Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/BVk62MK_Ubom6lO-Aq1tQzfb_hM.roa
File: BVk62MK_Ubom6lO-Aq1tQzfb_hM.roa (raw, json)
Hash identifier: C9CwbREN0Y7IUB1hTB/TOwPbf39twwYcCoTBQQifFDc=
Subject key identifier: 05:59:3A:D8:C2:BF:51:BA:26:EA:53:BE:02:AD:6D:43:37:DB:FE:13
Certificate issuer: /CN=16a4e10723351270cd8c9cc64b096488e64e230e
Certificate serial: 018CC9BCE60FE70317558D52BBD88A5C5DD9
Authority key identifier: 16:A4:E1:07:23:35:12:70:CD:8C:9C:C6:4B:09:64:88:E6:4E:23:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqThByM1EnDNjJzGSwlkiOZOIw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/BVk62MK_Ubom6lO-Aq1tQzfb_hM.roa
Signing time: Tue 02 Jan 2024 10:34:09 +0000
ROA not before: Tue 02 Jan 2024 10:34:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12843
IP address blocks: 194.45.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FqThByM1EnDNjJzGSwlkiOZOIw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:e6:0f:e7:03:17:55:8d:52:bb:d8:8a:5c:5d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16a4e10723351270cd8c9cc64b096488e64e230e
Validity
Not Before: Jan 2 10:34:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05593ad8c2bf51ba26ea53be02ad6d4337dbfe13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6a:43:ac:f6:7d:07:09:ba:7c:55:f0:8f:d4:
8e:b6:d4:b6:c5:a5:b5:e0:3c:dc:42:75:9f:d8:a9:
93:01:7f:1c:05:9d:48:fd:17:d9:32:59:c6:46:70:
28:63:aa:c8:74:2b:be:7b:18:26:fe:57:48:77:27:
5c:f4:e5:69:0f:73:b3:a9:dd:1f:5b:b2:88:31:40:
9f:1c:60:03:5f:13:a9:a7:30:60:56:d0:84:5e:f1:
77:c3:d3:86:34:7b:05:08:1e:56:70:60:76:86:13:
f5:a4:66:50:f9:89:54:d8:ca:d7:3e:28:10:3d:96:
d3:97:84:2b:26:66:41:74:07:1e:fa:c9:a5:04:63:
2f:e9:96:b4:7a:31:1f:50:63:45:21:b0:bb:d4:6c:
b2:86:7c:1b:1c:51:d7:b6:58:f9:97:e6:71:95:ce:
7a:1c:8b:ec:23:21:08:66:ce:6e:9a:02:b6:eb:0c:
3a:9e:98:a0:a3:be:40:02:31:7a:3a:82:99:30:f7:
af:0d:1e:d1:b5:c9:e4:af:4a:16:3f:b0:6b:db:60:
d4:65:cb:e0:e0:13:97:0a:aa:f1:98:18:9e:f2:70:
60:c5:ec:f4:0c:7e:72:27:e3:11:27:69:a7:28:b8:
41:8a:85:d7:4a:24:18:9b:0c:b8:5c:a0:1d:d8:eb:
de:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:59:3A:D8:C2:BF:51:BA:26:EA:53:BE:02:AD:6D:43:37:DB:FE:13
X509v3 Authority Key Identifier:
keyid:16:A4:E1:07:23:35:12:70:CD:8C:9C:C6:4B:09:64:88:E6:4E:23:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqThByM1EnDNjJzGSwlkiOZOIw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/BVk62MK_Ubom6lO-Aq1tQzfb_hM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.45.103.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:04:0d:61:e2:da:ca:53:4c:a9:a1:73:1b:ea:87:e8:f2:b2:
9e:69:3b:d8:85:83:65:6c:8d:40:b7:22:d3:4a:22:c5:ab:60:
78:84:28:ce:34:b5:cf:d5:d3:71:fd:ff:b5:8e:88:c7:11:b2:
dc:25:c6:c9:6f:7c:0d:17:91:41:3d:e4:5b:8d:34:b6:bb:f4:
85:ef:09:1e:fe:bb:07:ca:4c:af:ae:8f:ed:07:e2:9b:4b:b8:
85:0d:49:75:3c:58:11:c9:d3:1f:96:bc:9b:a7:15:2e:00:8f:
f3:22:7e:56:3d:3d:67:79:d8:c2:32:76:89:35:cd:d1:a4:6f:
6a:69:7e:06:62:c1:75:6d:dc:18:f9:60:08:e1:ba:3a:5e:ec:
39:ab:f1:58:ee:d7:91:74:9d:1b:9b:45:be:c3:12:22:fd:1e:
7e:66:cf:26:4e:2e:c3:8d:18:6c:0d:ea:8e:bb:28:7e:34:e4:
d0:a9:f7:e5:b8:a2:1f:7b:a5:77:02:c7:30:0a:ac:50:18:5d:
c1:ae:d9:7f:1f:b9:ff:c2:4c:4a:03:50:17:6f:58:ab:c4:d3:
f3:59:90:33:47:97:63:ce:8e:6d:bd:4f:f3:c4:3e:da:64:25:
de:8c:eb:a1:c5:97:b1:37:2f:d8:f0:dd:42:a9:bd:d3:e5:59:
5a:b3:8d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:51:11 2024 by rpki-client on console-fra.rpki-client.org