Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/BKgv0Vriuloj2Bl9twbevo_-oNY.roa
File: BKgv0Vriuloj2Bl9twbevo_-oNY.roa (raw, json)
Hash identifier: Spo05tYO1iyy6Se4F2hHACGzSMi6+TDKjU/CPnWLXhQ=
Subject key identifier: 04:A8:2F:D1:5A:E2:BA:5A:23:D8:19:7D:B7:06:DE:BE:8F:FE:A0:D6
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 018CC86F95C0A35F4E5E65174E5F9FF596F7
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/BKgv0Vriuloj2Bl9twbevo_-oNY.roa
Signing time: Tue 02 Jan 2024 04:30:05 +0000
ROA not before: Tue 02 Jan 2024 04:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198116
IP address blocks: 87.110.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:95:c0:a3:5f:4e:5e:65:17:4e:5f:9f:f5:96:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Jan 2 04:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=04a82fd15ae2ba5a23d8197db706debe8ffea0d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0b:e2:13:6e:09:52:ba:a6:61:5a:31:fc:a7:
bb:19:27:c1:6d:53:55:3e:2a:4d:1c:e9:0c:cc:4f:
e2:48:03:30:47:4c:91:b9:a5:1a:77:a7:c9:58:28:
04:d9:ef:a8:8f:e3:fd:9e:e7:35:ed:51:bc:e1:14:
c2:ad:23:ea:f6:0a:06:a2:ae:07:9f:51:33:03:12:
fa:b6:f9:81:84:d1:78:e4:e7:a2:ca:c2:e1:7e:c1:
83:94:6e:91:3e:b6:76:53:7e:43:63:d2:fd:0b:80:
b6:b1:13:51:ba:2d:58:7b:ff:fe:1c:33:3b:f5:78:
e3:48:22:84:94:88:21:68:46:d7:68:26:d2:6f:32:
88:a8:2c:81:eb:e1:20:17:7f:90:d8:b8:d0:50:76:
ed:f1:ed:2a:9a:02:fd:10:a0:bd:3e:32:81:80:0d:
c9:c2:2f:fd:d0:36:8f:6c:c2:32:1d:ce:46:49:34:
7a:d3:a5:6c:2f:64:0c:70:4b:d7:00:77:50:17:30:
03:ca:80:32:92:92:ad:09:5d:f9:62:2c:12:50:04:
b0:58:1a:63:86:04:b0:24:37:cc:9a:e0:95:df:77:
d4:f2:66:fb:a5:c8:dc:33:93:34:05:36:94:23:3c:
c0:93:8e:54:68:86:20:bf:9e:9c:c1:c1:24:2c:67:
19:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A8:2F:D1:5A:E2:BA:5A:23:D8:19:7D:B7:06:DE:BE:8F:FE:A0:D6
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/BKgv0Vriuloj2Bl9twbevo_-oNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.110.204.0/24
Signature Algorithm: sha256WithRSAEncryption
24:d3:7f:a9:7e:48:3a:4f:62:6f:ab:86:8c:e2:bc:8e:2a:45:
a3:5b:0d:55:79:33:62:21:52:74:2e:0c:11:db:4b:9c:cb:30:
08:53:c9:4c:e2:69:05:c2:82:97:d5:09:f5:75:57:28:1f:18:
47:ca:86:c1:d0:31:08:a9:3d:ad:89:15:8c:b6:1e:50:dd:56:
9b:cc:10:e7:b1:ab:a4:f4:3e:a5:03:ae:dd:b8:98:f9:a0:dd:
81:7a:c4:26:a6:29:b4:11:80:c3:a3:b3:46:f4:7d:3d:8d:e4:
0b:b5:7e:17:1b:55:d5:e5:75:64:5f:e0:0e:ec:e2:e2:de:b2:
53:95:91:44:5b:73:32:1f:83:a8:64:70:f1:bc:fe:64:7d:84:
5f:7c:d1:f0:16:7f:83:14:e1:47:3d:85:5d:49:d6:1a:fb:c2:
23:b5:27:15:10:c4:c1:74:eb:2c:7e:f7:b9:94:19:2f:47:93:
7f:b2:e3:3d:e2:98:ca:27:cc:b9:21:24:41:1e:6c:12:6a:c7:
df:cd:02:c0:61:f4:72:99:89:db:39:90:98:ad:70:25:4f:89:
85:31:b2:0f:c2:44:83:f8:09:a2:36:dc:ca:21:04:bb:65:f8:
86:d5:c0:25:97:eb:aa:d9:c8:70:90:e6:c0:b1:ad:58:59:92:
8b:3d:19:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 23:05:18 2024 by rpki-client on console-fra.rpki-client.org