Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/BIOd-oIdWrvzZSz_VIWqz71mSp4.roa
File: BIOd-oIdWrvzZSz_VIWqz71mSp4.roa (raw, json)
Hash identifier: nzKRFUbQE8fgD5xG2LTItdan3TYMmyTrP/YFTNrcsz0=
Subject key identifier: 04:83:9D:FA:82:1D:5A:BB:F3:65:2C:FF:54:85:AA:CF:BD:66:4A:9E
Certificate issuer: /CN=16ea37a8e73e7679a933d70f7b9c872081024455
Certificate serial: 018CC425423381DCFE96C7920A5DA5E3EC9A
Authority key identifier: 16:EA:37:A8:E7:3E:76:79:A9:33:D7:0F:7B:9C:87:20:81:02:44:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fuo3qOc-dnmpM9cPe5yHIIECRFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/BIOd-oIdWrvzZSz_VIWqz71mSp4.roa
Signing time: Mon 01 Jan 2024 08:30:25 +0000
ROA not before: Mon 01 Jan 2024 08:30:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211421
IP address blocks: 194.59.170.0/24 maxlen: 24
185.81.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fuo3qOc-dnmpM9cPe5yHIIECRFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:42:33:81:dc:fe:96:c7:92:0a:5d:a5:e3:ec:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16ea37a8e73e7679a933d70f7b9c872081024455
Validity
Not Before: Jan 1 08:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=04839dfa821d5abbf3652cff5485aacfbd664a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d3:bb:a9:09:8f:c2:cf:47:55:8c:22:91:d7:
87:e7:09:14:43:d4:4b:cd:f1:31:54:bd:b3:77:49:
81:4a:bf:e0:2f:f9:af:ee:37:56:1c:97:4f:e7:cc:
e9:40:27:7b:54:cd:06:7f:28:f8:3b:11:64:51:a1:
4d:25:35:fd:7c:dd:ae:f1:85:20:ce:b1:32:d3:ed:
be:d9:b5:10:a4:91:65:3c:09:d1:4e:8a:ec:fd:3c:
12:4d:01:9b:d7:d8:1d:b8:38:f8:fb:dc:15:99:da:
db:1d:7b:7c:bb:f1:e9:dc:28:4f:23:f1:10:b9:02:
16:e1:8a:49:a0:52:ea:82:33:3d:ba:5a:7e:65:34:
23:0d:ed:28:eb:6c:13:d5:37:6b:63:6b:24:3f:30:
65:a0:68:2d:27:b2:b6:a7:7c:b8:8e:2a:fa:01:27:
19:cc:37:62:76:8e:cc:ce:48:26:8e:6b:e6:62:bf:
60:47:16:fb:2d:b3:16:99:61:f2:bd:58:17:41:a2:
b6:67:0b:4c:11:a9:a1:c5:47:f2:a1:f1:ab:33:d7:
6d:b4:58:0a:7d:9e:06:2d:90:53:1d:47:a6:5f:c9:
f9:6f:f3:2d:4f:a7:65:b1:0e:36:26:a5:f7:04:ad:
54:aa:16:96:4f:f2:b6:11:90:54:e6:c1:89:a3:3f:
df:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:83:9D:FA:82:1D:5A:BB:F3:65:2C:FF:54:85:AA:CF:BD:66:4A:9E
X509v3 Authority Key Identifier:
keyid:16:EA:37:A8:E7:3E:76:79:A9:33:D7:0F:7B:9C:87:20:81:02:44:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fuo3qOc-dnmpM9cPe5yHIIECRFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/BIOd-oIdWrvzZSz_VIWqz71mSp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.97.0/24
194.59.170.0/24
Signature Algorithm: sha256WithRSAEncryption
24:1b:b1:ca:37:3c:54:e5:19:13:3b:dc:be:76:88:de:94:0e:
38:b3:f5:5f:3f:45:ad:9c:81:f1:82:b9:b8:ff:00:46:cb:ca:
cb:02:ba:e7:9e:f5:fd:79:10:8e:21:f6:bc:88:39:44:98:3e:
dd:e7:7f:e0:ad:10:d1:52:81:cd:7f:30:34:3c:ec:03:2d:4e:
34:36:f0:80:40:47:8a:2a:42:cf:2e:02:68:80:59:02:46:85:
6a:d0:02:35:69:31:99:0d:f7:4d:76:2b:01:b2:83:d5:51:a7:
f2:0a:c7:fe:4e:41:3b:03:61:51:77:1d:51:13:71:05:9e:e7:
0a:f5:ab:8e:8f:c2:da:b7:ce:86:62:b0:55:13:ff:0d:6e:f1:
c9:a2:ae:70:d6:4d:fc:f8:80:a1:27:9a:3c:51:ab:ab:70:eb:
b9:26:95:a8:f8:6e:5e:01:8d:f3:cc:f8:8a:32:42:de:7a:46:
fe:27:9b:f2:e2:c0:45:20:6a:3f:17:68:19:39:97:7d:60:6f:
fc:75:68:9d:5a:11:2b:5f:d9:c7:fe:90:5d:0a:14:43:91:56:
e5:b5:f4:4e:2a:e3:9a:b2:7b:51:e5:67:7e:ac:89:66:39:c4:
cc:48:25:43:7d:90:28:05:3c:2b:73:36:11:51:32:6d:76:74:
b8:c1:ff:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 06:18:41 2024 by rpki-client on console-ams.rpki-client.org