Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/BmLRT8VCFTL7EByBWG3MxY6cefw.roa
File: BmLRT8VCFTL7EByBWG3MxY6cefw.roa (raw, json)
Hash identifier: wsKHUuO5u0Xw6h9XT5J6QsNfUtJ6T3wiGucZizMxQSU=
Subject key identifier: 06:62:D1:4F:C5:42:15:32:FB:10:1C:81:58:6D:CC:C5:8E:9C:79:FC
Certificate issuer: /CN=ff1ba40007ccdcd0930f1a2bdc4b02e29945767a
Certificate serial: 018CC64B7CF5FEB14868287CF0C395F2294B
Authority key identifier: FF:1B:A4:00:07:CC:DC:D0:93:0F:1A:2B:DC:4B:02:E2:99:45:76:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/BmLRT8VCFTL7EByBWG3MxY6cefw.roa
Signing time: Mon 01 Jan 2024 18:31:25 +0000
ROA not before: Mon 01 Jan 2024 18:31:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50300
IP address blocks: 185.104.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:7c:f5:fe:b1:48:68:28:7c:f0:c3:95:f2:29:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1ba40007ccdcd0930f1a2bdc4b02e29945767a
Validity
Not Before: Jan 1 18:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0662d14fc5421532fb101c81586dccc58e9c79fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:76:23:33:61:4b:11:f6:a5:99:98:47:db:a0:
ed:45:0d:6c:cd:60:e7:7b:7a:18:28:cc:8f:59:f4:
7d:e3:b4:f1:7b:5e:0e:e7:c4:e1:e0:a3:b2:f2:5b:
8c:ba:14:42:79:95:a1:91:ed:ee:38:c4:c9:3b:0a:
d1:db:67:6b:0a:a8:ce:bb:88:fc:96:4f:43:ba:70:
53:b6:56:23:25:93:28:2d:a9:0b:ef:e2:d1:1d:af:
96:a4:2a:26:b1:59:53:c8:23:40:d6:fe:bb:63:65:
3f:bf:91:8a:10:94:a6:4c:d7:b0:77:b2:db:64:82:
3d:98:f0:d3:33:bc:55:d3:e3:d7:72:49:04:74:86:
c0:d2:c7:25:9a:6d:75:7d:de:b9:fd:8d:ba:21:12:
99:67:a2:7a:ab:e1:90:65:e4:2e:08:1b:93:3d:c3:
62:82:35:1e:0e:ba:7b:b4:d9:d3:ca:2d:10:bf:8d:
56:c5:b5:13:60:12:16:8c:e9:fa:ff:1e:05:54:5c:
e2:e6:f2:a8:22:8a:a7:ea:7e:b5:7f:6b:e7:f3:68:
13:db:04:91:4d:93:eb:b9:d5:cd:d1:c7:6a:8d:2e:
cb:8d:f5:1d:4b:2a:7f:15:e6:38:cf:a2:78:de:04:
02:00:76:26:1d:a2:f9:ed:24:28:9a:af:43:71:93:
95:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:62:D1:4F:C5:42:15:32:FB:10:1C:81:58:6D:CC:C5:8E:9C:79:FC
X509v3 Authority Key Identifier:
keyid:FF:1B:A4:00:07:CC:DC:D0:93:0F:1A:2B:DC:4B:02:E2:99:45:76:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/BmLRT8VCFTL7EByBWG3MxY6cefw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.136.0/24
Signature Algorithm: sha256WithRSAEncryption
06:74:98:88:fe:b4:b2:18:46:f8:a2:5c:bd:48:95:81:9b:39:
3a:1c:8b:d2:1b:65:ba:ef:63:74:26:5a:73:cc:96:5a:41:5f:
5b:c8:92:6b:8f:b1:8c:c2:b2:7a:5e:8f:86:bb:6c:97:5a:ec:
c8:bc:7b:2b:a5:54:b1:58:d2:ca:f1:96:18:a4:6a:5a:a7:f0:
89:3d:67:b8:cb:d0:d2:fa:3a:bf:0a:9e:5b:0c:51:cb:8c:b9:
2b:ea:65:bc:eb:9b:3e:67:c1:b1:c1:16:79:c5:9d:60:58:5d:
17:9c:9c:c1:cc:71:f8:c8:8b:40:e9:3d:71:94:b2:60:6e:d7:
03:2f:28:d5:76:87:2f:57:72:ab:a6:ea:f1:06:1d:b4:45:64:
43:55:67:07:03:95:b1:3a:61:92:2f:ab:36:20:cc:ba:56:e8:
7d:34:27:91:4d:88:ab:6b:09:ee:c4:2a:e2:00:61:a0:ac:a5:
5b:a9:3c:fd:e7:55:26:f8:fb:a9:3e:eb:1c:68:61:cd:25:5b:
22:b3:d7:aa:89:fe:21:d3:9c:31:2f:b4:63:19:71:5b:6e:0f:
9a:83:68:75:1f:bf:16:ef:a6:04:3b:6d:fe:35:8d:5a:05:d3:
fd:33:2b:3b:82:d7:d1:3c:85:4f:e6:46:15:47:99:e5:41:45:
36:74:b4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:15:03 2024 by rpki-client on console-ams.rpki-client.org