Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/BHTm71CsoMq-O9knp1VBA1KKiD0.roa
File: BHTm71CsoMq-O9knp1VBA1KKiD0.roa (raw, json)
Hash identifier: HTpoWCnojOgoK80yEXgzUm3nppRFWfJupzblhZcYiu4=
Subject key identifier: 04:74:E6:EF:50:AC:A0:CA:BE:3B:D9:27:A7:55:41:03:52:8A:88:3D
Certificate issuer: /CN=a1ebf54d028ee4764f62f78ad871dbf026228788
Certificate serial: 0192335F80236C87AB91E666F8EC557519C0
Authority key identifier: A1:EB:F5:4D:02:8E:E4:76:4F:62:F7:8A:D8:71:DB:F0:26:22:87:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oev1TQKO5HZPYveK2HHb8CYih4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/BHTm71CsoMq-O9knp1VBA1KKiD0.roa
Signing time: Fri 27 Sep 2024 12:05:49 +0000
ROA not before: Fri 27 Sep 2024 12:05:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62302
IP address blocks: 185.137.132.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/oev1TQKO5HZPYveK2HHb8CYih4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:33:5f:80:23:6c:87:ab:91:e6:66:f8:ec:55:75:19:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1ebf54d028ee4764f62f78ad871dbf026228788
Validity
Not Before: Sep 27 12:05:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0474e6ef50aca0cabe3bd927a7554103528a883d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d9:a0:c3:e2:a4:6e:97:3f:a4:41:c9:b5:ea:
c6:ea:3f:1e:40:f0:29:d0:d3:3b:84:d7:82:8d:40:
0a:41:e3:82:a8:94:23:73:62:ab:12:0c:02:4d:82:
6d:45:22:41:67:fe:4c:e7:c7:7d:da:37:9a:0c:01:
35:25:68:48:16:71:af:4b:7b:b2:e9:2e:ab:30:29:
bd:cf:c6:2c:9b:c6:39:49:e9:ad:45:f2:25:d6:da:
c2:fb:cd:49:29:f2:16:c8:9e:ba:fb:5d:ce:5c:45:
f1:8c:c8:c3:06:b5:ec:20:d2:20:53:76:18:e6:a2:
09:b6:4f:76:12:80:11:66:bd:6c:7a:f2:1f:74:eb:
56:33:bf:c8:b3:0c:96:a1:03:17:ef:cb:7d:18:c5:
0b:40:a8:15:dc:0e:92:f4:9a:8c:47:50:cc:9b:32:
a5:61:54:22:c5:66:d8:2e:50:7a:22:ee:73:f3:45:
4c:0c:7a:86:e2:cc:c8:d1:d6:0b:a1:f9:1e:37:1d:
3e:17:63:60:14:a2:09:76:2a:da:cb:7e:90:ad:1d:
24:38:85:cf:3a:b5:4c:d7:4e:c8:e6:97:ee:4c:93:
58:7a:af:75:ae:71:03:14:c6:6a:ac:8e:41:73:9c:
01:8a:62:22:09:a2:90:88:c8:d0:5b:72:39:98:6b:
ab:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:74:E6:EF:50:AC:A0:CA:BE:3B:D9:27:A7:55:41:03:52:8A:88:3D
X509v3 Authority Key Identifier:
keyid:A1:EB:F5:4D:02:8E:E4:76:4F:62:F7:8A:D8:71:DB:F0:26:22:87:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oev1TQKO5HZPYveK2HHb8CYih4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/BHTm71CsoMq-O9knp1VBA1KKiD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.132.0/22
Signature Algorithm: sha256WithRSAEncryption
23:0d:aa:5f:d5:03:94:fc:51:7d:45:8c:d8:fb:0a:7a:ae:a0:
5a:f1:96:62:b0:ba:c8:d8:58:7d:5b:d7:0b:ed:ac:50:51:0e:
b1:07:f8:64:ad:26:66:29:1a:7d:a3:bb:3b:0e:9a:b9:e4:51:
41:40:57:e9:6b:1f:14:0d:f1:e9:89:67:0d:78:14:de:32:52:
4b:93:ed:16:76:a1:94:6b:4c:fc:da:f5:12:c6:48:f2:18:9d:
5a:c4:de:e8:2a:21:54:88:b9:ca:e9:64:15:f2:ae:da:14:3a:
78:c2:69:44:4c:9e:d2:e6:c4:ea:25:6b:41:9a:77:ed:41:0e:
49:4d:92:fd:1b:77:50:45:50:6b:d0:57:ab:4f:11:23:b9:a4:
0c:d7:74:51:64:fe:34:51:7a:83:44:e7:ed:0f:8b:10:b9:23:
be:3f:fd:a6:90:a5:52:69:2d:0e:64:e2:8b:af:0f:b0:3f:ad:
11:65:41:e5:f4:cc:75:1e:ab:67:0b:0e:e5:0d:13:d4:cb:12:
ad:04:33:d9:5f:88:fd:a4:53:ca:a8:19:02:32:3f:5a:14:96:
97:d1:d6:74:e5:2b:11:b3:e2:38:6d:a0:ac:1c:e5:1c:d6:2d:
83:dc:64:66:95:a4:74:fd:94:88:1a:5b:90:ab:d4:7d:72:82:
a7:db:b8:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:12:41 2024 by rpki-client on console-fra.rpki-client.org