Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/bJe-5Pa0Cn_LBU_XJw9cJBEXLDY.roa
File: bJe-5Pa0Cn_LBU_XJw9cJBEXLDY.roa (raw, json)
Hash identifier: 5yIjRscNzlYkBTKgSputHl4O6L18a4yb9iqX/FjClQE=
Subject key identifier: 6C:97:BE:E4:F6:B4:0A:7F:CB:05:4F:D7:27:0F:5C:24:11:17:2C:36
Certificate issuer: /CN=bfc470e9b58e557ea8c1dbedaeb9c6a5fc455125
Certificate serial: 018CC6B79B376EB3A5A59E9E0A166277FE3F
Authority key identifier: BF:C4:70:E9:B5:8E:55:7E:A8:C1:DB:ED:AE:B9:C6:A5:FC:45:51:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/bJe-5Pa0Cn_LBU_XJw9cJBEXLDY.roa
Signing time: Mon 01 Jan 2024 20:29:30 +0000
ROA not before: Mon 01 Jan 2024 20:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50673
IP address blocks: 185.192.144.0/24 maxlen: 24
185.192.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:9b:37:6e:b3:a5:a5:9e:9e:0a:16:62:77:fe:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfc470e9b58e557ea8c1dbedaeb9c6a5fc455125
Validity
Not Before: Jan 1 20:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c97bee4f6b40a7fcb054fd7270f5c2411172c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:20:53:b8:c4:1f:b9:17:c2:67:4e:98:ba:3d:
0c:fa:04:a0:ae:c8:50:25:4b:0a:26:9b:fe:3a:18:
39:df:2a:b7:76:ae:01:fc:0b:b3:be:7a:0c:02:c8:
b8:45:c9:da:98:fa:a4:a9:21:05:4e:b4:0e:41:3a:
cc:f8:b9:a7:93:94:51:4b:d8:69:ff:37:ef:f2:3b:
07:c1:bf:54:f1:01:3e:6d:e9:83:3f:8f:b3:c3:fe:
b7:bd:32:8b:10:a8:a6:ae:dc:4b:d1:75:3a:90:49:
77:83:f4:04:1b:c3:45:d2:aa:c9:6b:96:2b:ba:f2:
dc:d0:db:ee:0d:7c:ea:54:fd:7c:3a:c4:2d:14:67:
70:08:52:ce:28:d4:fb:31:05:02:4f:76:64:e2:42:
e4:e3:74:a6:3e:d5:73:73:ee:a7:7a:a2:c6:b3:4d:
50:cd:89:e4:66:23:81:fb:bc:94:7d:8c:6b:82:9c:
be:93:7d:06:32:9d:cb:f3:24:e7:79:22:40:92:2d:
65:15:02:95:c7:da:86:e8:1a:d6:1b:06:d6:e8:f8:
a8:28:88:70:03:fd:3d:3f:7f:2e:f5:b8:f7:c9:ec:
0d:4a:64:b4:a7:ff:ab:20:cf:8b:d7:e4:7f:5c:fe:
d2:c6:18:3a:be:d4:d1:78:21:7a:1d:c2:e7:69:1a:
2e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:97:BE:E4:F6:B4:0A:7F:CB:05:4F:D7:27:0F:5C:24:11:17:2C:36
X509v3 Authority Key Identifier:
keyid:BF:C4:70:E9:B5:8E:55:7E:A8:C1:DB:ED:AE:B9:C6:A5:FC:45:51:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/bJe-5Pa0Cn_LBU_XJw9cJBEXLDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.144.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:3b:c0:29:4b:cf:17:5d:2b:39:3d:ed:f0:08:aa:c1:f3:72:
5a:fe:f4:63:68:e7:42:cf:7b:e9:fb:43:f3:89:64:37:b3:2a:
07:da:6b:48:90:6b:a8:69:5e:40:e7:1a:93:e4:f4:c5:e3:eb:
f0:17:09:c5:1d:6b:4a:04:73:ac:47:4b:2a:69:7a:90:58:e7:
2c:ff:9f:da:43:66:25:70:f2:ce:ee:82:ec:02:d3:29:b5:0c:
04:fd:e8:35:eb:d7:1c:15:56:b0:3c:3c:42:ec:49:a5:f6:c9:
b0:cb:47:e6:4a:d4:d4:80:31:a9:6f:f2:d4:fb:8c:6c:9e:ec:
ae:ba:5b:6e:11:6e:c9:8c:77:88:f9:f3:8b:d4:60:f7:e0:6f:
48:f9:3b:22:42:73:a1:d8:b4:91:c1:d0:1e:d4:15:ec:b9:91:
bd:b2:7d:9f:5a:99:29:7d:4d:21:d1:b1:28:e3:82:e7:f0:a5:
aa:11:41:b6:98:07:35:ce:64:6a:60:d4:68:29:eb:81:61:d1:
86:c3:f1:fd:d9:ce:f5:3f:3a:c1:72:64:3a:ac:b3:bc:01:07:
9d:7d:2d:e5:19:99:62:7d:6e:c8:42:36:0f:44:7b:3e:c8:a4:
3f:25:6e:74:81:6b:6a:aa:de:2e:20:d9:04:78:3c:3d:02:fb:
bd:19:78:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:18:14 2024 by rpki-client on console-ams.rpki-client.org