Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/BBz67raMrdT7XhdcuRJwXlUqfPA.roa
File: BBz67raMrdT7XhdcuRJwXlUqfPA.roa (raw, json)
Hash identifier: HY49v83zyjDBoWlPIrlkkhtMr3UpBUd8mi2uUCZdrWs=
Subject key identifier: 04:1C:FA:EE:B6:8C:AD:D4:FB:5E:17:5C:B9:12:70:5E:55:2A:7C:F0
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 018CC26D536F75E68810ACF606B1E97A5F6A
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/BBz67raMrdT7XhdcuRJwXlUqfPA.roa
Signing time: Mon 01 Jan 2024 00:29:53 +0000
ROA not before: Mon 01 Jan 2024 00:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34577
IP address blocks: 213.16.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:53:6f:75:e6:88:10:ac:f6:06:b1:e9:7a:5f:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 00:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=041cfaeeb68cadd4fb5e175cb912705e552a7cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:09:86:14:ed:1d:0d:de:35:06:e3:ef:1b:ff:
0e:f2:2d:55:4c:5c:75:17:e3:a1:e8:96:c3:e9:28:
d8:09:e5:33:24:f1:cb:3f:e1:bd:e7:27:96:0a:3f:
6d:de:91:fa:1a:4c:e9:f4:db:e1:cd:f7:e6:49:29:
49:6e:d9:4f:f0:19:b2:0e:49:3d:26:b0:90:76:2c:
46:5b:05:8b:7c:cb:94:69:72:62:d6:b6:79:1d:e7:
a4:8a:f7:33:35:66:a0:f0:52:5f:32:a1:6c:5f:de:
53:a9:a9:fb:08:96:85:ed:ea:a9:a0:de:b0:14:9c:
fe:85:d5:c6:56:4a:ca:42:78:ec:1d:60:36:d6:fa:
2b:d8:b5:ad:df:fa:2d:51:4d:40:94:48:08:24:e5:
73:45:f5:d7:a3:b7:97:ad:86:38:06:80:ec:39:53:
76:f2:56:60:b6:da:73:48:00:20:8b:e3:83:fa:99:
a4:73:e3:ee:74:86:c4:8c:65:e6:62:62:3c:ac:70:
17:b7:6a:ab:80:4b:9d:7e:26:6f:06:e9:6b:cb:43:
46:20:18:d7:33:73:9d:31:25:4c:ad:dd:d7:c6:80:
af:4d:1b:ef:cb:71:fb:ad:c3:9c:58:e7:80:b8:cd:
c6:89:25:9c:02:06:3c:1b:21:11:15:53:42:c2:56:
f4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:1C:FA:EE:B6:8C:AD:D4:FB:5E:17:5C:B9:12:70:5E:55:2A:7C:F0
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/BBz67raMrdT7XhdcuRJwXlUqfPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.16.56.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:b5:7d:94:cc:23:cc:68:cd:13:ed:2b:fe:e1:0a:80:87:bb:
2e:41:a4:9c:59:97:9a:3f:1f:bb:fd:2c:b0:59:ad:73:d3:0a:
de:28:86:f5:04:bd:23:71:83:38:6e:29:de:14:17:c4:93:29:
f8:57:41:97:7d:49:89:a4:31:ad:21:16:17:bd:9d:13:e6:7a:
81:3c:a0:60:85:02:06:40:5a:d2:1a:b8:ac:a7:fb:61:ac:29:
25:49:30:a7:16:29:bb:60:c9:f1:14:41:6e:bc:f4:ae:41:f3:
fd:66:08:7d:f8:f5:76:3e:4c:6a:2f:28:1f:40:5c:b9:83:58:
ca:8c:ac:22:de:32:12:7d:0a:2d:06:2b:59:5b:1f:5d:d2:88:
55:12:e9:ea:b5:d4:13:8c:04:a0:88:ec:cb:47:3b:d6:be:12:
e4:e1:01:ce:a4:13:57:80:cf:9a:7a:f9:c0:f7:46:5e:c8:b6:
78:75:7a:30:3f:2c:40:59:8c:0e:bf:c2:2e:08:3e:69:b7:bd:
cd:f7:7f:3f:ec:56:c3:5b:06:89:50:05:18:cd:f6:21:c4:20:
2d:9b:e7:d5:c8:ca:7e:37:c2:af:28:0c:7a:b9:ad:33:69:be:
68:15:f8:cc:fa:8e:29:c6:49:41:c4:7e:61:af:c3:05:2b:af:
cc:3b:f4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 17:17:05 2024 by rpki-client on console-fra.rpki-client.org