Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/BARnxjfhUtHD_8TeN7fQiCDLxY0.roa
File: BARnxjfhUtHD_8TeN7fQiCDLxY0.roa (raw, json)
Hash identifier: u5iXeol4/8/DlmADOlSKqNCARaXQcyQ12z4gVPeLgoE=
Subject key identifier: 04:04:67:C6:37:E1:52:D1:C3:FF:C4:DE:37:B7:D0:88:20:CB:C5:8D
Certificate issuer: /CN=9c28a6ed0f5cfce772d5ce5b03bb42932c8a64d0
Certificate serial: 018CC493109AE8F0C7E2F469C2D9C0D57BD3
Authority key identifier: 9C:28:A6:ED:0F:5C:FC:E7:72:D5:CE:5B:03:BB:42:93:2C:8A:64:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCim7Q9c_Ody1c5bA7tCkyyKZNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/BARnxjfhUtHD_8TeN7fQiCDLxY0.roa
Signing time: Mon 01 Jan 2024 10:30:21 +0000
ROA not before: Mon 01 Jan 2024 10:30:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206075
IP address blocks: 193.36.132.0/24 maxlen: 24
31.41.249.0/24 maxlen: 24
185.153.55.0/24 maxlen: 24
91.218.20.0/24 maxlen: 24
188.239.191.0/24 maxlen: 24
2a07:e040::/32 maxlen: 32
2a07:e041::/32 maxlen: 32
2a07:e042::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCim7Q9c_Ody1c5bA7tCkyyKZNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:10:9a:e8:f0:c7:e2:f4:69:c2:d9:c0:d5:7b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c28a6ed0f5cfce772d5ce5b03bb42932c8a64d0
Validity
Not Before: Jan 1 10:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=040467c637e152d1c3ffc4de37b7d08820cbc58d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1f:6a:67:7d:d3:89:72:f6:35:66:27:f7:ee:
70:87:8e:aa:0f:36:08:ac:28:d4:37:47:93:70:a9:
83:92:1e:a8:88:35:0e:5e:0c:9e:73:ba:78:97:56:
b2:e8:65:38:5c:a5:52:e9:e0:22:38:a1:f5:94:b6:
e3:26:12:38:70:bb:13:0c:8a:52:d2:b8:bd:cd:d4:
01:25:c1:93:af:32:d6:88:d9:6d:87:2f:c1:6a:15:
ae:88:02:96:dd:83:c2:f2:26:5c:ef:1c:e3:96:97:
7e:6c:e2:74:97:3a:50:25:ee:be:d4:6c:9f:06:a4:
ac:17:35:7c:c8:76:e9:04:9d:d9:ae:0d:e6:04:d7:
d6:86:d4:b4:2b:87:45:88:b5:07:97:26:11:1f:c8:
4d:18:db:6c:c1:d6:d3:51:3f:9b:83:81:61:e7:35:
cd:0c:63:ac:ab:63:73:3b:9b:78:bd:b1:2b:86:11:
d5:82:0c:3b:81:4a:d8:0e:9f:8d:f6:86:50:4e:b9:
ec:77:e0:7f:aa:ba:da:80:c1:af:6a:6a:6d:4e:ed:
6a:99:73:49:88:48:b2:54:24:4c:21:dc:01:63:44:
d0:01:30:4e:59:23:44:94:53:38:85:b6:9f:bb:31:
7f:cb:58:a0:f0:1a:9f:87:35:c7:0e:73:76:05:3b:
72:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:04:67:C6:37:E1:52:D1:C3:FF:C4:DE:37:B7:D0:88:20:CB:C5:8D
X509v3 Authority Key Identifier:
keyid:9C:28:A6:ED:0F:5C:FC:E7:72:D5:CE:5B:03:BB:42:93:2C:8A:64:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCim7Q9c_Ody1c5bA7tCkyyKZNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/BARnxjfhUtHD_8TeN7fQiCDLxY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.249.0/24
91.218.20.0/24
185.153.55.0/24
188.239.191.0/24
193.36.132.0/24
IPv6:
2a07:e040::-2a07:e042:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
3f:9f:40:ef:a6:c6:e9:bd:32:c8:5a:72:4d:40:1a:d4:b7:f9:
7a:cd:86:37:bc:44:94:3e:16:87:2a:76:7f:6b:6f:37:5d:a9:
8d:82:5d:78:58:48:0b:c4:cc:57:97:86:8e:f6:bc:d9:a5:b0:
d8:d6:81:76:44:4d:99:9e:90:03:be:9e:df:14:b2:ae:dd:63:
2c:a6:c5:bf:61:d7:35:27:7e:9b:78:40:31:ed:68:d8:5d:01:
73:ff:82:13:eb:07:54:85:97:a8:5d:3f:c9:05:5d:7f:66:ec:
7c:cc:19:be:1c:1c:1d:44:d7:cf:4e:e9:4b:70:75:6a:38:df:
33:1f:a2:6f:85:c5:94:07:4f:f9:3c:82:30:17:4d:aa:da:18:
09:b3:40:2c:8f:a0:35:03:97:c3:d3:73:d1:81:13:c7:91:cc:
c7:70:be:2b:46:32:62:80:7e:36:e1:3c:4c:e5:93:20:ef:c5:
39:a8:72:96:0e:58:25:c2:26:27:4e:f3:a1:2d:17:c6:e6:e6:
fd:97:67:5a:dc:76:f3:64:06:5c:67:6a:5b:05:52:45:af:7f:
13:fa:f3:1b:c0:d3:d4:b1:4b:5d:5e:86:26:fa:65:4d:9e:62:
55:db:f7:d1:4f:7c:55:ee:d0:f9:d0:6f:32:4f:cf:13:c0:1d:
4f:c2:6b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:52:17 2024 by rpki-client on console-fra.rpki-client.org