Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/BnjE3yErF9E1GKw7SXpDcLA34Do.roa
File: BnjE3yErF9E1GKw7SXpDcLA34Do.roa (raw, json)
Hash identifier: aXOa/fm24pvq+sD/VBJtfhqzdH/bBObPOTh4wf/wAsY=
Subject key identifier: 06:78:C4:DF:21:2B:17:D1:35:18:AC:3B:49:7A:43:70:B0:37:E0:3A
Certificate issuer: /CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Certificate serial: 018CCA9979D3D24584CCFA8A51ACC5CA787C
Authority key identifier: CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/BnjE3yErF9E1GKw7SXpDcLA34Do.roa
Signing time: Tue 02 Jan 2024 14:35:05 +0000
ROA not before: Tue 02 Jan 2024 14:35:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209014
IP address blocks: 185.245.58.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:03:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:79:d3:d2:45:84:cc:fa:8a:51:ac:c5:ca:78:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Validity
Not Before: Jan 2 14:35:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0678c4df212b17d13518ac3b497a4370b037e03a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ea:d9:32:c4:b4:8a:6b:0d:96:bf:79:59:d7:
df:55:17:3b:c6:dd:4c:0e:1e:9d:e2:21:a8:29:99:
28:d6:92:a7:33:1e:a1:8a:86:77:0d:b0:ef:70:6c:
35:07:a0:d7:ca:26:a7:52:1a:b6:0b:34:39:a6:1f:
d6:bb:f1:a6:36:cf:85:4f:1a:4d:a4:6a:82:e9:97:
a6:ea:5c:f8:d0:c1:d8:33:11:f8:34:93:b5:6c:38:
7b:18:43:d2:19:05:b9:c1:1f:9e:b1:81:0a:47:d6:
b5:19:ec:4e:9c:08:05:e0:df:d4:d5:f7:8f:bb:1a:
3f:1f:67:32:57:bb:8b:f3:8b:28:a9:22:c9:ac:47:
0a:36:d2:03:99:a8:3b:ff:0d:c4:b7:7b:23:01:0e:
6d:bb:9a:33:b6:d9:74:ac:52:50:47:82:be:77:a2:
22:41:83:a4:69:a0:22:1d:74:f8:54:35:5b:41:4c:
52:56:7e:35:8f:4d:13:d4:3e:1e:14:83:03:eb:b0:
46:4c:02:cd:b9:42:f5:96:60:bf:77:01:49:43:dd:
62:66:15:36:9a:4e:86:cc:56:a9:1b:dc:06:09:bc:
81:5d:be:b0:56:aa:cb:76:09:8f:34:1c:c5:f6:7f:
e0:b6:fb:3b:78:12:45:10:87:12:cb:68:5c:1a:19:
6f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:78:C4:DF:21:2B:17:D1:35:18:AC:3B:49:7A:43:70:B0:37:E0:3A
X509v3 Authority Key Identifier:
keyid:CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/BnjE3yErF9E1GKw7SXpDcLA34Do.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.58.0/23
Signature Algorithm: sha256WithRSAEncryption
62:0c:a7:59:a9:88:f9:6f:24:06:17:d8:0a:cf:e5:54:be:14:
e9:46:50:d1:2d:ce:98:6f:8e:3a:27:e6:e7:9c:dd:eb:77:79:
ce:05:ce:e7:bb:8b:2f:8e:4b:e2:c4:3a:d9:6c:62:e2:2a:9a:
5d:09:30:85:2f:12:5a:65:77:40:3f:ee:37:63:0a:f3:ab:ef:
bc:b9:ce:ae:0a:43:4a:85:6a:3c:04:49:6b:f7:c8:73:78:ec:
86:49:8f:6d:7a:7d:8c:a1:78:cb:0e:2f:75:bc:c7:88:54:de:
e7:1f:08:d5:36:51:37:01:2b:59:4b:6d:fc:6c:30:19:ce:65:
5d:1d:26:52:c1:a8:3a:e8:c5:6c:f7:b8:88:d1:f8:bf:db:5f:
45:5b:af:5c:7f:a5:e5:95:eb:00:a8:af:37:e0:a7:95:f1:06:
cf:6a:21:7a:f2:68:47:9a:5e:54:54:f5:55:a4:b7:e2:ee:50:
5f:67:84:78:58:19:4d:02:76:6a:a1:e4:ad:38:55:d8:13:c6:
d8:d8:fe:03:58:3c:e9:d6:d8:54:6d:41:77:60:01:0e:f9:99:
be:57:b8:5c:1b:9a:7d:7a:d6:2d:5a:50:39:0a:7c:94:36:66:
22:09:8c:f8:b2:22:e3:cc:5b:c9:6d:95:b5:2d:6c:a8:39:5e:
29:af:27:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:49:09 2024 by rpki-client on console-ams.rpki-client.org