Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/Bv849iw_R_pblvRVKbY6sHjRha8.roa
File: Bv849iw_R_pblvRVKbY6sHjRha8.roa (raw, json)
Hash identifier: +7T6N47Ty3NqwI6hqq3uTmB+LorAcjlNt83OURKFjDM=
Subject key identifier: 06:FF:38:F6:2C:3F:47:FA:5B:96:F4:55:29:B6:3A:B0:78:D1:85:AF
Certificate issuer: /CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Certificate serial: 018CC8DF1E22A746F818B1F1808EF735B145
Authority key identifier: B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/Bv849iw_R_pblvRVKbY6sHjRha8.roa
Signing time: Tue 02 Jan 2024 06:31:54 +0000
ROA not before: Tue 02 Jan 2024 06:31:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44547
IP address blocks: 93.177.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 May 2024 07:47:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:1e:22:a7:46:f8:18:b1:f1:80:8e:f7:35:b1:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Validity
Not Before: Jan 2 06:31:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=06ff38f62c3f47fa5b96f45529b63ab078d185af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:82:e2:ba:c5:54:fe:b6:42:ef:12:bf:8d:49:
42:77:4c:d1:37:1f:96:d0:cc:39:51:01:59:6a:d6:
4e:11:06:38:46:cb:be:f8:24:7c:d0:93:3e:58:5b:
07:d9:ac:0f:b1:45:dc:fe:bd:18:b2:15:80:94:fd:
02:e2:4d:0f:ee:d4:55:ed:f0:04:21:0f:ae:c6:ea:
1e:6d:25:8f:d7:37:e8:af:2c:28:24:33:be:76:49:
59:77:7f:41:69:79:80:ec:68:77:f4:3e:c4:14:83:
c4:bb:00:29:a6:a3:95:98:6d:0b:59:37:8f:02:18:
d2:0b:b3:f1:b6:d8:88:ad:2d:46:0f:38:97:d0:e4:
fd:4a:17:b5:ff:2f:ba:ca:4f:20:ad:f3:29:4e:3d:
36:14:0c:b2:53:ed:45:9a:94:2f:b6:36:16:0c:4c:
f5:82:0b:7f:09:92:24:bf:3e:52:cf:01:53:45:d2:
77:19:d2:e3:f1:7a:13:06:02:5e:c7:72:43:08:e8:
90:22:e3:3a:76:1c:a5:2a:65:99:88:5d:86:53:58:
83:ff:00:32:85:ab:cc:d0:b9:cb:34:64:1c:54:dd:
8c:2c:62:d9:06:fd:43:96:64:69:52:0d:9c:6d:02:
24:c6:a1:83:78:68:40:74:ca:04:e9:93:89:31:67:
3c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FF:38:F6:2C:3F:47:FA:5B:96:F4:55:29:B6:3A:B0:78:D1:85:AF
X509v3 Authority Key Identifier:
keyid:B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/Bv849iw_R_pblvRVKbY6sHjRha8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.100.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:c3:df:55:9c:dd:0e:f9:2c:c8:42:98:43:59:be:8f:b2:13:
a7:51:c2:29:cd:e7:d2:b8:4c:a9:7a:10:a3:2a:cd:b4:65:6f:
ad:72:92:65:24:2f:89:b9:23:8c:d8:92:d8:03:e1:e2:1c:cf:
d4:a0:f4:42:1e:e1:43:75:68:58:62:21:e4:ce:c4:63:45:7f:
52:27:c4:09:f6:2d:7a:4f:1d:2a:68:62:86:9f:0f:89:de:f4:
e6:86:26:a7:5b:c1:1e:5d:8d:60:b4:33:d9:02:27:b9:1d:5f:
36:8f:42:3b:7a:45:73:34:44:67:b5:ee:6e:8b:be:a8:0c:13:
23:19:0a:ea:96:2e:5d:0f:30:7c:70:1e:25:f9:9c:85:3a:85:
91:dc:82:a6:ae:ec:c2:e2:ed:43:e3:e9:69:5f:77:1a:ad:c2:
7d:f6:a3:3b:26:32:85:27:8b:e8:b2:68:b1:bc:2b:0b:b3:cb:
84:0d:81:b3:64:5c:75:1b:f2:4d:a8:fc:f2:58:77:a1:9a:50:
f3:c3:12:3f:41:d3:bc:2e:de:5f:e1:80:f0:d5:b3:2f:4b:13:
56:4c:92:62:17:d8:19:e0:80:de:dc:b1:09:79:7b:92:d2:de:
81:87:38:3b:37:6d:2b:cc:29:2b:d2:36:24:11:c6:8b:11:18:
cd:7d:22:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 10:05:27 2024 by rpki-client on console-fra.rpki-client.org