Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7ac37b-020b-49ae-ac9b-f98ec74abfd5/1/b51WSo76tNx1EVorAemwzf_9PDM.roa
File: b51WSo76tNx1EVorAemwzf_9PDM.roa (raw, json)
Hash identifier: 3qhGUv8rMbnpVtsBjk5d/kflZTyGqCG2s8ulwQdBDJ4=
Subject key identifier: 6F:9D:56:4A:8E:FA:B4:DC:75:11:5A:2B:01:E9:B0:CD:FF:FD:3C:33
Certificate issuer: /CN=bbb314d7e36901f6dea7c0291a51533bb224f3b3
Certificate serial: 018CC34891C78890710B52BA9C4C99DAC173
Authority key identifier: BB:B3:14:D7:E3:69:01:F6:DE:A7:C0:29:1A:51:53:3B:B2:24:F3:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7MU1-NpAfbep8ApGlFTO7Ik87M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/7ac37b-020b-49ae-ac9b-f98ec74abfd5/1/b51WSo76tNx1EVorAemwzf_9PDM.roa
Signing time: Mon 01 Jan 2024 04:29:22 +0000
ROA not before: Mon 01 Jan 2024 04:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200157
IP address blocks: 185.159.190.0/24 maxlen: 24
2a12:86c0::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/7ac37b-020b-49ae-ac9b-f98ec74abfd5/1/u7MU1-NpAfbep8ApGlFTO7Ik87M.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/7ac37b-020b-49ae-ac9b-f98ec74abfd5/1/u7MU1-NpAfbep8ApGlFTO7Ik87M.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7MU1-NpAfbep8ApGlFTO7Ik87M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:91:c7:88:90:71:0b:52:ba:9c:4c:99:da:c1:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbb314d7e36901f6dea7c0291a51533bb224f3b3
Validity
Not Before: Jan 1 04:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f9d564a8efab4dc75115a2b01e9b0cdfffd3c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:2f:27:e0:f0:e8:b3:8f:90:38:50:bf:fa:44:
49:ab:b0:1c:9e:47:1f:f1:03:db:45:7d:cf:5d:39:
c0:a3:dd:5b:1b:88:98:51:11:d4:66:18:54:a7:9a:
cf:a9:e6:2c:08:0b:ee:38:2e:c3:14:57:1c:56:8e:
21:39:3f:03:f4:92:62:b2:00:1f:e3:37:b4:5e:f7:
20:89:74:ae:86:c3:ba:d1:cf:20:cb:c6:dd:60:6b:
83:93:c4:4e:53:ef:6c:99:18:66:f9:44:d0:63:03:
91:5d:06:e4:90:57:bc:4d:61:11:87:78:89:18:07:
78:bc:ff:b3:a4:cd:06:6a:75:9c:55:4f:62:15:96:
0d:3c:0d:dc:20:e8:8a:2f:34:6c:7e:d2:48:d6:c0:
d1:dd:08:29:70:ca:b4:98:49:12:fb:d8:ba:fb:43:
9a:ac:34:dd:38:77:50:e3:36:b7:86:e2:f0:d1:cc:
b6:c6:2c:59:20:3a:c6:8d:b5:36:21:a0:4c:2c:04:
75:c8:4e:50:0f:44:ca:da:09:af:c8:45:52:85:3a:
53:23:ca:5f:85:01:52:d2:e7:96:10:a7:0b:b1:64:
c8:5f:e3:29:0a:2e:7f:8d:62:f6:bd:eb:7b:32:13:
ce:0e:1a:cb:9f:a0:0e:ff:ff:75:b6:a4:49:df:38:
da:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:9D:56:4A:8E:FA:B4:DC:75:11:5A:2B:01:E9:B0:CD:FF:FD:3C:33
X509v3 Authority Key Identifier:
keyid:BB:B3:14:D7:E3:69:01:F6:DE:A7:C0:29:1A:51:53:3B:B2:24:F3:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7MU1-NpAfbep8ApGlFTO7Ik87M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7ac37b-020b-49ae-ac9b-f98ec74abfd5/1/b51WSo76tNx1EVorAemwzf_9PDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7ac37b-020b-49ae-ac9b-f98ec74abfd5/1/u7MU1-NpAfbep8ApGlFTO7Ik87M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.190.0/24
IPv6:
2a12:86c0::/32
Signature Algorithm: sha256WithRSAEncryption
87:a5:16:93:fd:34:7d:c1:2e:dd:6b:2e:ac:88:0b:ce:e4:2c:
c1:63:3a:b0:b0:84:86:c4:1a:dd:fe:27:81:cb:4e:25:fb:b8:
af:5e:33:15:9e:51:62:88:9b:90:a1:0c:9f:5f:8e:14:76:4a:
3e:e1:66:38:05:ee:b6:43:24:a0:d5:e1:f7:0b:c6:52:26:33:
ed:ed:9f:9d:7b:43:ac:5c:7f:c3:72:79:64:a0:d1:63:f1:d7:
f9:f2:5a:ac:ae:d5:1b:e7:a8:e1:47:72:aa:3e:c4:cc:2f:b6:
e3:67:3f:26:b6:84:d4:d9:7a:4e:fb:e6:60:2e:f7:75:c9:b9:
3b:28:3e:5e:da:cc:27:2a:e0:b2:cd:51:68:51:c8:c5:3f:98:
26:05:05:06:30:12:30:32:23:16:78:9a:3e:60:13:f0:45:68:
80:6f:eb:72:a8:93:de:89:b4:a9:98:71:3b:cd:61:47:a7:b6:
db:38:3f:d9:2f:cc:22:d8:80:8d:93:d5:09:6f:d9:56:11:77:
9a:7f:20:5d:2e:d4:d4:e2:05:7d:85:d8:71:ce:a7:13:cb:cc:
40:f2:cc:6b:4b:10:ff:a1:73:03:97:a7:b3:c6:20:b3:db:1d:
bd:08:8d:c2:05:d1:61:c4:b8:d6:d8:d3:c6:cf:43:5e:92:d1:
1b:cc:60:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:01:56 2024 by rpki-client on console-fra.rpki-client.org