Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/bS8bWsZNbZ1qFbJkZVPMVqxQ8uU.roa
File: bS8bWsZNbZ1qFbJkZVPMVqxQ8uU.roa (raw, json)
Hash identifier: lZgcr2hmkJZCBooezK9SAe0hg5cujTShndWoLG1FSDo=
Subject key identifier: 6D:2F:1B:5A:C6:4D:6D:9D:6A:15:B2:64:65:53:CC:56:AC:50:F2:E5
Certificate issuer: /CN=b93a51da2053044f96262f637d0c9cc05d730041
Certificate serial: 018CC5DCA20340425849B6DC42C6BAF970E4
Authority key identifier: B9:3A:51:DA:20:53:04:4F:96:26:2F:63:7D:0C:9C:C0:5D:73:00:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/bS8bWsZNbZ1qFbJkZVPMVqxQ8uU.roa
Signing time: Mon 01 Jan 2024 16:30:20 +0000
ROA not before: Mon 01 Jan 2024 16:30:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47377
IP address blocks: 85.94.226.0/23 maxlen: 23
85.94.224.0/19 maxlen: 24
85.94.228.0/23 maxlen: 23
85.94.230.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Jun 2024 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:a2:03:40:42:58:49:b6:dc:42:c6:ba:f9:70:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93a51da2053044f96262f637d0c9cc05d730041
Validity
Not Before: Jan 1 16:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d2f1b5ac64d6d9d6a15b2646553cc56ac50f2e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:41:c2:39:59:be:c7:df:21:d0:11:71:6e:34:
16:46:fc:fb:ec:11:40:7a:0e:c4:aa:c7:60:f9:25:
c0:df:ca:ac:57:84:78:42:52:ba:50:73:63:3a:9e:
10:ad:cf:fc:28:36:88:e1:2a:b8:76:52:24:a1:d0:
be:a1:20:61:3d:55:a0:f3:77:13:f7:e9:e4:3a:cc:
93:fd:5b:6d:e3:bd:d4:da:27:84:a9:51:56:28:bb:
cd:1b:d8:91:05:a3:21:bd:a7:02:05:7c:8c:da:04:
71:2a:4e:5b:b6:92:92:1d:42:6c:66:ea:ee:27:3e:
b0:75:08:43:a3:b3:2f:58:2b:d5:44:93:0e:14:cc:
ec:d3:16:85:44:32:c5:13:db:d0:e5:27:64:3a:15:
49:0c:11:54:a0:56:6f:2c:af:89:03:4f:fb:79:0b:
12:23:8e:6e:4e:c3:68:d5:5e:62:54:da:2e:de:49:
e5:af:c8:8c:ec:12:b5:04:d5:0c:6e:4d:79:fb:ad:
97:0f:d3:53:4b:b2:a0:32:6f:d2:a4:fe:2d:67:13:
f3:27:75:d0:c2:7d:a0:39:4d:45:94:18:59:5b:46:
78:ec:7b:96:67:54:06:76:41:df:dd:d3:ec:33:43:
10:d5:6b:8d:2b:f7:98:d3:30:9f:36:11:bb:81:0f:
1a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:2F:1B:5A:C6:4D:6D:9D:6A:15:B2:64:65:53:CC:56:AC:50:F2:E5
X509v3 Authority Key Identifier:
keyid:B9:3A:51:DA:20:53:04:4F:96:26:2F:63:7D:0C:9C:C0:5D:73:00:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/bS8bWsZNbZ1qFbJkZVPMVqxQ8uU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.94.224.0/19
Signature Algorithm: sha256WithRSAEncryption
8e:a6:0d:20:66:4f:56:b9:89:17:8c:15:a6:43:6b:79:8e:bc:
b1:6e:01:42:c7:18:af:b9:69:8f:86:f7:71:f6:45:03:2c:22:
7d:e0:ba:08:4a:7a:9a:9c:c4:44:8b:91:cb:9f:63:30:8d:15:
12:01:56:c5:93:d0:fe:3b:95:11:e5:0e:e9:5e:89:88:68:2d:
ef:c9:80:63:c9:3a:b6:18:48:b8:e3:ab:5c:b1:88:d8:49:95:
52:93:7a:15:e0:50:19:83:ba:3d:fe:a6:c2:28:56:cd:21:44:
f0:fd:9b:f8:17:57:5d:bb:36:4e:8b:24:c1:b0:62:b4:a1:da:
9d:66:d9:57:7b:dc:00:42:d6:8e:3c:65:9f:dc:a4:a8:16:25:
a9:4a:4a:b9:f4:9c:03:43:1b:5f:cf:f9:aa:40:ba:05:68:69:
98:69:ce:3a:65:0e:00:83:d8:65:6d:b0:2f:92:7f:85:34:66:
38:50:e2:53:f3:ef:c1:da:15:cc:28:e0:c2:f5:4b:a3:5d:b5:
a7:d0:49:e5:2f:2b:32:63:0a:86:92:28:99:e0:6f:27:0d:24:
18:2b:90:bd:a8:ef:e4:01:b7:1d:8b:a5:8d:ab:9f:be:b3:9a:
8e:77:da:91:f6:6e:98:ee:a0:4b:0c:93:c9:46:81:8d:00:19:
0d:58:08:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 13:19:48 2024 by rpki-client on console-fra.rpki-client.org