Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/bLin5wL1U367R8HlCvF41MaX__o.roa
File: bLin5wL1U367R8HlCvF41MaX__o.roa (raw, json)
Hash identifier: Bk/OTKJuwSi9yJ7Dx99kyxU4ZWyZWxfRznIxprZoQxs=
Subject key identifier: 6C:B8:A7:E7:02:F5:53:7E:BB:47:C1:E5:0A:F1:78:D4:C6:97:FF:FA
Certificate issuer: /CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Certificate serial: 0193254095F933104984F0DA1CF304966946
Authority key identifier: 04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/bLin5wL1U367R8HlCvF41MaX__o.roa
Signing time: Wed 13 Nov 2024 11:20:09 +0000
ROA not before: Wed 13 Nov 2024 11:20:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12426
IP address blocks: 185.28.144.0/22 maxlen: 22
217.145.192.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:25:40:95:f9:33:10:49:84:f0:da:1c:f3:04:96:69:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Validity
Not Before: Nov 13 11:20:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6cb8a7e702f5537ebb47c1e50af178d4c697fffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c2:5f:d9:53:da:fe:72:1a:4e:04:4f:9e:99:
27:2d:a0:1f:b3:08:ff:75:c3:ae:d1:43:ea:ca:c2:
de:ca:c1:40:b2:48:33:c6:8e:0d:ab:b9:df:2e:78:
41:8c:7d:dc:83:29:5b:df:73:d5:9e:c9:31:c7:89:
f2:f8:d3:b2:9a:17:3f:ec:b0:b7:e6:c3:bf:a4:f3:
fd:2d:b1:11:15:16:50:69:56:fb:72:57:21:4f:82:
09:89:46:b2:67:d8:23:60:bf:8e:bd:de:e9:96:ec:
4f:e9:08:e0:06:fc:2e:86:4f:87:ca:79:d8:9c:19:
72:32:98:02:ef:a4:c8:31:47:ee:66:a9:e4:ce:ee:
09:ed:d6:81:6c:cd:ea:ae:de:c4:7d:a0:4a:33:4d:
87:42:e8:99:9d:0c:11:66:3b:06:b7:8d:16:22:60:
c8:05:e5:b1:64:64:ac:75:f7:c7:34:db:81:27:8f:
b3:e3:85:c3:d3:70:c8:a7:28:b3:59:b0:54:4d:1a:
46:7c:7d:0b:a7:9b:d4:49:6b:d6:84:ac:c3:46:7e:
3f:26:8f:6e:08:c7:ac:41:3b:c0:1a:93:97:51:63:
f2:b4:bc:95:d9:71:c4:45:15:83:46:63:2e:2a:c2:
75:40:f2:d3:8d:f3:9f:af:d3:52:e1:6a:e1:05:36:
2b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B8:A7:E7:02:F5:53:7E:BB:47:C1:E5:0A:F1:78:D4:C6:97:FF:FA
X509v3 Authority Key Identifier:
keyid:04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/bLin5wL1U367R8HlCvF41MaX__o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.144.0/22
217.145.192.0/20
Signature Algorithm: sha256WithRSAEncryption
6d:ae:80:6d:0b:e8:a1:5e:87:08:e6:3e:31:0e:cb:8e:b9:31:
5a:33:53:d0:a6:13:9d:49:cc:5e:3f:0d:3a:bb:9b:52:7a:91:
58:9f:16:79:3d:bb:50:cb:3f:00:f5:87:ec:ba:be:17:e0:53:
47:d5:e9:03:9d:b4:3e:67:5d:70:b4:10:19:5b:50:7d:f3:e7:
1b:9a:13:d2:35:af:8f:21:c0:1d:a3:b4:44:ad:24:f6:6c:d7:
bc:48:a2:37:3c:f5:39:36:a1:ca:f5:93:58:80:a8:4a:12:da:
1a:f3:6a:29:9b:5a:6e:36:d3:a4:39:ba:cc:e4:36:78:e3:41:
f9:49:9c:d4:5e:cd:e8:13:54:13:4f:e6:94:e3:56:a0:7e:60:
18:e3:74:a6:df:9f:63:3f:05:3e:27:b6:02:cf:cc:dc:4e:9e:
6d:65:20:a9:38:ff:72:66:af:0d:08:09:1b:fc:ee:1b:88:0d:
8f:11:1b:99:ae:2a:63:6b:28:22:fd:8d:c3:78:42:85:6c:8b:
3b:49:46:76:ca:f3:4f:7b:63:e0:e4:04:ce:41:7b:24:e3:58:
e1:ec:40:9b:12:fd:35:99:6d:03:f6:3c:21:96:e1:34:c4:8c:
e1:22:a6:29:84:6f:26:3b:11:b6:6a:d6:23:22:79:6b:26:a2:
48:3b:e4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:55:13 2024 by rpki-client on console-ams.rpki-client.org