Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/BZGa-r1ys0jtMmBJq5_GLDZSCgM.roa
File: BZGa-r1ys0jtMmBJq5_GLDZSCgM.roa (raw, json)
Hash identifier: OQQ8nYaPKogh6jlPXBiopro3JdzCYaP2Jw5SFqN6gVM=
Subject key identifier: 05:91:9A:FA:BD:72:B3:48:ED:32:60:49:AB:9F:C6:2C:36:52:0A:03
Certificate issuer: /CN=261b941dbe59651fafbba9724a12775e07edb635
Certificate serial: 018CC2DAD9306A09519CD51E83C785B98C34
Authority key identifier: 26:1B:94:1D:BE:59:65:1F:AF:BB:A9:72:4A:12:77:5E:07:ED:B6:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JhuUHb5ZZR-vu6lyShJ3XgfttjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/BZGa-r1ys0jtMmBJq5_GLDZSCgM.roa
Signing time: Mon 01 Jan 2024 02:29:31 +0000
ROA not before: Mon 01 Jan 2024 02:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8218
IP address blocks: 185.172.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/JhuUHb5ZZR-vu6lyShJ3XgfttjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Jun 2024 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:d9:30:6a:09:51:9c:d5:1e:83:c7:85:b9:8c:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=261b941dbe59651fafbba9724a12775e07edb635
Validity
Not Before: Jan 1 02:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05919afabd72b348ed326049ab9fc62c36520a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:8a:9c:d1:02:a4:f5:98:e6:39:b1:e0:70:81:
90:2f:a8:3e:84:98:46:58:cf:82:e8:da:03:e1:c6:
d3:7e:a3:3e:2d:55:91:67:88:77:ae:91:a2:d2:fd:
b5:80:08:95:45:e9:ea:ea:b6:7f:e6:d9:12:cb:a5:
c5:3d:b7:3d:9d:87:32:9d:1a:ff:4c:d9:fa:4f:2f:
b9:22:f9:1e:68:8e:de:6b:d6:6a:0f:96:60:47:72:
68:63:21:ed:36:b7:1c:9b:69:51:91:8b:fc:93:6d:
ea:72:c0:2b:0a:d5:f9:69:49:0c:80:11:40:db:20:
0e:fc:3f:2b:d1:79:84:01:ac:c8:11:34:24:85:0b:
3a:3f:a5:f9:14:aa:89:af:c6:1b:b0:1c:9d:0d:6f:
a2:29:7b:a2:26:96:a2:f1:3b:2f:e5:6c:ad:e7:95:
d4:74:45:5b:88:de:f7:bc:81:e2:7e:6d:60:71:29:
83:6f:de:79:59:e7:4a:05:0f:36:43:f2:15:a2:6c:
9d:12:02:75:f3:51:4a:92:92:38:0c:2e:1a:c4:4b:
13:62:6b:53:10:57:96:92:d3:c2:36:7a:76:f3:ac:
a1:27:c3:bd:ac:af:59:67:ba:2b:9d:6d:07:b6:b8:
2a:3e:8f:7a:ca:85:93:b5:a3:a3:6f:bb:f9:2f:93:
09:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:91:9A:FA:BD:72:B3:48:ED:32:60:49:AB:9F:C6:2C:36:52:0A:03
X509v3 Authority Key Identifier:
keyid:26:1B:94:1D:BE:59:65:1F:AF:BB:A9:72:4A:12:77:5E:07:ED:B6:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhuUHb5ZZR-vu6lyShJ3XgfttjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/BZGa-r1ys0jtMmBJq5_GLDZSCgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.152.0/22
Signature Algorithm: sha256WithRSAEncryption
43:85:71:02:f6:72:e8:61:b9:d7:55:c4:ee:26:3b:3f:14:2b:
6d:cb:6a:80:a9:1f:ce:c5:44:c7:8d:73:c8:1a:2c:92:d3:5f:
34:c5:be:63:07:2e:52:3d:7f:4a:0b:a3:c2:02:d2:ac:73:8f:
92:9d:dc:99:41:47:89:55:4c:92:99:b8:20:ae:51:56:19:49:
ac:ec:34:6b:45:e1:4b:9b:54:96:9d:c7:6a:30:b3:bd:c1:fd:
9e:04:ba:8c:ba:29:ad:15:13:f2:05:b4:08:46:22:56:ca:91:
c6:6c:49:3b:f4:53:cf:8e:71:cd:38:22:5c:bc:9e:d1:f8:2e:
95:b8:4a:38:a3:b8:20:77:4e:14:f3:1d:5f:95:9a:45:8e:1f:
79:2f:7e:24:1c:63:ca:c1:f5:14:d7:b8:8e:28:2c:33:11:f6:
83:ee:d5:a7:93:6a:9c:be:9a:da:fb:d9:43:9a:b1:7d:b4:41:
78:25:7c:5b:5d:45:cb:20:f7:57:9e:a0:e4:2b:61:4e:c6:af:
52:23:60:4f:63:63:7c:94:54:8b:77:de:59:62:03:9a:ad:6c:
1d:c1:ef:fb:33:04:31:bb:ca:7b:82:ee:93:ef:a4:5d:5e:9e:
5d:9d:6d:d6:b9:6f:b9:49:66:09:64:ea:d9:56:5e:cd:0d:25:
16:18:90:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 19:24:46 2024 by rpki-client on console-ams.rpki-client.org