee:4b:d2:2c:5a:
7c:ba:88:2f:2d:e8:00:24:0d:f4:b4:1a:46:e3:13:5d:6a:51:
35:ac:e1:ea:a4:71:a5:f9:27:55:7b:90:26:14:45:f1:c0:59:
84:7f:43:c4:e9:1f:20:10:6b:0c:d3:7f:f5:2b:2f:56:52:ed:
6c:9a:b1:4a:ee:d3:98:bb:a6:70:b8:06:93:6b:fa:39:2c:15:
f6:23:fb:af:0b:7a:67:c8:87:d9:37:61:c1:35:d5:82:23:6a:
24:eb:ac:e8:ee:07:b0:a8:1f:2f:02:e4:58:14:db:6f:e2:40:
c3:ff:62:15:46:97:03:73:b8:d5:74:3b:c8:20:37:e3:14:ad:
54:18:28:b6:29:b9:05:5e:0c:2c:4e:d7:9e:d6:7a:6d:5e:b5:
2a:32:c0:20:cc:ce:a6:5b:d5:e3:e1:4e:54:bd:a1:fc:42:2d:
4d:bb:8f:3e:79:cb:cd:16:70:64:05:42:6c:43:33:9a:73:0b:
73:19:1c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 08:55:01 2024 by rpki-client on console-ams.rpki-client.org