Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/BRnquYI2nVR409GB4vToNvxSmdY.roa
File: BRnquYI2nVR409GB4vToNvxSmdY.roa (raw, json)
Hash identifier: F8/oEXq8G45BIobmHhNUjIOPuNI1Y8MNEuzNiZFD9hs=
Subject key identifier: 05:19:EA:B9:82:36:9D:54:78:D3:D1:81:E2:F4:E8:36:FC:52:99:D6
Certificate issuer: /CN=7d149f62447853689c12fb288afeb6b681cfebc1
Certificate serial: 018CC56E3A5D81CA88DD1F95B7E6E3474CE5
Authority key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/BRnquYI2nVR409GB4vToNvxSmdY.roa
Signing time: Mon 01 Jan 2024 14:29:44 +0000
ROA not before: Mon 01 Jan 2024 14:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21062
IP address blocks: 213.184.241.0/24 maxlen: 24
93.125.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:3a:5d:81:ca:88:dd:1f:95:b7:e6:e3:47:4c:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d149f62447853689c12fb288afeb6b681cfebc1
Validity
Not Before: Jan 1 14:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0519eab982369d5478d3d181e2f4e836fc5299d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:5e:c6:fe:43:08:d5:38:68:22:ad:ee:29:cc:
4b:46:55:9a:90:35:5e:f0:82:3f:c0:cd:cb:4c:7a:
8d:52:55:41:ec:02:f0:81:4a:83:4b:14:ad:e8:5e:
c1:34:c1:df:d1:77:91:94:db:7f:0f:a3:0f:f3:e9:
9c:d1:06:d0:31:ac:53:49:1d:ce:70:e4:eb:fe:aa:
e6:ce:cc:0d:6f:f2:8d:68:84:54:40:f1:e3:9b:03:
a6:ab:d8:9a:2f:44:7f:41:83:7d:4a:f0:83:66:0f:
54:46:3f:ef:0d:4d:b9:8c:9d:21:b3:85:93:2c:1c:
48:2d:3b:c6:7e:cd:a6:78:24:01:79:e0:c1:c5:9b:
30:97:38:59:c8:96:d2:03:67:f1:0c:03:a4:98:06:
67:f8:ae:2b:9b:9f:8b:23:0c:99:79:76:e1:44:3c:
d3:5c:d0:23:64:db:68:8b:08:97:a4:6d:21:28:86:
1c:e6:fe:b4:7e:bf:b1:45:46:6f:90:ba:49:7f:f2:
2a:dd:ef:46:06:e5:5c:98:c5:49:bf:c0:87:72:4c:
17:3c:5c:5d:92:e8:28:a4:c3:29:63:97:24:b9:58:
b2:f9:b3:63:ea:fa:1d:ec:0c:35:d4:f1:ae:25:1e:
47:41:0a:a5:a9:52:1e:0f:e1:0a:d4:7a:99:6b:82:
d7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:19:EA:B9:82:36:9D:54:78:D3:D1:81:E2:F4:E8:36:FC:52:99:D6
X509v3 Authority Key Identifier:
keyid:7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/BRnquYI2nVR409GB4vToNvxSmdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.125.39.0/24
213.184.241.0/24
Signature Algorithm: sha256WithRSAEncryption
34:5e:78:06:50:f5:9b:7c:12:0a:24:71:0d:75:32:b4:b1:5d:
a4:a2:3d:78:28:ff:8c:67:58:fd:c4:24:e6:96:b5:b3:7c:33:
c7:f0:fc:80:44:28:4d:b3:d8:5b:9c:6f:fc:99:61:f9:54:e2:
d8:06:13:03:a9:68:33:7e:d1:4d:ff:a8:3e:7d:97:77:a4:2e:
06:4c:0e:90:93:a0:f1:60:c5:cb:12:3d:5f:57:26:fa:b6:a3:
55:ec:59:37:1d:99:f5:5f:5c:5e:72:10:ab:be:5d:1f:ef:cb:
e8:c1:cf:7d:06:47:54:a8:51:87:29:c7:aa:85:ef:22:38:8d:
4a:66:0b:00:f6:08:a0:a4:a0:27:83:23:42:a3:bb:95:07:5a:
be:01:46:02:6c:13:c6:f2:d7:fa:4c:19:d0:e0:f8:1e:b3:ab:
d6:81:b2:12:d0:60:0e:1e:60:b1:ed:4f:82:55:70:56:9d:13:
eb:78:2b:45:26:a6:00:62:b5:93:2a:82:d2:f2:11:d1:ca:5b:
f0:13:a1:1f:b5:8a:fa:cb:b9:47:3b:4b:65:8b:8d:f8:fd:20:
22:2e:b4:ca:db:69:77:2d:41:b6:a9:a9:8b:47:64:6a:3d:ad:
6e:c4:a4:7c:f8:cb:80:0e:06:15:a4:42:1c:10:d7:75:5c:b4:
ff:13:5c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:03:49 2024 by rpki-client on console-ams.rpki-client.org