Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/BXBut1SQw9cBiUFZjy2xg9Y58Dw.roa
File: BXBut1SQw9cBiUFZjy2xg9Y58Dw.roa (raw, json)
Hash identifier: e3V7o5M5CZc9Hsvq/85n/35+7bk1S3MXNGNULreSRBA=
Subject key identifier: 05:70:6E:B7:54:90:C3:D7:01:89:41:59:8F:2D:B1:83:D6:39:F0:3C
Certificate issuer: /CN=84bfc451fc4f2411addd00a9fbb17346ad6e8996
Certificate serial: 019291B63AD91F511072DC3C994F902EABC4
Authority key identifier: 84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/BXBut1SQw9cBiUFZjy2xg9Y58Dw.roa
Signing time: Tue 15 Oct 2024 19:44:51 +0000
ROA not before: Tue 15 Oct 2024 19:44:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206238
IP address blocks: 91.132.40.0/22 maxlen: 22
178.239.16.0/22 maxlen: 24
188.212.112.0/22 maxlen: 22
188.213.88.0/21 maxlen: 24
194.145.194.0/23 maxlen: 23
217.148.134.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:91:b6:3a:d9:1f:51:10:72:dc:3c:99:4f:90:2e:ab:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84bfc451fc4f2411addd00a9fbb17346ad6e8996
Validity
Not Before: Oct 15 19:44:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05706eb75490c3d7018941598f2db183d639f03c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:86:ed:2c:3e:40:0f:24:10:0d:ab:3c:a5:47:
c0:49:bb:66:db:f8:36:51:9d:9c:c4:03:25:40:e8:
69:f9:a0:b5:50:bd:25:9c:88:54:ac:64:74:17:d4:
a9:85:b3:cf:c5:cd:15:87:41:75:b4:e9:19:4a:cb:
83:66:2b:31:3e:68:1d:4a:30:65:ac:38:3d:ac:cc:
e8:ed:10:d2:0e:66:cb:ba:74:77:f7:60:82:84:f0:
c6:d7:df:3e:90:7a:a8:c6:a7:4e:5e:23:3f:11:11:
ec:ad:64:03:5c:df:c7:a2:5e:9a:47:a0:e2:56:45:
b1:e3:bd:19:1d:52:bb:05:3b:0d:67:e9:19:3f:ea:
ef:ad:f3:7d:40:18:a1:4e:ba:3f:4d:89:ed:20:f6:
97:5e:ac:34:21:6d:14:89:b3:7c:4e:88:1c:cb:cd:
19:af:a3:5f:09:10:2a:56:45:8f:81:06:0f:c1:2e:
7a:54:4b:ac:44:0a:c4:1f:97:ac:90:fa:27:8b:17:
9c:4c:1c:1d:99:07:75:8d:2f:3e:27:53:fd:f2:01:
20:c7:da:e2:b4:b9:1a:87:7c:e7:13:ae:eb:cd:72:
88:06:95:2b:d3:36:0a:56:65:31:84:15:b6:87:8c:
63:ce:0d:de:60:2e:71:38:e1:37:66:5d:f7:f6:ee:
77:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:70:6E:B7:54:90:C3:D7:01:89:41:59:8F:2D:B1:83:D6:39:F0:3C
X509v3 Authority Key Identifier:
keyid:84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/BXBut1SQw9cBiUFZjy2xg9Y58Dw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.40.0/22
178.239.16.0/22
188.212.112.0/22
188.213.88.0/21
194.145.194.0/23
217.148.134.0/23
Signature Algorithm: sha256WithRSAEncryption
21:7b:a3:4f:32:2a:10:63:8e:a8:2b:74:d4:86:d4:7a:cc:cf:
de:4c:a9:26:ae:f9:4c:d8:d7:38:6d:57:d3:0d:a8:10:b5:81:
ac:ec:24:5c:22:8c:a0:d3:c9:7b:83:7c:e6:06:8e:26:26:21:
e6:9a:31:a2:30:95:f2:eb:7d:ad:e3:3e:14:ce:99:93:e0:91:
81:10:ca:67:9a:32:7e:1e:c8:16:13:c1:05:53:5f:77:18:ff:
2b:c3:da:1f:54:1e:db:e9:4c:f8:1e:30:87:52:f2:b4:30:c0:
db:e4:79:37:b8:f9:1a:b2:34:1f:78:ca:af:4e:17:4e:4f:29:
7d:97:1d:2f:3f:48:33:98:66:30:ae:c7:b8:c3:f4:d5:94:e0:
56:9c:c9:1e:8b:d1:8d:b6:43:1a:23:6c:66:8d:c1:e9:c8:ca:
97:12:1e:08:02:4b:bf:18:3e:be:91:6c:b9:b8:ef:13:71:72:
c3:c1:54:b0:b7:bf:c7:bd:e7:31:1f:78:56:9b:e5:57:7d:1a:
dd:74:62:41:db:8c:dd:1d:93:53:aa:d2:3a:3b:97:b7:a0:20:
71:61:57:a7:92:a4:f0:71:39:fa:8c:00:88:2b:c4:fd:b7:1e:
55:60:c3:d7:cb:28:84:2d:60:15:28:f0:fa:91:9a:1f:5b:1b:
b2:41:7e:d7
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZKRtjrZH1EQctw8mU+QLqvEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YmZjNDUxZmM0ZjI0MTFhZGRkMDBhOWZiYjE3MzQ2YWQ2
ZTg5OTYwHhcNMjQxMDE1MTk0NDUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTcwNmViNzU0OTBjM2Q3MDE4OTQxNTk4ZjJkYjE4M2Q2MzlmMDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0obtLD5ADyQQDas8pUfASbtm2/g2
UZ2cxAMlQOhp+aC1UL0lnIhUrGR0F9SphbPPxc0Vh0F1tOkZSsuDZisxPmgdSjBl
rDg9rMzo7RDSDmbLunR392CChPDG198+kHqoxqdOXiM/ERHsrWQDXN/Hol6aR6Di
VkWx470ZHVK7BTsNZ+kZP+rvrfN9QBihTro/TYntIPaXXqw0IW0UibN8Togcy80Z
r6NfCRAqVkWPgQYPwS56VEusRArEH5eskPonixecTBwdmQd1jS8+J1P98gEgx9ri
tLkah3znE67rzXKIBpUr0zYKVmUxhBW2h4xjzg3eYC5xOOE3Zl339u530QIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFAVwbrdUkMPXAYlBWY8tsYPWOfA8MB8GA1UdIwQY
MBaAFIS/xFH8TyQRrd0Aqfuxc0atbomWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaExfRVVmeFBKQkd0M1FDcC03RnpScTF1aVpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9iN2JlNjQtODZkNC00NDNiLTk2ODYt
ZjY2MzE3OTc3OTY4LzEvQlhCdXQxU1F3OWNCaVVGWmp5MnhnOVk1OER3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9iN2JlNjQtODZkNC00NDNiLTk2ODYtZjY2MzE3OTc3OTY4
LzEvaExfRVVmeFBKQkd0M1FDcC03RnpScTF1aVpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCW4QoAwQC
su8QAwQCvNRwAwQDvNVYAwQBwpHCAwQB2ZSGMA0GCSqGSIb3DQEBCwUAA4IBAQAh
e6NPMioQY46oK3TUhtR6zM/eTKkmrvlM2Nc4bVfTDagQtYGs7CRcIoyg08l7g3zm
Bo4mJiHmmjGiMJXy632t4z4UzpmT4JGBEMpnmjJ+HsgWE8EFU193GP8rw9ofVB7b
6Uz4HjCHUvK0MMDb5Hk3uPkasjQfeMqvThdOTyl9lx0vP0gzmGYwrse4w/TVlOBW
nMkei9GNtkMaI2xmjcHpyMqXEh4IAku/GD6+kWy5uO8TcXLDwVSwt7/HvecxH3hW
m+VXfRrddGJB24zdHZNTqtI6O5e3oCBxYVenkqTwcTn6jACIK8T9tx5VYMPXyyiE
LWAVKPD6kZofWxuyQX7X
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:18:18 2024 by rpki-client on console-ams.rpki-client.org