Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/BQ1hGwQBqSTd8NJoub3HRH7en9A.roa
File: BQ1hGwQBqSTd8NJoub3HRH7en9A.roa (raw, json)
Hash identifier: gh91iBA7mMdChiyzJuTx1GllA3BhlkeHZaP3ssEigf0=
Subject key identifier: 05:0D:61:1B:04:01:A9:24:DD:F0:D2:68:B9:BD:C7:44:7E:DE:9F:D0
Certificate issuer: /CN=5316590a0eaf48df2b1ae23b9d559e9cac25997e
Certificate serial: 018CC725B96793663F7DACC36CAFB3FD49F3
Authority key identifier: 53:16:59:0A:0E:AF:48:DF:2B:1A:E2:3B:9D:55:9E:9C:AC:25:99:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/BQ1hGwQBqSTd8NJoub3HRH7en9A.roa
Signing time: Mon 01 Jan 2024 22:29:47 +0000
ROA not before: Mon 01 Jan 2024 22:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204521
IP address blocks: 185.168.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:b9:67:93:66:3f:7d:ac:c3:6c:af:b3:fd:49:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5316590a0eaf48df2b1ae23b9d559e9cac25997e
Validity
Not Before: Jan 1 22:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=050d611b0401a924ddf0d268b9bdc7447ede9fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6d:fe:0c:9b:54:8b:39:86:8a:13:0c:89:d8:
59:fd:2a:6f:ae:a5:d5:ff:0e:3d:0b:1c:fb:9a:e4:
9c:71:67:eb:cf:7d:f3:06:a4:f5:10:b9:a7:76:5e:
1c:f4:bb:0d:97:7f:66:05:ac:61:b4:5c:5e:18:a5:
32:26:4d:ae:8d:40:0b:60:e0:bf:a8:df:ee:9d:59:
fe:ac:cd:09:ce:92:1f:2d:d7:30:d8:05:d6:32:ae:
b7:5e:4d:b8:28:21:34:be:c0:1c:29:ae:9f:8a:29:
58:cf:ac:b6:10:c5:63:0e:85:52:1a:75:b8:51:c1:
58:79:e4:3e:9e:d4:ba:8d:07:ce:07:90:a2:f9:73:
79:21:9e:9a:4a:7b:da:fb:f2:60:69:3a:07:fb:00:
b3:f7:96:8b:f8:10:f5:a6:7c:30:32:2e:d9:46:2a:
c4:34:f3:71:a6:df:d9:79:41:db:59:3d:ed:16:59:
97:74:5f:5b:bc:17:d8:e6:48:dc:3e:3e:8a:20:92:
f6:33:f3:b9:52:b2:4c:41:d7:6e:22:54:27:3e:92:
80:e5:69:07:f4:60:a0:e1:bf:d4:c8:fa:7d:26:d9:
de:8f:ac:eb:be:61:38:ac:e4:e1:ef:01:92:9e:b5:
50:87:86:a3:8c:ff:2f:1d:16:d2:b3:6c:5c:16:cd:
a7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:0D:61:1B:04:01:A9:24:DD:F0:D2:68:B9:BD:C7:44:7E:DE:9F:D0
X509v3 Authority Key Identifier:
keyid:53:16:59:0A:0E:AF:48:DF:2B:1A:E2:3B:9D:55:9E:9C:AC:25:99:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/BQ1hGwQBqSTd8NJoub3HRH7en9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.216.0/24
Signature Algorithm: sha256WithRSAEncryption
79:8c:9e:b6:0e:cd:2d:6e:93:3b:01:a7:85:94:58:f0:84:64:
12:27:39:ea:40:c2:df:a1:9d:bb:1f:6f:4e:e9:e6:be:a9:95:
8a:9b:a9:91:08:89:db:0c:bf:77:0e:e7:2a:f1:21:82:30:e8:
47:40:24:4c:61:be:32:8f:e6:b3:4e:b6:17:76:23:6d:7d:28:
19:f3:55:61:95:58:a8:1f:a1:84:2f:58:37:02:0b:b7:dd:90:
cb:6d:be:42:f7:1f:31:38:7e:fb:b1:6c:6f:c7:47:e8:ed:ec:
d0:f9:d9:fb:c7:7f:5d:57:a6:d8:84:09:02:6f:c2:78:97:63:
21:cb:94:1d:37:92:6c:4e:0f:48:25:d8:c0:69:b0:58:eb:aa:
eb:92:da:d7:02:0f:f7:5e:07:6a:a3:5a:9c:36:5e:f9:4c:7f:
73:54:e0:b6:97:1a:f2:4c:1b:18:f1:55:05:3d:e0:25:14:20:
72:ca:a1:1e:a6:17:d0:9c:b8:77:ed:e5:69:25:fe:33:fd:e7:
53:b4:07:c1:25:ac:15:6c:ae:5a:f2:e4:b2:c6:52:28:f6:70:
2b:98:d1:db:1b:1a:b9:5f:c2:53:fe:3d:20:3c:a3:a0:f7:4d:
ad:e4:4f:be:1e:a1:cc:7c:ce:e6:82:76:ac:7f:b1:73:1a:73:
89:38:63:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 18:44:23 2024 by rpki-client on console-fra.rpki-client.org