Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/BpCPAalGOWy9DULFPw7RHM1sIaY.roa
File: BpCPAalGOWy9DULFPw7RHM1sIaY.roa (raw, json)
Hash identifier: 9N/LmMpSKYJiDU+sQ1Qp8AG1DalJxqY0KM0ItcUt15U=
Subject key identifier: 06:90:8F:01:A9:46:39:6C:BD:0D:42:C5:3F:0E:D1:1C:CD:6C:21:A6
Certificate issuer: /CN=ee8ba8824c5c8d207326a4a3ab893ebb8f5096ad
Certificate serial: 018CC26D7F06206DB50F591B8F991D31C733
Authority key identifier: EE:8B:A8:82:4C:5C:8D:20:73:26:A4:A3:AB:89:3E:BB:8F:50:96:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/BpCPAalGOWy9DULFPw7RHM1sIaY.roa
Signing time: Mon 01 Jan 2024 00:30:04 +0000
ROA not before: Mon 01 Jan 2024 00:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 77.232.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:7f:06:20:6d:b5:0f:59:1b:8f:99:1d:31:c7:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee8ba8824c5c8d207326a4a3ab893ebb8f5096ad
Validity
Not Before: Jan 1 00:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=06908f01a946396cbd0d42c53f0ed11ccd6c21a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f8:bc:be:ac:72:7c:9e:1b:b8:b5:16:55:17:
57:af:b0:b5:d3:53:62:9a:6f:44:5e:d7:65:e2:6c:
8d:ab:dd:d0:e0:7f:d8:9b:6d:d8:2c:23:8c:e6:17:
4c:28:9c:be:5f:46:ed:0e:ac:c5:b7:76:e5:0e:98:
f0:cf:e4:8c:33:87:50:e4:e6:25:bf:5c:4f:e4:d7:
2a:96:5f:fd:22:4b:62:3a:b2:af:62:3e:a6:51:79:
c7:fc:f8:ef:bc:19:b6:88:5d:a4:56:b3:20:a2:87:
f9:8a:df:d5:09:42:d2:fb:aa:84:ae:53:d1:71:30:
fd:a5:fa:16:b8:ad:68:ae:3d:37:2d:71:90:a7:8c:
13:17:44:32:86:68:55:f2:48:b9:1f:e9:a9:b8:dc:
12:2a:ad:6d:cb:a8:f8:94:f0:56:a8:ee:a3:5f:3c:
bd:4c:6f:5c:21:6c:02:23:68:69:33:ca:19:d9:f1:
0e:4e:3f:dc:53:7c:b7:45:1e:15:29:3f:7d:54:df:
51:a0:7e:b4:ef:7a:48:9a:20:d7:a1:92:e4:76:03:
3a:46:25:c8:47:44:5e:f7:13:06:40:3e:bc:05:88:
cb:d7:25:27:38:3a:81:9a:32:d9:0a:d6:83:3f:5f:
76:4b:c5:8f:bf:16:a4:c6:d8:d0:76:49:37:eb:9c:
5a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:90:8F:01:A9:46:39:6C:BD:0D:42:C5:3F:0E:D1:1C:CD:6C:21:A6
X509v3 Authority Key Identifier:
keyid:EE:8B:A8:82:4C:5C:8D:20:73:26:A4:A3:AB:89:3E:BB:8F:50:96:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/BpCPAalGOWy9DULFPw7RHM1sIaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.232.97.0/24
Signature Algorithm: sha256WithRSAEncryption
77:9d:2a:b8:d8:c9:cb:11:a6:64:e8:7c:ec:f7:2e:a6:e9:09:
d2:eb:a2:07:ff:e2:fb:a4:46:74:2f:a8:ae:00:bf:a0:e3:e5:
57:fe:a9:ae:8f:4a:57:68:30:0d:59:84:0b:fc:bb:33:f3:49:
a5:88:36:11:c8:ae:8b:10:8e:79:4a:ab:33:3c:ef:04:85:a1:
e1:e4:38:5c:98:1a:ec:47:0d:4d:23:82:8c:49:6c:f7:40:b3:
43:a7:03:c3:16:2f:53:d8:16:41:45:3d:d5:a4:a4:c3:20:3f:
c7:22:ed:7d:ed:1b:0e:1d:53:dc:ee:43:77:7a:59:b5:72:11:
b1:9f:01:97:67:14:7c:d9:fc:51:75:6c:6d:01:78:31:cc:83:
2a:22:b6:6f:36:dc:13:f0:2a:99:10:a1:e9:60:43:47:93:78:
20:76:14:0a:28:74:93:2a:bf:a4:74:4b:ec:e4:c3:c5:c6:75:
bc:dc:7e:c5:d7:5f:33:b5:b0:83:19:a8:cb:f5:77:36:b1:ac:
75:f9:da:0b:4a:fc:fa:0f:da:87:5c:ce:6b:b2:03:52:88:ec:
44:ee:57:40:e7:79:98:db:7d:d1:3f:56:7b:a1:17:13:f7:05:
1e:ad:85:ef:cc:57:39:e7:d3:7c:3f:f1:87:f7:f1:b9:c2:b8:
e4:cc:f8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:29:01 2024 by rpki-client on console-ams.rpki-client.org