Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/71fd10-4f26-449a-b361-f98ec9d162be/1/bcsTcrFw1qIZ3YMXCIuuUAVOOMM.roa
File: bcsTcrFw1qIZ3YMXCIuuUAVOOMM.roa (raw, json)
Hash identifier: 7PocReAibbgQ7qpblQf7pTJUsx6zV7QOQUE7LXMCOkk=
Subject key identifier: 6D:CB:13:72:B1:70:D6:A2:19:DD:83:17:08:8B:AE:50:05:4E:38:C3
Certificate issuer: /CN=ca1def8400365e1cac16e8f7887092dac983b73e
Certificate serial: 018CCA2A95E65A461D1F6B4D2A2119FDC59C
Authority key identifier: CA:1D:EF:84:00:36:5E:1C:AC:16:E8:F7:88:70:92:DA:C9:83:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yh3vhAA2XhysFuj3iHCS2smDtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/71fd10-4f26-449a-b361-f98ec9d162be/1/bcsTcrFw1qIZ3YMXCIuuUAVOOMM.roa
Signing time: Tue 02 Jan 2024 12:33:57 +0000
ROA not before: Tue 02 Jan 2024 12:33:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41165
IP address blocks: 80.64.80.0/20 maxlen: 20
195.238.176.0/22 maxlen: 22
195.216.204.0/23 maxlen: 23
185.35.8.0/22 maxlen: 22
94.100.208.0/20 maxlen: 20
2a00:7d00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/71fd10-4f26-449a-b361-f98ec9d162be/1/yh3vhAA2XhysFuj3iHCS2smDtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/71fd10-4f26-449a-b361-f98ec9d162be/1/yh3vhAA2XhysFuj3iHCS2smDtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yh3vhAA2XhysFuj3iHCS2smDtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:95:e6:5a:46:1d:1f:6b:4d:2a:21:19:fd:c5:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1def8400365e1cac16e8f7887092dac983b73e
Validity
Not Before: Jan 2 12:33:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6dcb1372b170d6a219dd8317088bae50054e38c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:56:2c:73:ab:46:f8:95:99:eb:9d:8a:91:fc:
7d:79:f1:8b:89:d5:a2:7c:64:18:24:22:10:18:05:
6f:d5:9d:ad:90:e4:ee:07:d4:d8:bb:89:ce:22:ef:
92:1f:af:67:74:39:ed:f0:fe:17:22:91:13:72:e6:
23:01:94:96:79:28:2c:1f:8b:27:21:44:08:d8:db:
51:c1:6e:f6:5e:2c:38:7d:3a:d0:1f:da:99:5f:6d:
d8:b9:8e:ce:8c:01:9a:8f:9b:df:ec:6c:1f:f3:4a:
f6:a7:af:6f:50:72:d2:cf:1d:ec:71:e6:5a:dd:3e:
0e:41:49:82:92:8a:71:48:0e:6d:1a:3c:15:e8:71:
bd:6a:8b:8d:2c:0d:74:a7:84:6a:f1:cf:87:7d:6f:
78:0f:76:0c:66:c2:19:97:ab:20:a0:38:92:39:7d:
9e:89:9d:73:cc:37:af:23:c7:32:ed:61:00:f9:2e:
3a:c4:72:24:1c:23:25:ff:45:da:b8:c8:05:67:ee:
2d:60:a1:4b:69:8f:fb:cf:13:f6:5f:5c:3c:bd:cd:
69:ea:5c:e0:40:09:fe:5d:72:6a:70:6f:75:c5:b3:
25:f9:b9:b7:c8:6d:45:eb:14:9e:db:72:6a:c0:88:
4d:be:d0:f0:c1:19:73:d6:8e:64:cd:a5:1c:ec:2d:
5f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:CB:13:72:B1:70:D6:A2:19:DD:83:17:08:8B:AE:50:05:4E:38:C3
X509v3 Authority Key Identifier:
keyid:CA:1D:EF:84:00:36:5E:1C:AC:16:E8:F7:88:70:92:DA:C9:83:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yh3vhAA2XhysFuj3iHCS2smDtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/71fd10-4f26-449a-b361-f98ec9d162be/1/bcsTcrFw1qIZ3YMXCIuuUAVOOMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/71fd10-4f26-449a-b361-f98ec9d162be/1/yh3vhAA2XhysFuj3iHCS2smDtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.64.80.0/20
94.100.208.0/20
185.35.8.0/22
195.216.204.0/23
195.238.176.0/22
IPv6:
2a00:7d00::/32
Signature Algorithm: sha256WithRSAEncryption
1a:d2:d7:8e:11:cc:00:6d:d6:51:65:ee:fc:f1:2d:e9:89:90:
9a:f0:b4:28:02:06:89:2d:91:3a:58:bd:b3:01:2a:f0:cb:82:
56:2d:a6:1e:ea:45:eb:1e:8e:6a:97:2c:3a:cd:f9:4e:85:03:
c4:c9:ca:62:8f:82:2c:1d:f3:6e:b0:2e:e1:13:19:50:e1:0a:
cd:30:03:9f:ae:31:cd:70:bc:54:c5:22:eb:03:aa:c5:c9:01:
a1:34:50:c5:37:b1:c3:58:6b:c2:d7:a5:57:98:f9:05:6b:6a:
fd:2b:e9:f9:07:f6:ad:fd:6f:f7:16:73:61:fb:fe:72:11:11:
9c:19:e9:31:e3:e8:0f:80:99:ff:24:63:f0:14:7d:b4:ee:7a:
65:4b:06:a6:60:a7:bb:46:98:23:c1:a4:f7:a5:19:86:78:8e:
e5:90:0f:27:35:25:ef:18:11:7a:94:fb:38:ff:2e:9f:c8:6e:
0b:cc:73:ec:c3:cb:54:25:51:f3:c9:d3:cb:68:49:87:fe:c6:
75:35:0d:de:c4:48:c0:1d:f8:29:a3:b8:ee:4e:75:d6:a7:9d:
0d:e4:2f:74:5c:6e:af:fa:57:36:13:c0:a7:dc:ba:9d:24:71:
44:73:8c:bc:ed:92:f2:5b:bf:ca:a9:03:84:9c:be:61:ea:6a:
96:e6:e5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:02:57 2024 by rpki-client on console-fra.rpki-client.org