Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/BEPls_IglJKia6MctKJFF42dBcQ.roa
File: BEPls_IglJKia6MctKJFF42dBcQ.roa (raw, json)
Hash identifier: sdy4kAISvw3c2CNK9WBl4qYoT9uxsEy1dXycHnHXajw=
Subject key identifier: 04:43:E5:B3:F2:20:94:92:A2:6B:A3:1C:B4:A2:45:17:8D:9D:05:C4
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 018CC7276B2592E176B9BA6F0ED3B99A79BC
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/BEPls_IglJKia6MctKJFF42dBcQ.roa
Signing time: Mon 01 Jan 2024 22:31:38 +0000
ROA not before: Mon 01 Jan 2024 22:31:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201488
IP address blocks: 94.42.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:6b:25:92:e1:76:b9:ba:6f:0e:d3:b9:9a:79:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 1 22:31:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0443e5b3f2209492a26ba31cb4a245178d9d05c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:89:ba:85:32:81:2c:a0:1c:45:bd:4c:d4:d4:
1f:f1:bd:1a:22:d0:22:77:b6:db:14:e0:b5:46:c9:
99:20:ed:95:d7:49:26:29:26:20:53:9a:5a:1b:39:
cd:6f:bb:74:8f:7b:7b:f4:1e:9c:cb:68:40:fd:07:
af:7f:3c:77:95:4c:ef:fb:3f:c9:16:9f:2e:7a:9a:
ff:7d:30:46:bf:c0:78:b8:11:f8:3b:1c:cc:79:44:
1d:c5:e3:5f:d3:f0:cc:c0:ed:a9:9b:d3:41:ce:35:
7a:90:d5:df:ef:84:fc:62:6e:cc:b5:1d:5b:16:f9:
31:5c:c8:e8:a5:40:12:d1:8a:ac:0e:91:0d:9a:0e:
28:fb:75:aa:05:63:2e:7e:f6:3f:df:4d:c9:c7:90:
50:72:aa:39:7e:41:f3:ba:0b:ef:bf:8e:30:06:c7:
52:48:1b:70:b5:d9:b5:46:fa:cb:88:87:33:cf:3e:
5d:60:b6:49:df:9a:a7:40:fe:5e:b6:45:e1:0b:53:
89:58:b8:3a:7f:b3:1e:11:db:7e:69:b5:70:b0:05:
ee:7e:da:d8:68:cb:95:99:33:ba:ce:69:39:13:56:
39:d9:41:fb:a7:3f:00:ac:4e:74:e7:79:01:1d:d9:
e2:c7:25:60:8d:27:dc:b4:33:c4:96:3e:09:8d:0a:
05:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:43:E5:B3:F2:20:94:92:A2:6B:A3:1C:B4:A2:45:17:8D:9D:05:C4
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/BEPls_IglJKia6MctKJFF42dBcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.42.89.0/24
Signature Algorithm: sha256WithRSAEncryption
40:40:16:e6:33:31:45:31:77:75:e7:fa:7e:2d:7e:23:28:c8:
b4:88:63:59:36:94:64:15:5c:33:47:a2:38:f6:d3:b3:ce:c7:
9a:a1:1a:5c:bf:81:08:70:fa:1b:2b:2d:d3:45:e5:02:db:43:
e1:71:c1:9e:ad:75:4a:3c:18:3d:01:3e:96:17:28:a3:c9:94:
be:03:e3:bd:4a:63:1f:17:63:1d:6e:84:50:00:e6:65:c8:9d:
fd:7b:b5:6e:85:0e:dc:fb:c4:19:e7:b2:e8:66:be:ef:de:5b:
67:52:97:6e:65:2b:0b:04:44:3f:a8:77:da:4f:7f:42:e3:4c:
17:8f:db:44:0b:3e:2f:07:81:3c:5e:66:09:62:1e:43:4b:45:
47:fc:b6:ab:eb:28:8b:a9:ec:99:02:bd:37:15:ce:53:03:3b:
5e:b9:08:73:45:1e:d2:f3:58:f1:cd:8e:b7:a4:37:85:c3:45:
5c:ed:50:49:10:49:b2:d7:1e:80:ae:35:1e:14:db:c4:cb:d2:
3a:ad:a5:e1:76:fa:17:d0:be:76:d4:e2:53:45:d6:6a:81:c8:
b5:28:1a:1d:ef:14:7f:04:fc:fd:b7:56:06:4d:fa:7a:61:30:
4a:7a:26:0a:5c:d7:d7:48:91:0a:cb:50:36:17:48:17:5c:88:
a1:51:6f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 14:25:47 2024 by rpki-client on console-fra.rpki-client.org