Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/BFV2iJrQGv7Rnzg_bQYS-99dOsQ.roa
File: BFV2iJrQGv7Rnzg_bQYS-99dOsQ.roa (raw, json)
Hash identifier: +O7HzzzynJg08fNnHcMJ7lS3fWLijD4pVpBtQkdQ86c=
Subject key identifier: 04:55:76:88:9A:D0:1A:FE:D1:9F:38:3F:6D:06:12:FB:DF:5D:3A:C4
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 018CC7276119144676BADE8A5B2093562114
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/BFV2iJrQGv7Rnzg_bQYS-99dOsQ.roa
Signing time: Mon 01 Jan 2024 22:31:35 +0000
ROA not before: Mon 01 Jan 2024 22:31:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6714
IP address blocks: 78.133.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:61:19:14:46:76:ba:de:8a:5b:20:93:56:21:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 1 22:31:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=045576889ad01afed19f383f6d0612fbdf5d3ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:06:51:88:27:d1:f4:5a:66:7d:75:6b:64:c9:
35:72:55:ba:e3:1d:b2:ef:4a:1b:5f:bf:41:37:5b:
d7:f5:b1:0f:b7:25:c6:e2:2c:47:d9:fb:11:0a:b0:
9a:45:cd:17:29:bd:03:b7:2e:32:96:0d:64:da:43:
ec:eb:a2:53:8b:9e:8a:e0:35:62:47:fc:88:b0:f3:
b6:ef:f3:25:9a:d2:b6:fe:40:c2:d1:be:1f:ba:84:
9c:c0:a5:cb:7a:57:f4:57:27:d2:f9:80:bc:ab:28:
63:6f:c1:4c:3e:6a:f4:db:32:37:0c:73:8a:ae:e2:
b2:69:26:55:79:71:fd:f3:64:e4:1b:89:af:e9:36:
ce:e3:ef:05:2b:ee:f9:29:c4:b8:f9:99:e3:1b:b9:
a4:41:20:b0:4b:47:8d:79:ba:39:ca:2d:87:b2:77:
46:ad:20:c5:d5:f9:50:d1:75:d0:0a:5b:52:6c:46:
d4:d3:fa:1e:e4:59:f2:6f:0d:5e:35:21:3a:22:04:
da:51:43:93:e8:bf:da:86:0e:a9:8c:4d:2b:5d:d4:
0c:94:b1:af:e5:76:f9:ee:21:7c:e6:af:41:22:c9:
b1:a1:1b:fe:a7:5e:60:8c:28:18:28:ef:23:d9:f6:
be:8b:60:9a:c2:7d:57:65:df:f1:2c:39:9c:18:40:
df:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:55:76:88:9A:D0:1A:FE:D1:9F:38:3F:6D:06:12:FB:DF:5D:3A:C4
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/BFV2iJrQGv7Rnzg_bQYS-99dOsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.133.220.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:0d:ce:f6:87:21:04:ee:f8:d4:d3:8e:a3:2a:87:93:0c:07:
3a:cb:ac:02:ec:96:c0:ab:01:bc:6c:17:5e:20:86:51:72:e0:
9d:1a:5c:78:4a:e9:05:3e:58:66:c6:8b:ca:88:95:80:43:58:
e8:32:bf:57:af:ce:62:43:b9:8f:3f:e2:fe:37:ab:06:ba:6e:
56:88:b0:8b:7f:84:d8:74:22:c6:12:48:84:c4:dd:39:6b:57:
32:c3:69:9b:8f:d5:0f:16:25:00:c0:3c:2a:b2:12:e0:bc:c7:
65:ad:52:2f:33:b6:71:e3:4d:18:a6:4a:5d:b2:f2:44:dd:a3:
85:49:2c:17:34:23:fe:71:6a:d5:c0:81:7b:0d:3b:a3:83:b8:
07:3d:df:91:24:41:fc:94:bc:f4:ef:65:b5:a3:4b:2b:c0:e7:
62:39:30:7a:47:45:69:5f:81:2f:f9:8d:b7:cd:32:6f:0d:e9:
ae:42:dc:ac:1d:2b:03:1f:9f:36:a0:54:29:30:75:22:8a:89:
84:3d:08:bd:ff:52:ca:04:55:0e:c6:7d:ab:02:f2:1d:06:11:
62:9c:c2:c8:74:08:c8:ef:97:0d:06:eb:29:dd:03:09:ae:96:
d5:36:dd:33:cd:8f:9b:b8:7d:4c:8f:34:e5:62:a6:d0:35:b4:
16:8d:b0:7a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHJ2EZFEZ2ut6KWyCTViEUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhY2E2M2RmMjQ4YjdhZGYzZGRkMDdlOGMyZDNlZWRkMDJj
ZWY5MzMwHhcNMjQwMTAxMjIzMTM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDU1NzY4ODlhZDAxYWZlZDE5ZjM4M2Y2ZDA2MTJmYmRmNWQzYWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAZRiCfR9FpmfXVrZMk1clW64x2y
70obX79BN1vX9bEPtyXG4ixH2fsRCrCaRc0XKb0Dty4ylg1k2kPs66JTi56K4DVi
R/yIsPO27/MlmtK2/kDC0b4fuoScwKXLelf0VyfS+YC8qyhjb8FMPmr02zI3DHOK
ruKyaSZVeXH982TkG4mv6TbO4+8FK+75KcS4+ZnjG7mkQSCwS0eNebo5yi2HsndG
rSDF1flQ0XXQCltSbEbU0/oe5Fnybw1eNSE6IgTaUUOT6L/ahg6pjE0rXdQMlLGv
5Xb57iF85q9BIsmxoRv+p15gjCgYKO8j2fa+i2Cawn1XZd/xLDmcGEDfLwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFARVdoia0Br+0Z84P20GEvvfXTrEMB8GA1UdIwQY
MBaAFBrKY98ki3rfPd0H6MLT7t0CzvkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzIt
OTFlMzE4NGJiMGFiLzEvQkZWMmlKclFHdjdSbnpnX2JRWVMtOTlkT3NRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzItOTFlMzE4NGJiMGFi
LzEvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCToXcMA0G
CSqGSIb3DQEBCwUAA4IBAQB9Dc72hyEE7vjU046jKoeTDAc6y6wC7JbAqwG8bBde
IIZRcuCdGlx4SukFPlhmxovKiJWAQ1joMr9Xr85iQ7mPP+L+N6sGum5WiLCLf4TY
dCLGEkiExN05a1cyw2mbj9UPFiUAwDwqshLgvMdlrVIvM7Zx400YpkpdsvJE3aOF
SSwXNCP+cWrVwIF7DTujg7gHPd+RJEH8lLz072W1o0srwOdiOTB6R0VpX4Ev+Y23
zTJvDemuQtysHSsDH582oFQpMHUiiomEPQi9/1LKBFUOxn2rAvIdBhFinMLIdAjI
75cNBusp3QMJrpbVNt0zzY+buH1MjzTlYqbQNbQWjbB6
-----END CERTIFICATE-----
Generated at Fri May 17 11:06:49 2024 by rpki-client on console-fra.rpki-client.org