Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/BBnBszxLcc8ia-C7pZB8qDR7ySs.roa
File: BBnBszxLcc8ia-C7pZB8qDR7ySs.roa (raw, json)
Hash identifier: S+v8P5UjQF6ZxilqbipY2eKymtJGdPtiXQfWQzGlFVM=
Subject key identifier: 04:19:C1:B3:3C:4B:71:CF:22:6B:E0:BB:A5:90:7C:A8:34:7B:C9:2B
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 01925630251E3EB7D63FEA5BD4F57BAF4AC4
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/BBnBszxLcc8ia-C7pZB8qDR7ySs.roa
Signing time: Fri 04 Oct 2024 06:20:48 +0000
ROA not before: Fri 04 Oct 2024 06:20:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30058
IP address blocks: 83.147.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:56:30:25:1e:3e:b7:d6:3f:ea:5b:d4:f5:7b:af:4a:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Oct 4 06:20:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0419c1b33c4b71cf226be0bba5907ca8347bc92b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f6:02:49:dd:68:9a:c7:69:e6:8c:46:b0:de:
6e:7b:e3:57:a6:49:56:31:e7:8d:9e:f6:c9:0e:f8:
41:58:76:ee:dc:13:2d:e7:59:f4:b6:4d:3d:85:79:
99:48:d4:c0:dd:86:ff:54:c3:f9:7a:a2:74:ec:f3:
72:35:07:13:0c:fc:59:8d:e9:3c:06:c6:1a:37:52:
5b:32:d7:80:28:92:f4:a7:c3:e3:87:d5:d3:79:8d:
b3:8e:e4:64:ad:0f:0b:49:d2:8c:9e:bd:1a:ad:5e:
4c:c6:06:8d:8b:53:6a:1d:49:db:d6:1b:64:bd:2d:
4d:f6:2b:3e:6e:0e:1b:b9:78:21:9a:f6:33:72:ca:
14:8d:f3:60:dd:62:c2:56:71:e9:d8:fa:e2:e2:2e:
5f:25:bf:42:b1:d1:43:68:41:5a:db:0b:fd:f6:e0:
c5:ee:19:90:c4:1f:16:a0:60:1e:7f:d3:90:74:09:
c4:f0:ba:e2:6f:e1:3e:df:1f:b4:d4:23:8a:09:00:
6a:a4:68:c6:4a:f7:43:79:54:49:26:3b:26:c2:ff:
84:aa:9b:97:eb:4a:d9:15:11:ae:96:46:f7:53:4a:
db:54:52:44:93:7f:d6:9e:37:5b:59:8c:fe:f7:65:
80:ab:54:14:d9:0d:c3:76:37:ec:64:37:1f:02:64:
11:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:19:C1:B3:3C:4B:71:CF:22:6B:E0:BB:A5:90:7C:A8:34:7B:C9:2B
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/BBnBszxLcc8ia-C7pZB8qDR7ySs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.194.0/24
Signature Algorithm: sha256WithRSAEncryption
48:95:50:4d:89:bf:0c:23:af:a9:45:4d:70:eb:8f:1f:59:13:
78:a8:cc:a1:cb:9a:e0:ef:04:4d:2d:04:bd:b1:6e:cf:1b:e4:
10:7f:f3:6e:cb:5e:e3:10:25:e8:06:77:d2:31:a0:57:bc:9b:
22:60:74:6f:64:25:69:c1:b1:eb:6e:67:b0:81:7c:c5:62:1b:
1d:98:e8:3a:49:6b:97:6d:0c:6d:63:66:9d:ac:4c:ca:5a:ae:
18:78:fd:2d:e2:e5:e0:26:4e:f7:ac:aa:50:85:91:1a:77:5e:
93:a5:0c:2e:63:a7:c5:b0:0c:92:bd:de:f1:09:de:7b:9e:84:
41:64:78:9a:7c:44:e5:48:11:3e:53:89:1a:c4:3a:be:a6:f1:
0f:a5:92:d3:16:a0:1a:2e:88:af:d8:93:ca:05:78:34:d3:e7:
08:ee:21:6e:79:10:0d:41:f3:41:58:a8:2b:a6:88:29:0d:2a:
d5:bc:74:4c:04:2a:22:84:1c:4a:d6:b3:48:27:1a:6b:09:7b:
d0:b8:fd:f5:84:e3:6b:da:91:64:b8:b9:2a:6b:17:d7:b1:da:
ca:ce:10:dd:8a:c8:da:74:89:90:7a:2f:bb:e0:20:6b:3b:a9:
a4:81:07:88:d9:78:bb:08:49:08:22:11:d9:cd:3c:1e:a5:db:
86:fe:39:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:39:17 2024 by rpki-client on console-fra.rpki-client.org