Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/BWkkTqw-jJBRPisw_cClaMvRu38.roa
File: BWkkTqw-jJBRPisw_cClaMvRu38.roa (raw, json)
Hash identifier: 39zcG6TiTehQWTNjeWIi5QL/uV9ur2Jq+npdVuiKgaU=
Subject key identifier: 05:69:24:4E:AC:3E:8C:90:51:3E:2B:30:FD:C0:A5:68:CB:D1:BB:7F
Certificate issuer: /CN=662c6c3d22cf6b101d7148006da7a7284dcbb320
Certificate serial: 018CC725AC5DCDAB7FA8B940CE57A74C30A5
Authority key identifier: 66:2C:6C:3D:22:CF:6B:10:1D:71:48:00:6D:A7:A7:28:4D:CB:B3:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/BWkkTqw-jJBRPisw_cClaMvRu38.roa
Signing time: Mon 01 Jan 2024 22:29:44 +0000
ROA not before: Mon 01 Jan 2024 22:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197190
IP address blocks: 195.226.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:ac:5d:cd:ab:7f:a8:b9:40:ce:57:a7:4c:30:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=662c6c3d22cf6b101d7148006da7a7284dcbb320
Validity
Not Before: Jan 1 22:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0569244eac3e8c90513e2b30fdc0a568cbd1bb7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:25:5f:19:fe:e6:ca:bb:ed:0e:04:f2:78:0d:
64:3a:c0:38:5a:70:64:97:77:a6:55:79:9d:64:12:
93:f7:c7:0c:6b:2d:b4:6e:b6:c4:87:00:27:8e:25:
dd:b3:d0:4c:ff:57:78:66:3a:23:1c:48:de:a0:76:
52:95:73:88:de:03:21:15:9f:86:e1:5f:56:07:3b:
37:a1:a7:b0:5c:cd:3b:50:dd:c3:da:c8:e8:38:43:
1d:37:d9:ed:88:11:08:2e:af:3d:e9:78:19:68:e7:
0a:ea:75:96:d0:95:72:f8:f9:d8:d6:f8:48:5a:03:
2e:6d:0d:16:e6:76:7a:65:fc:29:0f:d7:7d:04:1c:
26:f7:45:49:c3:99:28:ed:1a:72:ec:4b:16:44:59:
ae:de:36:ad:24:6c:be:e7:12:1f:52:1d:90:3b:2d:
68:1b:53:56:80:7e:02:9d:30:e0:f8:7f:ee:5c:40:
dd:b4:ed:cc:ce:34:08:81:02:24:6d:73:ad:e6:f4:
d2:22:fd:d9:14:ea:46:ee:6e:33:db:0b:8c:9d:82:
a7:bf:e6:32:e7:ba:b8:4d:90:15:3b:e6:9e:c2:07:
9b:c6:1c:60:d9:6d:5e:43:ba:c2:5b:96:e6:5e:94:
61:3d:b1:d6:91:8a:c1:ee:c1:3a:03:64:95:d2:2d:
81:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:69:24:4E:AC:3E:8C:90:51:3E:2B:30:FD:C0:A5:68:CB:D1:BB:7F
X509v3 Authority Key Identifier:
keyid:66:2C:6C:3D:22:CF:6B:10:1D:71:48:00:6D:A7:A7:28:4D:CB:B3:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/BWkkTqw-jJBRPisw_cClaMvRu38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.226.199.0/24
Signature Algorithm: sha256WithRSAEncryption
23:d0:a9:af:d5:c5:5d:b0:12:10:63:24:6c:d9:e2:29:1a:48:
63:c0:7d:df:65:9f:67:f6:3b:5c:5e:5c:88:5d:63:f0:d6:08:
da:f8:29:fe:ea:96:94:67:4c:0c:70:b1:56:fa:f8:98:9d:a9:
eb:ff:fd:4f:6a:3f:5c:79:44:bc:f3:11:51:f7:29:47:f9:b0:
9c:05:e8:da:23:90:b8:ed:86:d7:62:c8:f5:dc:30:6a:37:ec:
a7:f9:41:bb:ab:68:db:27:f3:a6:0c:02:2c:b5:0d:6e:80:5f:
78:7b:1f:a3:72:01:67:e2:3c:5d:42:e9:e9:4a:66:f4:68:b6:
36:bf:4e:c3:ab:6f:e3:a8:a3:4a:0d:f9:13:84:67:c7:6a:6c:
67:12:a6:d5:f8:56:08:99:8a:12:cd:09:58:ae:d1:12:ef:1e:
f5:d1:2e:6b:60:cb:c4:57:b8:2b:26:2c:74:e1:68:4a:1b:c0:
bf:9f:f9:a5:26:25:5f:69:d2:09:bb:a6:2a:9b:11:d9:d5:67:
26:c1:7a:75:d0:c3:fd:71:98:38:ef:ea:38:3f:8a:85:08:25:
4d:65:d0:7d:56:5a:6a:cd:32:33:95:24:5e:5d:6f:7c:f3:f9:
9a:69:e4:88:45:63:4f:b9:ab:15:46:be:3c:ab:f6:ed:96:6e:
b7:2e:50:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:03:30 2024 by rpki-client on console-fra.rpki-client.org