Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/BLH9oG2KT1wlVJYBPsR9IEwiCKE.roa
File: BLH9oG2KT1wlVJYBPsR9IEwiCKE.roa (raw, json)
Hash identifier: g7T6Rdbs1u0VN3GIBHygwLeUk+H3562J6MtQdrVCvAw=
Subject key identifier: 04:B1:FD:A0:6D:8A:4F:5C:25:54:96:01:3E:C4:7D:20:4C:22:08:A1
Certificate issuer: /CN=d9efe9d36f5f88fdf04742c4140c7532090ab770
Certificate serial: 018CC4255991B9A47EE95410F8FFAEC57A18
Authority key identifier: D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/BLH9oG2KT1wlVJYBPsR9IEwiCKE.roa
Signing time: Mon 01 Jan 2024 08:30:31 +0000
ROA not before: Mon 01 Jan 2024 08:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12400
IP address blocks: 185.151.196.0/23 maxlen: 23
185.151.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:59:91:b9:a4:7e:e9:54:10:f8:ff:ae:c5:7a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9efe9d36f5f88fdf04742c4140c7532090ab770
Validity
Not Before: Jan 1 08:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=04b1fda06d8a4f5c255496013ec47d204c2208a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:19:12:d1:2f:7d:8a:bd:80:dc:d9:a6:d5:e0:
74:bb:8e:83:67:34:15:8b:c5:6d:74:4c:cb:73:f3:
85:7b:f7:d0:1b:42:ed:99:ea:50:ec:00:e7:d0:49:
b4:62:27:ac:33:e6:e5:d5:54:48:ce:1d:18:9b:0f:
b5:a5:38:58:3c:e1:09:d6:27:b0:73:a2:69:f7:ac:
bd:b8:5b:6f:12:75:fc:f4:7b:6d:53:41:5f:94:1b:
2c:26:c3:25:65:24:59:fb:a1:60:e6:9f:ef:69:9c:
71:2d:f3:40:69:28:5d:4e:f6:b3:d0:c6:f9:7a:62:
ef:2b:17:2c:bb:45:5c:ce:35:40:d5:31:8a:48:c5:
fd:4e:a2:ef:12:12:86:5a:3b:fa:3d:bc:c5:ca:fc:
9b:c1:e9:5a:16:83:6a:19:f7:5b:84:0e:8c:21:87:
ee:2d:1f:99:3f:30:45:bf:89:fe:15:39:b7:22:86:
d3:9f:30:48:26:a8:89:d8:98:6c:4d:a1:ec:72:2f:
fd:53:08:78:75:d6:cf:b7:0f:7a:94:cc:9e:91:62:
8c:5f:d8:75:02:28:0a:b9:5b:85:ed:43:72:c5:28:
7e:63:88:bc:33:b5:60:f9:45:eb:bc:73:8e:6e:81:
d6:dc:6c:c6:c3:02:7e:61:8f:69:81:ba:b1:fd:7b:
13:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B1:FD:A0:6D:8A:4F:5C:25:54:96:01:3E:C4:7D:20:4C:22:08:A1
X509v3 Authority Key Identifier:
keyid:D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/BLH9oG2KT1wlVJYBPsR9IEwiCKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.151.196.0-185.151.198.255
Signature Algorithm: sha256WithRSAEncryption
1c:8d:a4:87:fd:ee:a4:80:81:af:08:61:a2:4d:81:35:1d:b4:
44:b9:a0:b9:a0:d5:22:bf:20:10:e9:0c:30:a6:89:95:72:7d:
81:e1:af:9d:f9:02:c8:15:72:2e:f3:66:0b:1e:02:e5:a1:c5:
27:03:cf:9b:da:cf:ab:02:9e:96:87:e1:5d:6d:6c:21:7a:e0:
67:a6:2b:d2:1f:a3:ca:ea:02:76:0a:47:3f:49:9a:65:34:7f:
ca:f6:62:df:ac:bb:08:da:ab:f3:a3:a5:77:4b:81:a1:8c:e5:
2e:db:ea:e6:5d:a3:cb:15:93:4c:6d:a2:d6:12:58:57:a6:88:
6c:59:08:47:1e:f3:b6:a0:66:63:f7:ff:39:c0:07:9b:c2:6b:
3f:40:53:68:f7:7e:af:6c:3e:b6:08:f2:de:c0:4d:ea:14:68:
7d:02:56:61:19:b5:22:f8:c1:16:21:78:e0:be:1b:2f:9b:62:
00:9b:30:2e:b8:b2:db:e9:54:7a:72:0e:65:2e:ca:27:27:77:
92:11:16:a8:e6:d2:01:37:cc:42:5e:13:d2:e3:93:94:cb:c5:
95:fd:dd:68:69:84:13:c6:5c:6d:d6:89:31:d1:39:01:fe:20:
7e:37:2f:47:d8:8c:ad:a8:ca:f2:46:de:84:62:c6:01:e5:95:
d7:17:c6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 22:16:48 2024 by rpki-client on console-fra.rpki-client.org