Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/Bu7lq8FtXBJbQjVd2Wf7XIBZfqM.roa
File: Bu7lq8FtXBJbQjVd2Wf7XIBZfqM.roa (raw, json)
Hash identifier: LMUabBiuXnZuG3CS/xa+LvUg8/Y6y8ybNHdis+hWxK8=
Subject key identifier: 06:EE:E5:AB:C1:6D:5C:12:5B:42:35:5D:D9:67:FB:5C:80:59:7E:A3
Certificate issuer: /CN=bb7ccb1a6e3bcab6319d317f62c74bf1e1f41473
Certificate serial: 018D5FABEE51047471468438F6FCE31288E0
Authority key identifier: BB:7C:CB:1A:6E:3B:CA:B6:31:9D:31:7F:62:C7:4B:F1:E1:F4:14:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3zLGm47yrYxnTF_YsdL8eH0FHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/Bu7lq8FtXBJbQjVd2Wf7XIBZfqM.roa
Signing time: Wed 31 Jan 2024 13:18:39 +0000
ROA not before: Wed 31 Jan 2024 13:18:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49223
IP address blocks: 45.14.24.0/22 maxlen: 22
109.108.224.0/19 maxlen: 19
109.108.224.0/20 maxlen: 20
109.108.240.0/20 maxlen: 20
141.138.96.0/19 maxlen: 19
178.74.192.0/18 maxlen: 18
178.74.192.0/19 maxlen: 19
178.74.240.0/20 maxlen: 20
185.16.124.0/22 maxlen: 22
185.181.36.0/22 maxlen: 22
193.106.20.0/22 maxlen: 22
193.148.88.0/22 maxlen: 22
213.226.92.0/22 maxlen: 22
217.30.192.0/20 maxlen: 20
2a04:100::/29 maxlen: 29
2a04:100::/36 maxlen: 36
2a04:100:1000::/36 maxlen: 36
2a04:100:2000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3zLGm47yrYxnTF_YsdL8eH0FHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5f:ab:ee:51:04:74:71:46:84:38:f6:fc:e3:12:88:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb7ccb1a6e3bcab6319d317f62c74bf1e1f41473
Validity
Not Before: Jan 31 13:18:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=06eee5abc16d5c125b42355dd967fb5c80597ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:12:0e:1a:ab:f3:29:5b:d4:01:60:82:98:32:
77:df:75:9a:6f:f9:3b:23:2a:37:28:92:dd:ac:fb:
ae:49:03:07:51:db:40:72:8f:fc:15:0e:ac:b8:35:
36:84:1b:eb:36:b7:d6:fd:3d:7c:7e:c7:6c:77:1d:
ee:5f:02:e0:2e:1b:f1:9b:c4:33:62:5d:2d:5c:4e:
45:42:a3:fa:c8:71:4b:af:54:a8:64:71:97:71:18:
65:43:07:21:e2:8b:cf:a6:1d:8b:8d:a2:e4:57:05:
6c:7d:ac:06:6a:f3:ca:a8:f5:11:35:32:b4:a2:3c:
4f:ad:04:8c:b9:a2:87:a0:48:ae:6b:18:c5:cc:30:
45:d9:59:1e:f6:f8:b1:07:1b:26:93:f3:00:3d:36:
dd:c5:d6:b2:bd:92:d4:ba:8a:3f:4a:ea:2c:71:cd:
83:28:7c:f8:e0:52:6c:7f:f1:42:73:8f:2f:3e:e5:
cd:ab:6e:7c:35:4c:0d:e0:0f:9f:37:16:7a:0a:02:
a4:26:10:ec:7a:99:f1:1d:eb:3b:9e:3e:43:49:2e:
2f:ef:e4:b9:a8:31:54:35:0c:ce:e2:ab:c7:74:d6:
8e:65:06:be:04:43:e3:19:93:e3:e1:ba:df:b6:11:
67:2f:cc:8b:1b:fc:50:46:f3:6d:e8:68:52:1e:85:
63:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:EE:E5:AB:C1:6D:5C:12:5B:42:35:5D:D9:67:FB:5C:80:59:7E:A3
X509v3 Authority Key Identifier:
keyid:BB:7C:CB:1A:6E:3B:CA:B6:31:9D:31:7F:62:C7:4B:F1:E1:F4:14:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3zLGm47yrYxnTF_YsdL8eH0FHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/Bu7lq8FtXBJbQjVd2Wf7XIBZfqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.24.0/22
109.108.224.0/19
141.138.96.0/19
178.74.192.0/18
185.16.124.0/22
185.181.36.0/22
193.106.20.0/22
193.148.88.0/22
213.226.92.0/22
217.30.192.0/20
IPv6:
2a04:100::/29
Signature Algorithm: sha256WithRSAEncryption
95:ae:26:9f:17:a5:4d:ca:b5:15:c4:bb:0d:49:96:62:d4:f6:
68:50:91:9d:09:f4:0b:09:81:f4:63:a1:c8:bc:0c:91:28:e8:
57:1e:3a:39:fa:19:bc:2b:7d:c5:01:f5:26:7a:0b:87:d2:e9:
09:46:a1:92:3a:e1:0d:85:7c:88:37:87:a5:01:ad:f2:4f:1b:
df:b2:73:5e:3b:5f:64:2f:5e:62:ec:da:6e:84:ca:7f:69:0c:
d0:9c:ee:8b:b6:dd:a7:49:da:42:5f:9e:52:bb:2a:b9:0e:f5:
58:31:41:b4:d6:76:d3:66:db:23:14:5e:e1:f0:6d:58:ee:13:
09:d3:01:c4:5d:1f:e1:18:c8:93:1b:e1:5e:78:02:47:bc:d6:
ee:a4:b7:50:80:4f:61:d2:e1:30:ec:b5:31:47:76:b7:a2:4a:
3b:a3:24:c5:79:7b:55:b1:d3:09:0e:06:6c:0a:16:b2:01:e1:
7a:b7:88:9d:39:20:02:b7:4f:be:f8:c8:8d:1d:f5:bc:10:7f:
e3:de:da:a1:38:57:8f:4b:cf:0a:1a:61:6d:e3:dc:91:34:50:
10:9f:66:1b:82:a0:85:3f:8f:ea:53:61:e2:58:b1:a1:c8:e0:
ee:fb:40:a9:80:84:7b:53:79:d1:34:64:f6:05:85:1c:44:5c:
68:12:83:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 19:57:50 2024 by rpki-client on console-fra.rpki-client.org