Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/BwZmywdSLBu1C5HRV4gjQ1E9-es.roa
File: BwZmywdSLBu1C5HRV4gjQ1E9-es.roa (raw, json)
Hash identifier: DKxh4B0uUGV0iim5l2d1di0v1Q5L0L5H2joKcMpQeek=
Subject key identifier: 07:06:66:CB:07:52:2C:1B:B5:0B:91:D1:57:88:23:43:51:3D:F9:EB
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 018CC26D42F6D2D60FD398EC5E241D53180D
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/BwZmywdSLBu1C5HRV4gjQ1E9-es.roa
Signing time: Mon 01 Jan 2024 00:29:49 +0000
ROA not before: Mon 01 Jan 2024 00:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211968
IP address blocks: 2a0e:aa07:e01a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 14:41:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:42:f6:d2:d6:0f:d3:98:ec:5e:24:1d:53:18:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 00:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=070666cb07522c1bb50b91d157882343513df9eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4e:3d:19:e9:25:19:ef:90:63:bf:02:27:ba:
55:f0:36:4d:6f:37:44:7e:9c:2c:a9:e1:ee:da:bf:
ea:9a:a1:67:d8:5a:8d:67:00:dd:21:44:b7:c7:be:
8e:d0:35:71:f2:06:63:dd:ad:66:80:6b:af:2f:b6:
ea:f9:f8:05:54:78:11:8e:01:1e:b2:ee:c8:4b:d0:
4d:bb:2b:fc:eb:68:86:57:fe:19:5d:0e:e8:cf:0d:
4c:63:74:ee:94:be:d2:0d:19:f4:b7:eb:db:5a:a3:
75:86:02:51:85:64:d7:60:a9:2a:78:a9:00:53:12:
5d:87:93:58:ab:a0:08:03:04:2e:a2:37:9c:82:0c:
0e:4f:6e:b6:d9:82:00:1e:48:23:a9:6a:f3:57:7e:
81:43:56:f8:9b:66:7f:aa:48:7b:1d:c3:e9:ef:50:
91:1b:5e:14:04:7b:29:e2:d3:12:b9:f6:e3:06:c0:
01:e4:7d:a9:dd:05:af:ae:f6:5b:34:2a:13:b6:d7:
2a:fd:a8:c2:3e:68:4a:44:f6:85:2b:2c:0e:c0:61:
82:cd:fe:ab:13:40:ad:51:f6:7a:52:90:1a:a7:85:
13:94:ba:a2:2c:44:d0:8c:d6:b9:82:f8:9b:89:e8:
52:d0:05:83:ab:20:84:fb:86:99:3c:62:77:f0:e9:
11:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:06:66:CB:07:52:2C:1B:B5:0B:91:D1:57:88:23:43:51:3D:F9:EB
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/BwZmywdSLBu1C5HRV4gjQ1E9-es.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e01a::/48
Signature Algorithm: sha256WithRSAEncryption
08:fb:c1:44:d8:03:15:39:3c:df:77:9a:4e:a1:2c:2d:85:d1:
e4:4a:35:cd:f3:40:cf:aa:93:b8:3d:eb:3e:14:82:37:cd:62:
32:02:a7:5c:13:b5:e6:1f:d4:f8:b8:da:6a:74:9f:f1:cf:c5:
ee:fb:e0:00:bd:c4:f3:4b:07:13:7b:25:63:9e:66:b1:e1:c8:
ba:10:d9:b6:8d:cc:3a:ea:c7:65:24:3a:41:11:36:05:e1:2d:
03:76:06:8f:30:f2:77:bb:8b:5c:24:8f:f4:79:57:b2:c5:41:
20:bc:65:bd:0f:a8:97:0d:1e:29:ec:27:a3:94:c6:4b:7e:31:
8a:3e:db:4c:bb:db:fb:ad:36:ac:74:46:c7:f6:4f:e8:d4:95:
25:28:89:42:d0:2e:94:d5:1b:7b:65:2b:d9:63:1e:a3:2f:12:
53:47:b8:37:78:a8:16:bd:42:30:62:7a:43:ee:a4:15:df:32:
5a:b5:1a:45:aa:83:4d:f3:df:1d:96:90:a9:5f:b9:a1:a3:3d:
6b:c0:0f:b2:da:f4:13:1c:c5:89:0e:bd:48:c8:b9:1c:03:92:
3e:ae:07:70:fb:c5:1e:77:f1:94:39:c8:f6:47:2b:6c:8e:e8:
db:ab:34:98:98:aa:4e:27:3a:c1:4d:de:2d:97:cc:17:41:11:
cc:ae:f8:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:51:56 2024 by rpki-client on console-fra.rpki-client.org