Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/BLw3i85CYVgfTcuTkHzCAZRoSAE.roa
File: BLw3i85CYVgfTcuTkHzCAZRoSAE.roa (raw, json)
Hash identifier: HArbQPMd6Wu1WucM7piKjydLgEATkrrXiYMsnAxeDNg=
Subject key identifier: 04:BC:37:8B:CE:42:61:58:1F:4D:CB:93:90:7C:C2:01:94:68:48:01
Certificate issuer: /CN=aa8551e851e69db165c6c632af45f21715512939
Certificate serial: 018CC94CF6499656F435558CF9699400A9C6
Authority key identifier: AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/BLw3i85CYVgfTcuTkHzCAZRoSAE.roa
Signing time: Tue 02 Jan 2024 08:31:53 +0000
ROA not before: Tue 02 Jan 2024 08:31:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 176.221.80.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:f6:49:96:56:f4:35:55:8c:f9:69:94:00:a9:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa8551e851e69db165c6c632af45f21715512939
Validity
Not Before: Jan 2 08:31:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=04bc378bce4261581f4dcb93907cc20194684801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:41:78:3e:ce:8f:2b:d5:b5:a9:9b:2e:79:fb:
87:dc:80:4c:ce:fa:a8:2d:7f:6c:1c:cc:51:64:fe:
45:a6:43:09:74:1c:57:ee:15:50:1c:98:85:12:5b:
dd:12:a6:f7:9f:e3:3a:3b:ea:6d:3e:15:20:9e:9f:
6e:12:f3:67:19:bd:35:e4:c8:6a:7c:a4:eb:6b:14:
87:a8:ad:48:3f:5b:7e:bc:90:e5:7b:2c:97:d0:80:
f7:d4:49:9d:49:45:72:d8:ec:1a:da:85:47:81:a5:
49:39:55:22:b7:89:29:c6:a4:de:50:41:27:7f:4d:
0b:2e:4d:45:f2:49:ef:c2:2e:48:2b:60:a1:c3:f7:
ac:e2:aa:89:9d:16:a6:2c:8d:f5:49:56:8f:80:44:
08:17:c1:44:cc:b5:aa:ac:ac:22:50:4c:6c:34:da:
b8:07:aa:4c:d3:e2:a5:f3:89:76:e6:12:b8:0b:c7:
82:91:b9:97:aa:3f:67:7f:92:7e:f5:80:a0:4b:bc:
cc:1b:a7:5b:32:3c:5b:52:fc:5e:2a:40:dd:c4:87:
b5:b5:a6:a5:66:91:6b:d9:81:90:de:8b:83:49:72:
2f:87:54:bb:b3:73:a9:76:d5:0b:2c:ff:84:80:8a:
b1:26:1b:10:3d:be:ee:94:00:08:3c:18:cb:00:ec:
cc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BC:37:8B:CE:42:61:58:1F:4D:CB:93:90:7C:C2:01:94:68:48:01
X509v3 Authority Key Identifier:
keyid:AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/BLw3i85CYVgfTcuTkHzCAZRoSAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.221.80.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:b7:82:d1:43:41:72:6a:92:12:3e:23:7a:99:d8:cf:f6:fa:
d9:2c:36:2c:84:58:eb:53:54:29:3a:0c:b1:4f:21:e3:51:1a:
cf:48:32:28:0b:4c:99:04:68:3d:d3:09:88:20:fe:55:c2:75:
6d:c1:b5:0b:01:61:ea:ff:18:c8:db:c0:b9:0d:c7:0b:bd:d7:
03:34:8b:2a:da:ff:12:50:79:68:ff:41:05:86:9c:f0:1e:e7:
67:13:1a:b8:4d:1b:84:17:28:43:e7:a6:f9:ec:49:e3:28:2c:
bc:c9:e3:15:ed:7c:a6:b3:36:79:c2:27:32:a8:27:a0:17:69:
cc:e5:09:c8:2f:b6:86:53:ab:e9:7a:ae:b3:77:dc:7c:87:d1:
67:ac:99:4c:c9:2e:37:14:ae:48:63:c5:3a:d8:35:a1:e2:96:
62:35:be:08:4b:bd:9f:5e:7f:e9:f0:69:0c:59:a1:15:cc:ca:
04:8b:05:d5:71:83:32:a7:71:c9:a8:9e:6a:77:9e:6c:53:83:
dc:d0:28:47:ef:c0:7d:3d:d9:64:3d:20:c4:cf:d7:4f:5f:a6:
f0:a1:1f:22:21:c2:08:00:a0:ed:d5:bc:a4:c0:13:e5:71:10:
30:41:db:d9:b6:f0:28:7c:0f:c8:19:69:12:c8:93:4b:fc:96:
c6:a1:28:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:35:36 2024 by rpki-client on console-ams.rpki-client.org