Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/BEHSdhZw70lna7yHBqMNWBbgCro.roa
File: BEHSdhZw70lna7yHBqMNWBbgCro.roa (raw, json)
Hash identifier: 9n8XbDjEEdgQygnEK0FJrpVdV41Qh/8fo2JB7O0xXao=
Subject key identifier: 04:41:D2:76:16:70:EF:49:67:6B:BC:87:06:A3:0D:58:16:E0:0A:BA
Certificate issuer: /CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Certificate serial: 018EE1D8D2C67368EBA6DBAF73981BC85DA8
Authority key identifier: 97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/BEHSdhZw70lna7yHBqMNWBbgCro.roa
Signing time: Mon 15 Apr 2024 13:01:06 +0000
ROA not before: Mon 15 Apr 2024 13:01:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211908
IP address blocks: 185.117.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Jun 2024 07:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e1:d8:d2:c6:73:68:eb:a6:db:af:73:98:1b:c8:5d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Validity
Not Before: Apr 15 13:01:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0441d2761670ef49676bbc8706a30d5816e00aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ee:0e:2b:90:93:86:aa:25:70:21:51:6a:90:
d4:fe:f0:da:67:e4:c1:f8:cf:75:1d:94:19:ef:40:
58:dd:11:37:24:b1:fc:7e:ed:b3:73:5f:db:8c:19:
9c:ac:c9:15:64:b3:2b:d4:70:db:48:6b:5e:21:25:
62:b0:2a:ab:77:a4:69:16:12:46:b3:fe:2a:fd:9a:
20:17:72:20:9b:f8:00:6f:39:d1:26:7a:de:74:1b:
e2:47:fe:c9:45:1b:ae:3c:cc:07:3f:e1:1c:06:f8:
96:20:6a:f1:0a:a6:cc:0e:28:f1:ba:7a:aa:7c:1b:
69:12:31:b4:75:97:89:8d:c6:f2:db:5a:31:90:79:
6b:14:cc:2b:c8:e1:d9:24:8d:bf:98:d0:c0:3e:08:
29:b3:8b:ad:7b:3c:41:7b:90:7e:aa:d1:0c:67:a1:
86:48:0a:ab:6d:fc:26:62:de:d2:61:ba:28:0f:89:
c6:bf:68:f9:b8:b7:77:4e:e1:3d:cc:d0:f7:2c:8e:
fa:3c:66:b7:c6:b0:68:13:17:58:6e:09:e3:71:4f:
d2:44:b3:88:ce:29:bf:6a:1f:6d:bb:78:50:85:e2:
79:51:3e:9f:71:56:07:f9:b8:94:73:cc:1b:40:8d:
78:a5:ba:0e:f8:7d:e8:ed:60:0d:06:2f:48:2e:b8:
0d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:41:D2:76:16:70:EF:49:67:6B:BC:87:06:A3:0D:58:16:E0:0A:BA
X509v3 Authority Key Identifier:
keyid:97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/BEHSdhZw70lna7yHBqMNWBbgCro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.9.0/24
Signature Algorithm: sha256WithRSAEncryption
76:cc:87:f7:21:41:d4:38:18:f8:85:63:58:f0:f6:db:c8:f5:
16:e8:9f:39:e9:a5:2b:2f:48:72:9e:31:73:25:55:de:ef:9c:
8b:a0:e5:8c:1c:9f:7b:a4:12:77:de:93:90:8b:bf:36:3a:94:
33:6d:50:44:aa:1a:d7:22:5d:82:02:fb:65:ef:c4:f3:e5:b0:
4b:17:77:bf:13:6e:bd:e0:fb:e6:2b:54:c4:35:df:38:6e:45:
04:6b:5f:5d:60:1e:d3:77:ec:a5:16:cb:1d:48:91:cb:f5:18:
2e:01:fd:d1:06:4c:48:01:1f:1d:bd:04:6a:29:95:17:22:77:
cb:14:38:a5:49:45:95:65:ee:b1:ea:8b:c1:90:36:52:15:3f:
ff:77:6f:88:9c:62:58:7f:f6:a9:d3:b7:dc:e6:f2:46:e6:cb:
21:0d:a0:f2:09:19:f0:c4:4f:f2:8f:59:47:4f:ad:3a:ff:cd:
33:1f:b3:7b:86:66:c5:40:7a:67:5c:70:49:88:2a:8f:a6:4b:
7f:cb:7e:34:20:c0:f2:58:33:fd:d7:f1:b0:24:3c:f0:7e:77:
e6:b5:01:56:9a:ef:db:8d:7b:8a:fb:7f:f9:22:67:9e:34:1c:
71:16:d0:9c:f2:bb:45:e2:f9:41:5f:af:f7:b0:ab:d1:db:88:
5b:a3:30:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 12:44:07 2024 by rpki-client on console-fra.rpki-client.org