Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/bbf75d-c1dd-44b0-a5e0-cdcc704b38a7/1/bfs0vf2gwasBfA7Nf2n82bf3KQ4.roa
File: bfs0vf2gwasBfA7Nf2n82bf3KQ4.roa (raw, json)
Hash identifier: j7Cd+CwuajoYNk9ZCxoshK2+XaVjfYrbDoyFBRG+39s=
Subject key identifier: 6D:FB:34:BD:FD:A0:C1:AB:01:7C:0E:CD:7F:69:FC:D9:B7:F7:29:0E
Certificate issuer: /CN=2d0c21cffa80b5a1e5cbd631930e7fc55fddfc48
Certificate serial: 018CC501544940303F5B69EA2D204CA494EF
Authority key identifier: 2D:0C:21:CF:FA:80:B5:A1:E5:CB:D6:31:93:0E:7F:C5:5F:DD:FC:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/bbf75d-c1dd-44b0-a5e0-cdcc704b38a7/1/bfs0vf2gwasBfA7Nf2n82bf3KQ4.roa
Signing time: Mon 01 Jan 2024 12:30:47 +0000
ROA not before: Mon 01 Jan 2024 12:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209587
IP address blocks: 185.236.32.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/bbf75d-c1dd-44b0-a5e0-cdcc704b38a7/1/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/bbf75d-c1dd-44b0-a5e0-cdcc704b38a7/1/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:54:49:40:30:3f:5b:69:ea:2d:20:4c:a4:94:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d0c21cffa80b5a1e5cbd631930e7fc55fddfc48
Validity
Not Before: Jan 1 12:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6dfb34bdfda0c1ab017c0ecd7f69fcd9b7f7290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8f:3d:d4:2a:a6:96:cd:03:6e:2c:b2:2d:7e:
96:1f:54:8a:f9:1f:f9:48:c0:62:a6:6d:13:40:89:
78:ff:cb:0c:bb:a7:6f:ae:af:d8:87:d5:46:e8:51:
69:56:9d:17:bf:2b:fc:a0:d0:51:dd:ae:02:17:c8:
11:4b:95:e4:34:ed:13:ac:d2:bd:c4:44:e0:1b:0e:
7d:78:aa:7b:39:93:07:01:61:da:32:8f:6d:f3:4c:
ea:4b:ea:d2:fb:24:c1:03:7b:3e:f4:86:46:69:c8:
5b:5d:4a:1c:8e:a6:78:9b:e1:48:c4:69:0e:aa:05:
27:4b:27:17:58:c9:23:24:3a:ce:8f:61:39:ac:0b:
10:4e:1b:5c:46:79:2c:5c:38:4b:ee:6e:3f:4f:6d:
ea:e0:e3:99:81:74:74:59:5f:0a:bb:22:95:2d:32:
8e:16:9e:48:67:7d:9e:a7:2f:80:d2:87:07:55:8b:
56:e0:e9:89:82:1e:aa:6f:d7:88:39:a8:6a:e1:66:
4b:34:f0:a1:78:4f:13:5d:77:cf:90:3a:04:6f:a9:
5a:60:6b:d2:48:5d:d4:91:f4:4d:e7:4f:3b:e9:7b:
8f:fd:b3:c7:79:c3:7d:bc:e3:52:01:ee:b4:ac:15:
5b:2a:e6:6a:49:2d:50:a9:8d:e9:c4:0e:e0:23:51:
88:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:FB:34:BD:FD:A0:C1:AB:01:7C:0E:CD:7F:69:FC:D9:B7:F7:29:0E
X509v3 Authority Key Identifier:
keyid:2D:0C:21:CF:FA:80:B5:A1:E5:CB:D6:31:93:0E:7F:C5:5F:DD:FC:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bbf75d-c1dd-44b0-a5e0-cdcc704b38a7/1/bfs0vf2gwasBfA7Nf2n82bf3KQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bbf75d-c1dd-44b0-a5e0-cdcc704b38a7/1/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.32.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:15:33:61:b7:ab:de:fb:e9:2c:2b:a2:81:b4:ef:cf:34:b9:
08:3f:6c:71:cb:1c:c7:64:3f:cc:7b:71:af:19:bc:53:92:1f:
5a:c2:c8:d0:2d:b4:de:7c:31:7e:d5:ff:e0:b0:e8:3c:2f:c9:
cf:66:a3:71:65:41:5c:e0:c7:a6:3c:94:19:4c:5e:99:6f:2d:
48:7e:5c:8c:3c:2e:81:37:ad:fa:a6:68:e5:05:82:ad:eb:f5:
0d:35:f9:04:52:b1:5f:76:d2:34:03:75:37:db:e7:e0:4b:80:
98:11:63:a9:60:03:02:e2:04:a5:9d:49:6d:94:e3:d4:ec:c6:
96:35:4f:39:73:f5:84:53:63:aa:f7:73:c1:ec:f9:54:ba:e0:
74:96:f7:f1:45:35:21:bc:69:13:be:c9:36:a7:bb:ba:e8:0a:
07:6e:f0:f4:fc:09:1a:49:a4:3e:55:83:08:88:68:a4:da:09:
cf:4f:4f:84:ce:cf:2a:8a:3c:c5:b6:b3:23:ec:16:44:ec:85:
78:8a:9d:e6:b2:7b:d2:35:8d:2a:09:c6:e0:1e:cf:06:8c:30:
78:b7:60:41:3a:86:9f:3e:82:91:9d:9e:90:73:ba:a6:68:bd:
f1:8f:39:35:45:8d:0a:ac:82:42:2d:b1:8c:85:5d:87:e3:69:
34:2f:f8:0b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFAVRJQDA/W2nqLSBMpJTvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMGMyMWNmZmE4MGI1YTFlNWNiZDYzMTkzMGU3ZmM1NWZk
ZGZjNDgwHhcNMjQwMTAxMTIzMDQ3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZGZiMzRiZGZkYTBjMWFiMDE3YzBlY2Q3ZjY5ZmNkOWI3ZjcyOTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1o891Cqmls0DbiyyLX6WH1SK+R/5
SMBipm0TQIl4/8sMu6dvrq/Yh9VG6FFpVp0Xvyv8oNBR3a4CF8gRS5XkNO0TrNK9
xETgGw59eKp7OZMHAWHaMo9t80zqS+rS+yTBA3s+9IZGachbXUocjqZ4m+FIxGkO
qgUnSycXWMkjJDrOj2E5rAsQThtcRnksXDhL7m4/T23q4OOZgXR0WV8KuyKVLTKO
Fp5IZ32epy+A0ocHVYtW4OmJgh6qb9eIOahq4WZLNPCheE8TXXfPkDoEb6laYGvS
SF3UkfRN50876XuP/bPHecN9vONSAe60rBVbKuZqSS1QqY3pxA7gI1GI/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG37NL39oMGrAXwOzX9p/Nm39ykOMB8GA1UdIwQY
MBaAFC0MIc/6gLWh5cvWMZMOf8Vf3fxIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFF3aHpfcUF0YUhseTlZeGt3NV94Vl9kX0VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9iYmY3NWQtYzFkZC00NGIwLWE1ZTAt
Y2RjYzcwNGIzOGE3LzEvYmZzMHZmMmd3YXNCZkE3TmYybjgyYmYzS1E0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9iYmY3NWQtYzFkZC00NGIwLWE1ZTAtY2RjYzcwNGIzOGE3
LzEvTFF3aHpfcUF0YUhseTlZeGt3NV94Vl9kX0VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuewgMA0G
CSqGSIb3DQEBCwUAA4IBAQBeFTNht6ve++ksK6KBtO/PNLkIP2xxyxzHZD/Me3Gv
GbxTkh9awsjQLbTefDF+1f/gsOg8L8nPZqNxZUFc4MemPJQZTF6Zby1IflyMPC6B
N636pmjlBYKt6/UNNfkEUrFfdtI0A3U32+fgS4CYEWOpYAMC4gSlnUltlOPU7MaW
NU85c/WEU2Oq93PB7PlUuuB0lvfxRTUhvGkTvsk2p7u66AoHbvD0/AkaSaQ+VYMI
iGik2gnPT0+Ezs8qijzFtrMj7BZE7IV4ip3msnvSNY0qCcbgHs8GjDB4t2BBOoaf
PoKRnZ6Qc7qmaL3xjzk1RY0KrIJCLbGMhV2H42k0L/gL
-----END CERTIFICATE-----
Generated at Sat Jun 1 12:06:44 2024 by rpki-client on console-fra.rpki-client.org