Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/BoEXANshHSxAiImI74XbAf7pb0k.roa
File: BoEXANshHSxAiImI74XbAf7pb0k.roa (raw, json)
Hash identifier: ZG5d6fhxD0nNt+45o2okVcvg4MS9YU7RK9pPeB1z4b0=
Subject key identifier: 06:81:17:00:DB:21:1D:2C:40:88:89:88:EF:85:DB:01:FE:E9:6F:49
Certificate issuer: /CN=fd3af2b06f4a5016e0e5abed183f465db15f41d5
Certificate serial: 018CC725A227AFB7B4E18067249A3271191A
Authority key identifier: FD:3A:F2:B0:6F:4A:50:16:E0:E5:AB:ED:18:3F:46:5D:B1:5F:41:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TrysG9KUBbg5avtGD9GXbFfQdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/BoEXANshHSxAiImI74XbAf7pb0k.roa
Signing time: Mon 01 Jan 2024 22:29:41 +0000
ROA not before: Mon 01 Jan 2024 22:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24971
IP address blocks: 185.145.160.0/22 maxlen: 22
2a07:4880::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_TrysG9KUBbg5avtGD9GXbFfQdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:a2:27:af:b7:b4:e1:80:67:24:9a:32:71:19:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd3af2b06f4a5016e0e5abed183f465db15f41d5
Validity
Not Before: Jan 1 22:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=06811700db211d2c40888988ef85db01fee96f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4e:80:51:c9:43:92:f1:d8:4b:14:71:a5:4b:
cd:7b:0c:6f:f2:bf:24:22:0e:6b:0e:79:5a:34:0b:
fd:e8:36:4c:8b:34:ac:03:79:e9:a9:69:a0:33:d7:
c6:65:b3:1b:4e:38:50:44:82:b0:bb:7a:b9:59:91:
61:89:be:2c:a2:c6:02:2a:bc:c7:76:ec:cb:b7:21:
90:98:35:38:a9:f3:e4:ca:88:be:2a:c4:2f:cb:0c:
75:3d:a2:e8:0e:2c:65:f4:bf:25:df:bf:e2:4d:ab:
d3:06:b8:62:3d:7e:bb:9f:96:82:fc:87:ac:dc:80:
00:7f:42:39:e5:e5:4b:50:d5:56:0a:6e:87:9d:ee:
f0:13:0f:c3:12:a8:8b:90:68:a7:a1:61:36:4b:58:
ba:e4:12:8a:bd:9f:b6:f0:d6:16:98:82:4a:2a:59:
6f:cf:19:87:0b:eb:90:f5:a6:2c:e7:66:b9:14:aa:
be:42:47:68:f2:0c:26:10:bf:97:a6:02:b7:84:dd:
b0:18:1a:05:e2:98:d0:7e:20:1c:be:23:c4:9b:34:
a1:c9:91:37:45:94:d1:51:b3:c4:0a:57:08:63:bb:
c1:89:8b:1e:d2:ef:76:fa:38:88:8c:64:a2:95:1b:
d4:d7:85:9e:2a:91:33:0a:b5:9b:f5:bd:f0:77:b3:
34:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:81:17:00:DB:21:1D:2C:40:88:89:88:EF:85:DB:01:FE:E9:6F:49
X509v3 Authority Key Identifier:
keyid:FD:3A:F2:B0:6F:4A:50:16:E0:E5:AB:ED:18:3F:46:5D:B1:5F:41:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TrysG9KUBbg5avtGD9GXbFfQdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/BoEXANshHSxAiImI74XbAf7pb0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.160.0/22
IPv6:
2a07:4880::/29
Signature Algorithm: sha256WithRSAEncryption
06:59:6d:62:3f:46:3a:8c:7c:f1:4d:13:b9:2f:2a:d4:54:5a:
f4:c8:10:b1:19:c9:15:88:ec:13:19:d9:27:8c:90:d8:26:6f:
2f:96:8e:ef:a7:0f:3b:7c:4d:d7:4e:f9:c7:16:91:0d:eb:df:
12:3f:18:65:48:88:96:da:93:aa:c5:a1:01:b6:91:42:92:51:
ce:f6:7f:c8:f1:ed:dd:ad:ce:df:47:31:1c:50:9c:9b:b9:40:
75:29:d9:1e:21:57:8c:3d:58:44:28:2b:6d:8b:54:aa:a5:14:
2a:1c:f7:47:80:64:cd:4b:35:e6:d5:d7:54:56:fe:85:44:77:
49:a1:33:87:5b:b1:dd:b9:89:ec:7d:e9:49:56:02:0d:c2:69:
6f:f5:65:ef:ba:c6:c2:7e:34:06:20:28:e0:27:66:af:24:d2:
ec:c3:ad:d8:21:4c:e9:56:15:a1:30:38:f5:49:7a:f8:a3:e9:
73:0a:11:2a:27:24:88:20:33:93:c2:7c:42:1a:0f:48:8e:1d:
b8:f0:3b:f1:c2:5e:1f:a4:3a:6b:d1:5b:e3:0e:37:dd:0f:40:
31:5a:b1:db:d2:d7:f2:cc:15:9f:67:81:08:06:06:4f:52:b1:
dd:5b:b3:9a:95:27:22:98:6b:3b:4a:e1:bd:f4:9f:14:0b:05:
b8:f6:60:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:43:54 2024 by rpki-client on console-ams.rpki-client.org