Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/BzuDQI2GXbkx15oIe2OIh2czTko.roa
File: BzuDQI2GXbkx15oIe2OIh2czTko.roa (raw, json)
Hash identifier: QaDa8I82qEpPXpwXoydBAoEkA0b5ds3rGsF2hWPTGH4=
Subject key identifier: 07:3B:83:40:8D:86:5D:B9:31:D7:9A:08:7B:63:88:87:67:33:4E:4A
Certificate issuer: /CN=9fac2fdddabf20ea449870e1dcc0915e60148346
Certificate serial: 018CC425504372A1A0B89BC16A6B64BD8337
Authority key identifier: 9F:AC:2F:DD:DA:BF:20:EA:44:98:70:E1:DC:C0:91:5E:60:14:83:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/BzuDQI2GXbkx15oIe2OIh2czTko.roa
Signing time: Mon 01 Jan 2024 08:30:28 +0000
ROA not before: Mon 01 Jan 2024 08:30:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24634
IP address blocks: 77.246.64.0/20 maxlen: 24
92.242.168.0/22 maxlen: 24
2a0d:b340::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:50:43:72:a1:a0:b8:9b:c1:6a:6b:64:bd:83:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fac2fdddabf20ea449870e1dcc0915e60148346
Validity
Not Before: Jan 1 08:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=073b83408d865db931d79a087b63888767334e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fe:ad:3d:15:22:de:03:c1:06:81:38:b5:26:
53:4f:c0:59:44:bd:e5:e0:21:43:f1:e4:e8:b2:ee:
99:3f:f6:8c:cb:86:5b:eb:72:fa:0b:4a:93:fc:42:
4c:fa:02:e2:97:6c:42:c6:1e:3c:43:7b:90:66:6c:
62:c1:87:31:a3:cc:76:83:fd:c0:de:9e:ef:45:4f:
d4:44:00:33:57:b1:c9:00:0c:42:82:0f:e0:47:70:
f0:c0:a8:61:6c:04:9b:8c:52:b9:90:7c:2d:83:b4:
58:dd:0b:6a:0f:10:6a:ca:60:93:8d:e6:e7:0f:28:
67:cf:46:d6:b4:fa:4a:3f:90:78:7d:18:ee:da:2f:
54:44:ba:f8:08:35:4c:5c:4a:33:0f:e9:ed:f2:8b:
16:a4:89:4e:0d:21:42:0f:49:33:25:ef:f0:ef:75:
26:57:78:d7:16:03:8f:f2:fb:26:79:7d:66:d0:40:
53:92:ce:d0:7a:cc:db:7d:5b:bd:18:f0:54:58:dd:
c0:27:db:5d:52:f9:82:f7:5b:98:42:0b:5c:3f:7c:
4b:73:3c:b6:60:d4:d2:46:58:3c:26:2c:6a:5c:75:
d6:af:f4:87:20:73:67:1d:55:a0:14:05:54:06:c8:
97:9c:73:b5:d4:c2:1a:86:5e:55:90:da:fb:bb:71:
73:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:3B:83:40:8D:86:5D:B9:31:D7:9A:08:7B:63:88:87:67:33:4E:4A
X509v3 Authority Key Identifier:
keyid:9F:AC:2F:DD:DA:BF:20:EA:44:98:70:E1:DC:C0:91:5E:60:14:83:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/BzuDQI2GXbkx15oIe2OIh2czTko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.64.0/20
92.242.168.0/22
IPv6:
2a0d:b340::/29
Signature Algorithm: sha256WithRSAEncryption
06:de:5f:d3:be:f0:c6:2c:88:32:8c:72:56:39:49:00:f1:ab:
d6:ef:03:94:21:b7:d6:36:f2:bc:a7:6d:a0:03:d0:fc:52:96:
59:86:ce:80:f9:69:ec:d7:36:55:eb:15:92:47:69:da:be:9e:
71:46:86:46:e5:08:56:25:67:a1:75:a6:ae:29:7a:74:ef:82:
90:cf:b6:fc:ef:7b:f8:9b:89:00:eb:2f:6f:ff:a9:7e:e2:b5:
ea:9a:ac:7f:fc:0d:3c:24:0d:6e:48:41:2a:fe:b1:4c:cc:60:
6d:2d:89:a6:6a:52:cd:4d:2e:63:f6:9a:86:55:10:5b:b9:ff:
e2:1f:a2:28:9b:ec:5a:21:3a:58:a9:5b:45:2c:83:c7:43:81:
d2:17:95:84:4e:5e:a2:e8:4b:32:ad:98:cc:32:45:38:1c:44:
af:c4:2b:50:98:7e:73:2c:37:e2:29:c8:b6:02:5d:6d:5b:7e:
95:35:54:bf:79:6b:a0:b4:df:3f:9e:f2:2b:05:f4:66:25:da:
55:e9:ee:13:da:16:b1:57:3b:e1:ba:94:bb:5b:56:8f:07:ea:
90:ac:d0:7f:74:98:10:1e:50:d1:63:61:ea:33:e0:f8:21:28:
7a:c0:81:59:90:d4:d3:f5:89:c6:ec:e0:4e:a5:7c:75:5f:6e:
fb:92:2d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 20:00:10 2024 by rpki-client on console-ams.rpki-client.org