Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/BhCocX_IjXgLW6fL4MUe8gUSpJU.roa
File: BhCocX_IjXgLW6fL4MUe8gUSpJU.roa (raw, json)
Hash identifier: kgICCPqZcCCqH0bioCsvySPWKRM6XNR5J43M3VzjqLc=
Subject key identifier: 06:10:A8:71:7F:C8:8D:78:0B:5B:A7:CB:E0:C5:1E:F2:05:12:A4:95
Certificate issuer: /CN=0e1f1f452ee6698e99dfcb4e3f5aeeb3bc250385
Certificate serial: 018CC26D4D2121023449F70BAB0616150CCE
Authority key identifier: 0E:1F:1F:45:2E:E6:69:8E:99:DF:CB:4E:3F:5A:EE:B3:BC:25:03:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/BhCocX_IjXgLW6fL4MUe8gUSpJU.roa
Signing time: Mon 01 Jan 2024 00:29:52 +0000
ROA not before: Mon 01 Jan 2024 00:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21441
IP address blocks: 193.109.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 19:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:4d:21:21:02:34:49:f7:0b:ab:06:16:15:0c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e1f1f452ee6698e99dfcb4e3f5aeeb3bc250385
Validity
Not Before: Jan 1 00:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0610a8717fc88d780b5ba7cbe0c51ef20512a495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7e:68:45:28:86:9f:16:5a:2d:ea:39:a3:4f:
df:c7:3b:06:88:06:f3:0e:e6:f7:7a:b2:c3:e7:15:
64:af:54:98:09:c8:de:61:ad:64:99:ad:c4:64:6c:
20:3d:7d:63:bf:7a:51:e0:48:9c:f6:2e:e8:ed:59:
f4:74:66:cb:c7:e8:d9:71:fe:8a:66:f1:2d:af:2f:
70:e1:d2:99:7c:82:bc:e9:b0:04:a8:13:0c:15:20:
d4:ad:4e:55:de:db:41:75:7f:53:24:1a:1d:2c:b3:
f7:61:0e:d8:ce:6e:8e:10:b8:c4:cf:f1:c6:fc:65:
7d:63:b6:3a:e4:04:f7:b9:6e:44:8f:8e:12:70:d5:
fa:57:f3:51:22:5b:9f:5d:40:e3:b9:d0:68:a3:a8:
3a:d8:1f:ad:ae:d6:e3:49:95:2a:98:bd:5a:78:a8:
0a:7a:11:b7:15:46:8c:7e:c7:84:45:3f:07:4a:53:
5f:1c:1c:32:51:95:0e:08:e9:48:7b:d9:41:95:5f:
ea:c8:6c:23:55:08:01:89:ed:40:44:b5:a4:cc:c6:
f7:8d:9b:64:df:46:80:58:a2:7c:da:21:bd:b6:29:
d4:d1:c6:9e:2a:33:5a:81:f4:82:0d:cb:3f:6b:41:
20:b4:6d:c8:a4:1c:40:22:61:ba:3d:2c:ef:d7:c6:
db:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:10:A8:71:7F:C8:8D:78:0B:5B:A7:CB:E0:C5:1E:F2:05:12:A4:95
X509v3 Authority Key Identifier:
keyid:0E:1F:1F:45:2E:E6:69:8E:99:DF:CB:4E:3F:5A:EE:B3:BC:25:03:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/BhCocX_IjXgLW6fL4MUe8gUSpJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.227.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:36:24:23:4b:99:c2:37:d8:bd:39:84:45:8b:82:84:c0:20:
91:9c:08:d6:52:bd:3b:6f:1d:87:e3:e8:d6:cb:e6:24:07:de:
6c:0c:3a:4a:24:93:53:90:3b:8a:e7:d8:55:0a:fc:8b:c1:3f:
21:f7:82:c1:c4:e5:52:7a:4b:86:ef:ea:db:aa:a5:63:e6:59:
59:bd:ae:4f:e0:a3:2b:98:ba:24:4c:12:b2:2d:7a:4d:9a:1b:
1b:05:d7:22:e6:2f:ef:e7:80:cc:4e:75:0d:57:5c:d8:3d:85:
95:24:86:0f:9a:84:fc:96:1b:27:57:59:55:e1:16:46:eb:b7:
12:20:e1:d4:48:98:43:28:5b:7e:8c:2c:d6:1c:a1:8c:7d:2a:
8b:e8:66:4f:ec:1b:cb:1d:30:32:da:8b:9e:a3:3c:1e:67:a3:
39:0a:59:dc:ca:6f:44:a9:25:24:2a:18:72:29:d5:c2:7a:cc:
a5:d9:7d:94:ff:c7:49:e1:f6:2e:e8:2c:38:77:65:d5:8c:cd:
a2:fe:c4:82:78:9d:a6:29:7b:8b:9d:ff:0c:02:26:36:43:f9:
fb:35:82:25:38:ce:d2:23:02:26:cb:ce:41:df:37:bd:16:4f:
50:0b:b1:f9:c5:35:7e:89:5d:b3:6a:ac:32:78:24:10:1a:17:
11:87:53:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:35:28 2024 by rpki-client on console-ams.rpki-client.org