Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/BhpTPa2KqT8n4pdyLRVaQWYjq-U.roa
File: BhpTPa2KqT8n4pdyLRVaQWYjq-U.roa (raw, json)
Hash identifier: vv2lV0nTQmC83r/acnVf1D0JUc0M3lSrvKY+KiCWnD0=
Subject key identifier: 06:1A:53:3D:AD:8A:A9:3F:27:E2:97:72:2D:15:5A:41:66:23:AB:E5
Certificate issuer: /CN=09dcf1e897e598ec3f1ab60bd443328726dedae4
Certificate serial: 018F76A2B4F73252B3A4940B734E210DD08C
Authority key identifier: 09:DC:F1:E8:97:E5:98:EC:3F:1A:B6:0B:D4:43:32:87:26:DE:DA:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/BhpTPa2KqT8n4pdyLRVaQWYjq-U.roa
Signing time: Tue 14 May 2024 10:25:25 +0000
ROA not before: Tue 14 May 2024 10:25:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208377
IP address blocks: 84.246.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:76:a2:b4:f7:32:52:b3:a4:94:0b:73:4e:21:0d:d0:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09dcf1e897e598ec3f1ab60bd443328726dedae4
Validity
Not Before: May 14 10:25:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=061a533dad8aa93f27e297722d155a416623abe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d5:35:5d:51:63:07:42:45:dc:ee:71:33:22:
c5:53:bb:73:d0:3e:62:63:07:83:db:1c:77:74:8d:
8b:85:65:9e:11:dd:a3:30:f3:df:90:77:30:bb:24:
d1:05:53:c9:8d:71:68:e7:dc:77:0c:0e:75:6c:b0:
c7:c5:89:1a:89:0e:8e:5f:81:4a:11:73:2b:c8:c1:
a0:32:db:cc:f3:b3:f5:08:91:38:bc:d7:9b:51:22:
3e:9e:b5:f8:42:d8:1f:8a:1f:0a:9a:6f:d5:16:83:
ec:22:3f:a1:c8:e0:d0:62:39:dd:31:ef:aa:dd:18:
fd:1f:de:c1:25:53:e3:81:8e:1c:03:29:e0:d8:7f:
86:df:da:8a:5b:3f:09:b9:1e:3b:82:8d:1f:64:f2:
e8:49:93:bc:55:c7:4f:99:a7:59:8b:d9:3d:c0:4c:
1c:bf:13:08:28:95:97:e3:41:9d:96:8c:99:59:8c:
f8:d1:6c:b6:d2:a2:2c:9a:b3:b9:9f:04:99:b3:5f:
ef:d2:e0:3e:ef:83:87:a8:70:d3:51:70:aa:1a:f9:
d9:af:6f:34:53:0f:8d:88:a8:7c:2d:aa:68:a5:fd:
ee:2a:57:71:8e:6a:2d:5a:9f:58:b3:88:1e:09:f2:
5c:1a:12:d3:b7:c7:f5:9d:db:a9:56:26:46:44:9a:
25:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:1A:53:3D:AD:8A:A9:3F:27:E2:97:72:2D:15:5A:41:66:23:AB:E5
X509v3 Authority Key Identifier:
keyid:09:DC:F1:E8:97:E5:98:EC:3F:1A:B6:0B:D4:43:32:87:26:DE:DA:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/BhpTPa2KqT8n4pdyLRVaQWYjq-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.246.242.0/24
Signature Algorithm: sha256WithRSAEncryption
45:6e:a5:e4:b9:c5:75:d6:cd:49:b8:ab:db:5a:4c:41:8c:a7:
bf:14:48:88:e6:08:ba:4a:20:d4:54:61:c6:34:a6:41:f9:82:
f5:b9:10:c0:cf:52:6b:bf:e3:0f:cf:d7:4c:fd:0e:f5:de:80:
20:99:04:9a:28:a8:cf:f3:b5:f4:c7:f0:c7:b3:97:1f:70:59:
c6:d3:d0:f9:ca:09:7f:ed:23:30:8c:89:1d:b1:82:95:ab:52:
3e:24:b0:dc:17:ba:f3:fb:d9:dc:63:f9:72:99:1e:3a:5b:61:
48:2f:a3:c7:55:35:dd:3e:4a:3b:3d:22:e8:50:8b:5b:55:ca:
52:f5:86:89:2f:43:9b:e4:e0:47:8c:ea:23:c0:99:1e:1f:40:
0e:cc:bc:07:dc:f1:46:03:e2:99:81:bf:92:a9:f1:26:16:73:
5a:4b:ca:46:d2:00:ea:ec:af:4f:51:58:88:cd:65:e9:dd:1d:
2e:83:e5:4e:30:f2:9a:32:9a:63:18:49:2a:96:7f:30:12:bc:
10:83:03:12:39:8b:2d:35:24:3a:95:9d:81:5a:fd:12:89:dd:
58:1a:8e:3d:28:40:4e:38:47:da:c9:4b:d9:8d:fb:dc:04:13:
82:26:f9:df:6f:36:1d:18:a7:e9:20:fd:59:55:3b:3f:a5:6b:
f4:89:c8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:52:18 2024 by rpki-client on console-fra.rpki-client.org