Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/Bp-wq2iZMB4jZelkyrY6dwkJTqk.roa
File: Bp-wq2iZMB4jZelkyrY6dwkJTqk.roa (raw, json)
Hash identifier: 3IfnWFaO0MuqSCzy4RC8igmjorFrbmiPsAGGotBGdG8=
Subject key identifier: 06:9F:B0:AB:68:99:30:1E:23:65:E9:64:CA:B6:3A:77:09:09:4E:A9
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 018CC802CB7BB394B25F8A90EB4A09506C11
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/Bp-wq2iZMB4jZelkyrY6dwkJTqk.roa
Signing time: Tue 02 Jan 2024 02:31:15 +0000
ROA not before: Tue 02 Jan 2024 02:31:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49774
IP address blocks: 93.114.96.0/24 maxlen: 24
85.204.138.0/24 maxlen: 24
77.81.178.0/23 maxlen: 23
86.106.170.0/24 maxlen: 24
93.115.246.0/24 maxlen: 24
31.14.16.0/24 maxlen: 24
2a04:fee3::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:cb:7b:b3:94:b2:5f:8a:90:eb:4a:09:50:6c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 2 02:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=069fb0ab6899301e2365e964cab63a7709094ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bc:eb:9b:d6:40:44:02:cd:b5:71:0d:37:b4:
bc:85:bd:cf:c0:46:95:32:02:ec:cf:68:1e:f0:ad:
ab:fe:59:7d:3d:a4:13:8c:9d:37:cd:3a:e4:a9:00:
13:eb:a8:13:12:d8:19:aa:5b:14:99:c5:f7:e6:33:
e7:b0:d7:7c:91:a4:13:b6:06:56:e0:40:c4:78:5e:
e0:3f:f9:68:9a:64:69:43:91:74:31:bc:72:59:43:
66:a2:ee:22:f7:f3:fc:5a:f5:ab:2c:0b:c4:be:d1:
35:65:bc:f0:58:dd:27:9b:d6:09:ac:1f:f8:6c:e2:
cb:61:66:b6:49:34:5f:34:2a:ae:b9:0b:20:b1:b0:
1f:2c:fb:d0:8d:48:f1:a6:9f:60:69:32:a5:6b:e9:
62:03:fc:96:40:56:1a:cd:32:3e:f4:58:1f:a1:34:
6b:f7:81:91:53:cd:08:48:3e:87:a7:a0:0f:8a:1b:
b4:06:f6:cc:12:75:78:79:49:82:90:89:6f:fb:c2:
3f:89:0d:18:98:fa:25:e4:b0:d3:61:2e:b2:f3:2f:
32:ba:6b:69:1b:ad:be:d6:88:94:e8:47:72:f9:6d:
7d:b2:ca:4f:53:1e:92:b0:48:89:26:fc:b6:1e:b6:
da:69:3a:3a:1d:8e:d8:2a:bc:18:89:99:eb:25:34:
86:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:9F:B0:AB:68:99:30:1E:23:65:E9:64:CA:B6:3A:77:09:09:4E:A9
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/Bp-wq2iZMB4jZelkyrY6dwkJTqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.16.0/24
77.81.178.0/23
85.204.138.0/24
86.106.170.0/24
93.114.96.0/24
93.115.246.0/24
IPv6:
2a04:fee3::/32
Signature Algorithm: sha256WithRSAEncryption
73:b2:fb:e2:7d:ef:f3:ac:a6:cc:5c:79:bf:41:36:27:f1:5a:
eb:a7:52:a3:35:25:3f:9a:45:4e:24:cc:2b:cd:be:af:88:40:
ad:ac:19:49:a5:e5:8c:2a:92:3d:f2:77:37:79:b1:15:4a:61:
91:fe:49:c2:6a:61:93:8b:22:0f:f6:39:2a:78:b1:8b:45:d2:
3f:c1:76:2d:eb:53:34:4e:c2:cc:8a:fa:d7:12:a7:a0:54:5b:
28:cd:05:be:77:fd:e9:c1:ef:79:23:c2:81:da:09:1e:3a:fb:
0b:b9:f1:ab:aa:61:51:8c:dd:49:1c:30:5b:50:e2:08:d7:b9:
35:62:6d:41:74:7f:86:8f:6b:9b:7c:8f:57:17:75:3e:10:67:
b1:52:e3:0f:d3:ca:bf:45:95:b4:db:f6:eb:19:48:4d:35:5d:
08:99:f4:4d:56:f7:f3:ce:cf:5b:30:c4:0f:ae:5e:3d:08:5d:
2f:ca:7a:d2:ab:fe:ee:60:6e:ef:5e:32:c8:bc:2b:cc:af:b1:
b8:cd:06:76:4b:a7:ff:cc:9b:de:ab:5f:65:47:7d:8a:1b:11:
50:ce:a4:42:31:a2:1d:61:2c:b6:76:9f:6b:8d:69:8f:3d:e3:
2c:b0:b3:c2:5b:dd:92:85:2e:0e:c4:32:87:4c:3e:ec:26:cb:
70:8e:d1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:21:29 2024 by rpki-client on console-ams.rpki-client.org