Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/BfyOohkn-Zk8_hothbpOdYZgMwo.roa
File: BfyOohkn-Zk8_hothbpOdYZgMwo.roa (raw, json)
Hash identifier: JtSsJb2XbrgQrNIDLRFtD+1ThzTwj+FwFO3e5WtdtO0=
Subject key identifier: 05:FC:8E:A2:19:27:F9:99:3C:FE:1A:2D:85:BA:4E:75:86:60:33:0A
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 018CCA28752719FF3C69290F233FFA1394B9
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/BfyOohkn-Zk8_hothbpOdYZgMwo.roa
Signing time: Tue 02 Jan 2024 12:31:38 +0000
ROA not before: Tue 02 Jan 2024 12:31:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204203
IP address blocks: 178.239.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 14:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:28:75:27:19:ff:3c:69:29:0f:23:3f:fa:13:94:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jan 2 12:31:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05fc8ea21927f9993cfe1a2d85ba4e758660330a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f4:2e:c2:42:83:09:73:a1:55:07:94:6d:ea:
ab:a1:f4:4d:04:59:2e:fe:11:13:60:5d:93:b1:75:
b8:cb:6f:90:c1:57:3b:02:0c:d6:9b:c5:bd:5b:92:
d5:12:2f:42:d9:ad:6c:80:66:ca:25:fb:b4:01:26:
28:cf:c8:54:80:8c:1d:45:30:e1:ba:9d:59:72:51:
ec:9c:f9:31:f6:61:b3:58:31:5a:d5:a7:e1:ec:1c:
43:b6:15:63:77:3d:e3:94:c3:76:bb:6c:00:11:15:
59:73:e3:b5:ba:c6:1f:bc:b4:84:d9:4a:0b:f5:9b:
28:a3:f0:b5:42:0e:7b:63:e4:19:5b:82:bd:ab:7b:
d2:b1:76:7f:ca:b4:28:6f:99:d9:a9:02:8f:77:73:
c6:52:62:06:f6:7a:4a:ac:74:53:07:ed:99:17:93:
38:52:18:97:ba:4b:6c:9f:be:9a:f2:6a:a7:b7:b6:
1c:f1:75:8d:de:38:13:24:30:d6:7c:7c:e1:eb:a5:
4c:45:12:20:15:fe:31:1f:4f:67:08:ee:36:9b:5c:
60:d2:b2:83:8d:46:e7:dd:0c:67:56:f2:81:35:91:
17:d4:42:65:7d:7c:aa:80:f7:fd:bc:58:5a:49:38:
ea:56:1a:2b:74:13:77:55:8e:ec:f8:ee:a6:8f:e7:
00:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:FC:8E:A2:19:27:F9:99:3C:FE:1A:2D:85:BA:4E:75:86:60:33:0A
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/BfyOohkn-Zk8_hothbpOdYZgMwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.150.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:55:c3:b1:bc:6a:bb:df:00:fa:43:8f:f9:23:ee:dc:9e:e4:
25:c6:7e:37:db:d9:bc:7e:db:2f:05:99:41:87:d3:3b:77:50:
e2:54:85:4d:22:e7:7f:4e:02:1b:e8:bf:62:80:a7:bf:3c:a4:
32:c5:e2:8a:9f:ab:aa:87:f6:4c:12:84:7a:25:75:45:85:4d:
f5:71:aa:a2:22:5d:d4:32:25:27:ad:8f:1d:8e:17:8b:57:40:
ff:8f:60:77:53:30:ca:22:a8:11:c2:55:40:51:91:49:d4:e4:
03:87:c1:eb:4e:18:d1:8f:7a:85:f7:73:21:24:5a:a3:cc:c3:
0a:39:6c:bf:49:38:e5:30:8b:b2:18:2c:7d:cb:62:3d:b2:66:
fc:33:74:ad:2f:fb:57:74:1d:8b:bd:09:63:62:c4:58:84:51:
6c:23:43:57:db:34:a9:de:c8:2d:8e:d1:48:5d:b5:d9:35:2e:
30:c0:78:28:0e:3f:67:31:85:70:ab:02:ef:8e:f5:b1:80:3f:
8e:35:b9:6e:2f:bb:0a:55:ce:9c:19:4f:a4:a0:f4:41:f7:bc:
78:87:80:af:ab:7b:7f:d6:9e:ac:14:2a:2f:e3:e9:b2:02:94:
6f:70:06:bc:ed:bb:5b:1e:9c:53:24:a4:09:22:b4:4c:49:32:
6c:7d:4d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:44:41 2024 by rpki-client on console-fra.rpki-client.org