Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/BRPcTBL5x7I2MDH-kXM5kB1mCSc.roa
File: BRPcTBL5x7I2MDH-kXM5kB1mCSc.roa (raw, json)
Hash identifier: kiORnNnUjV5m2K83OckqRDQw24DayHZBSxOV1P5qbCc=
Subject key identifier: 05:13:DC:4C:12:F9:C7:B2:36:30:31:FE:91:73:39:90:1D:66:09:27
Certificate issuer: /CN=23aee94d0fff6c6c752a6942ffa962ae37c7e6b6
Certificate serial: 018CC72573FB4B4BB4653DAC33B4F072BDCC
Authority key identifier: 23:AE:E9:4D:0F:FF:6C:6C:75:2A:69:42:FF:A9:62:AE:37:C7:E6:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I67pTQ__bGx1KmlC_6lirjfH5rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/BRPcTBL5x7I2MDH-kXM5kB1mCSc.roa
Signing time: Mon 01 Jan 2024 22:29:29 +0000
ROA not before: Mon 01 Jan 2024 22:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56337
IP address blocks: 185.101.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft
rsync://rpki.ripe.net/repository/DEFAULT/I67pTQ__bGx1KmlC_6lirjfH5rY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:73:fb:4b:4b:b4:65:3d:ac:33:b4:f0:72:bd:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23aee94d0fff6c6c752a6942ffa962ae37c7e6b6
Validity
Not Before: Jan 1 22:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0513dc4c12f9c7b2363031fe917339901d660927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:38:14:a9:c3:26:89:8a:c5:25:a0:c8:5d:e9:
b0:ea:e8:ff:16:3f:f8:72:d0:4a:df:9c:66:d3:88:
25:f8:53:38:a2:7f:e3:31:ba:c4:f4:51:72:bc:f5:
a9:01:f3:66:7d:01:85:a1:6c:05:88:4e:c0:09:90:
ab:b4:8e:ff:12:df:2e:42:30:b0:df:f6:b3:09:f3:
da:22:1a:d4:90:f1:b1:d7:cd:9f:c2:7a:57:54:98:
75:f0:de:8f:fb:8d:9c:45:95:02:4a:7a:7f:fd:10:
de:fd:46:3b:49:73:4d:6a:ae:c7:4e:11:b9:29:c7:
11:78:22:e7:b1:57:31:79:ba:cd:f3:ff:85:cb:dc:
69:bf:5f:1c:c9:c3:fc:45:46:b2:40:e6:97:a7:37:
6e:ef:d1:1d:db:36:6e:ad:e4:c4:b7:39:4d:54:ce:
4d:26:4d:12:0e:f3:38:1f:6c:9e:ea:26:9a:af:11:
ad:f5:74:89:52:72:65:08:a7:7c:58:ce:aa:58:74:
b8:b2:0e:00:d5:bc:44:fe:75:43:63:48:19:1a:7d:
a4:a4:75:89:0d:20:a5:84:ef:aa:83:0c:c1:bb:82:
63:0e:af:ea:d5:74:02:97:9f:ca:ae:8b:bf:82:71:
07:de:ac:eb:17:9b:18:6b:78:2a:3c:e5:67:a2:d4:
a4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:13:DC:4C:12:F9:C7:B2:36:30:31:FE:91:73:39:90:1D:66:09:27
X509v3 Authority Key Identifier:
keyid:23:AE:E9:4D:0F:FF:6C:6C:75:2A:69:42:FF:A9:62:AE:37:C7:E6:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I67pTQ__bGx1KmlC_6lirjfH5rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/BRPcTBL5x7I2MDH-kXM5kB1mCSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.18.0/24
Signature Algorithm: sha256WithRSAEncryption
52:94:5c:81:3d:62:ab:af:12:d1:2a:3b:1e:02:44:93:28:56:
5e:d2:55:3c:31:2c:1b:27:22:2d:18:cf:ce:b5:39:db:6a:85:
24:4c:b0:db:2d:b8:40:a5:99:a5:11:57:df:12:6f:c3:51:18:
45:b0:64:48:e5:c3:11:d3:e2:e4:cd:88:1d:a5:60:4e:69:9a:
7f:ee:2d:f8:5e:9c:be:7d:48:e3:04:cf:0b:82:ef:1f:06:f3:
d9:d4:93:45:88:2b:cd:5d:de:fe:46:b5:43:6f:96:70:41:6f:
79:85:c5:58:87:b3:29:61:d5:b0:c8:1e:5c:63:a5:53:a5:40:
25:9c:41:fc:eb:40:73:fe:2a:3c:1b:d1:78:ad:9b:76:87:ca:
99:a4:85:43:83:ce:16:47:d2:d1:4b:d4:a2:c5:8e:b2:e5:b0:
81:bf:30:f9:df:9d:25:19:b4:4f:e9:1f:aa:d9:91:49:95:c9:
0a:33:9f:20:db:b8:47:67:b2:8c:74:d8:9a:10:58:a8:5c:dd:
1f:4a:33:6d:ca:43:10:25:44:a3:46:d6:fb:a5:be:7b:de:cd:
f6:54:26:bc:3a:90:db:f5:8a:f2:90:46:d3:b0:8f:fe:75:a3:
50:fd:91:46:a8:2c:5e:b3:29:c9:a1:d9:f4:cd:0b:43:a0:66:
8d:c8:ae:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 08:02:25 2024 by rpki-client on console-fra.rpki-client.org