Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/bFzBt3LZ80FfKNfXUpMw5cNnMwM.roa
File: bFzBt3LZ80FfKNfXUpMw5cNnMwM.roa (raw, json)
Hash identifier: j8NJnTmINcuo4gDUj4sODTUloXXVoA+EGpgRWrrm5/c=
Subject key identifier: 6C:5C:C1:B7:72:D9:F3:41:5F:28:D7:D7:52:93:30:E5:C3:67:33:03
Certificate issuer: /CN=7755cd8be71e29e72d9690c7cd4087b5f26116f0
Certificate serial: 018CC5DC66F3ADD413FE4C8ECAFA9C58265C
Authority key identifier: 77:55:CD:8B:E7:1E:29:E7:2D:96:90:C7:CD:40:87:B5:F2:61:16:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d1XNi-ceKectlpDHzUCHtfJhFvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/bFzBt3LZ80FfKNfXUpMw5cNnMwM.roa
Signing time: Mon 01 Jan 2024 16:30:04 +0000
ROA not before: Mon 01 Jan 2024 16:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2611
IP address blocks: 193.53.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/d1XNi-ceKectlpDHzUCHtfJhFvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:66:f3:ad:d4:13:fe:4c:8e:ca:fa:9c:58:26:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7755cd8be71e29e72d9690c7cd4087b5f26116f0
Validity
Not Before: Jan 1 16:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c5cc1b772d9f3415f28d7d7529330e5c3673303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:29:1a:bb:66:54:16:4a:c4:7f:07:5c:7e:7c:
88:63:fa:4c:ea:60:a2:46:be:88:71:56:40:3a:31:
f7:2e:ee:d6:c4:b0:44:df:b5:c0:e8:84:ea:58:9d:
03:50:68:17:fd:d8:2c:eb:e6:18:dd:28:4a:65:6b:
3e:a2:c0:9b:53:8e:cc:dc:ca:97:80:7e:1f:a1:96:
0f:0e:71:2f:75:25:a7:8e:98:f1:2c:54:4c:19:e4:
24:8c:c7:b3:57:4c:dd:96:71:6e:63:26:27:89:6a:
6b:09:d5:25:c9:52:13:4e:86:fa:fd:f0:d8:68:41:
0a:11:00:b4:5c:80:92:bd:81:8a:15:77:ed:b9:7c:
7c:46:47:74:5e:56:b7:69:6f:4c:dd:e1:a5:14:53:
bb:77:90:e0:54:9d:0d:fa:b4:dc:37:b6:45:48:6b:
b8:aa:66:2b:85:d0:e7:4b:97:46:52:21:4d:00:1a:
24:9d:24:8a:cd:6f:7f:ae:48:b4:61:8b:08:b1:1c:
12:fe:2f:d4:f1:76:0e:cd:e7:d7:8f:05:62:ba:86:
de:d7:0a:0a:ec:f9:b4:7b:93:26:72:7c:98:80:ab:
72:34:93:f2:05:cb:9a:77:06:06:e4:8f:76:46:ff:
c8:c4:b6:95:4a:e8:83:30:59:a6:4b:2d:8b:bd:42:
ad:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5C:C1:B7:72:D9:F3:41:5F:28:D7:D7:52:93:30:E5:C3:67:33:03
X509v3 Authority Key Identifier:
keyid:77:55:CD:8B:E7:1E:29:E7:2D:96:90:C7:CD:40:87:B5:F2:61:16:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1XNi-ceKectlpDHzUCHtfJhFvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/bFzBt3LZ80FfKNfXUpMw5cNnMwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.53.125.0/24
Signature Algorithm: sha256WithRSAEncryption
95:c1:89:08:b8:8c:9b:25:4e:45:42:27:03:e1:4c:0f:cf:ea:
db:64:78:5c:7b:5a:58:6d:a7:b9:fa:fe:06:9f:bc:c5:bb:be:
ef:8e:07:1d:e6:c5:d3:26:8c:ae:f0:41:2a:b1:e2:ed:f0:0b:
5b:56:e9:b4:77:ec:3e:b0:d7:39:9f:80:c7:37:af:0b:7d:47:
eb:e5:a6:d4:d5:9c:9a:42:b5:6a:25:3a:de:48:3f:f3:02:a1:
48:f7:f7:5b:5b:15:b0:bd:2a:39:0f:c4:d9:0e:a0:c9:a5:0f:
b2:7f:2f:0a:4f:74:17:ef:4b:4e:21:f4:40:c4:45:cc:a4:6f:
dc:ca:8c:51:8e:30:ec:79:71:bd:6b:55:61:d5:a6:3a:8c:03:
9e:d4:3f:97:94:bf:99:b6:5e:32:d3:1f:75:fb:fd:af:39:38:
1f:16:bc:aa:18:c7:15:0b:0d:69:cb:95:a1:be:89:bb:50:ad:
87:df:3b:9a:72:98:fe:bd:3a:c0:fc:21:2e:f2:c7:09:97:c3:
5c:50:ba:91:f9:20:2d:bc:1d:9f:bf:69:eb:69:d5:de:f2:23:
fb:6a:26:53:5c:83:c0:0c:7c:ba:77:d7:df:54:4a:9a:28:bc:
b9:0a:81:3a:fb:6e:5c:6e:13:05:82:d5:68:99:2e:20:33:3e:
f3:96:5f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:04:53 2024 by rpki-client on console-ams.rpki-client.org