Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/bfwkjGV4iJcqduQIX72Ag5iQ05k.roa
File: bfwkjGV4iJcqduQIX72Ag5iQ05k.roa (raw, json)
Hash identifier: a6LOlpQb3Vott6fMDQOqRWqM0XbdOh3yR3E/GwmoLbs=
Subject key identifier: 6D:FC:24:8C:65:78:88:97:2A:76:E4:08:5F:BD:80:83:98:90:D3:99
Certificate issuer: /CN=956866562d9f25831ec0ace8a9d8cd0e594d71fc
Certificate serial: 018CC5DC70E1E80A24A79B9205BC8E20A16A
Authority key identifier: 95:68:66:56:2D:9F:25:83:1E:C0:AC:E8:A9:D8:CD:0E:59:4D:71:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/bfwkjGV4iJcqduQIX72Ag5iQ05k.roa
Signing time: Mon 01 Jan 2024 16:30:07 +0000
ROA not before: Mon 01 Jan 2024 16:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 164.10.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 13:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:70:e1:e8:0a:24:a7:9b:92:05:bc:8e:20:a1:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=956866562d9f25831ec0ace8a9d8cd0e594d71fc
Validity
Not Before: Jan 1 16:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6dfc248c657888972a76e4085fbd80839890d399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c0:46:46:f3:72:d8:8b:fd:a3:ee:72:a6:e7:
a3:0a:24:96:22:02:a8:09:9a:c7:13:d3:bc:5f:95:
9e:ae:4b:bc:3a:59:59:40:54:a8:72:89:9f:19:6f:
83:83:41:d0:dd:b0:c7:36:64:08:bf:c9:e2:f2:c0:
7b:fc:1b:45:ed:60:a4:40:e4:12:25:ed:6f:76:a2:
b6:74:95:a6:f7:0d:5f:23:29:8f:be:f9:7d:c2:8f:
83:ed:a0:a3:9f:18:4d:cd:2c:2e:1d:9a:b3:d7:d1:
a6:b2:68:0e:d4:b6:a4:64:6a:b4:4f:67:0a:5c:b6:
47:00:d6:00:fd:2e:c1:78:24:5a:c3:90:85:98:b5:
08:56:84:db:1d:2c:84:6b:72:dc:f9:cb:a8:ef:6a:
47:6f:c4:11:51:30:bb:55:0b:61:94:41:5f:51:c3:
22:26:26:27:2c:38:f0:d3:4e:53:ff:7a:7e:0e:08:
13:04:0c:7e:98:91:be:9d:87:6b:cc:ea:6d:b1:ca:
3d:b9:83:23:45:8e:27:20:17:28:b8:2d:89:16:c9:
10:94:e7:3f:cc:25:f9:e6:58:cf:f6:22:52:79:3f:
bb:c6:7a:c6:6f:0e:0a:d0:38:c6:de:69:05:77:d1:
76:cd:6f:b5:3d:de:8b:f8:36:da:f1:5d:ea:16:b9:
39:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:FC:24:8C:65:78:88:97:2A:76:E4:08:5F:BD:80:83:98:90:D3:99
X509v3 Authority Key Identifier:
keyid:95:68:66:56:2D:9F:25:83:1E:C0:AC:E8:A9:D8:CD:0E:59:4D:71:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/bfwkjGV4iJcqduQIX72Ag5iQ05k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.10.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6e:8b:b5:59:ea:74:6e:74:75:28:11:2f:c9:e4:ab:38:57:5d:
74:66:62:b9:8d:92:78:1c:a8:79:44:73:14:ee:21:01:d1:74:
d0:14:64:ed:dd:57:0e:56:ef:0e:0f:1d:e7:e3:93:ea:a9:76:
06:de:79:71:81:47:06:d9:5c:6a:b9:75:93:4f:3a:fc:56:d8:
54:cf:c2:61:26:8c:24:48:82:c4:06:97:dc:ce:85:d4:a3:12:
64:1d:6f:b0:d2:ce:52:08:2d:e1:5d:e2:c3:ab:11:28:0b:e7:
65:70:43:9a:b2:d9:4c:7e:fc:6a:0c:ad:c1:87:fa:5e:59:77:
6f:84:65:78:46:08:b8:db:79:19:30:83:c4:60:85:32:a1:dc:
f1:62:c7:9c:1f:24:e7:2e:f6:48:c0:93:e1:54:e3:56:bc:14:
9b:a9:bc:3c:99:21:b1:88:4c:da:93:24:99:9e:17:b1:d1:da:
5a:da:d0:4f:ad:3e:e8:60:bc:cd:ff:76:e0:98:57:d9:be:de:
4b:99:91:81:8e:eb:a3:d7:a0:e2:78:46:80:b1:2e:6f:0a:09:
86:e1:73:c1:9f:d3:c8:30:1f:e8:dd:cb:3a:71:c0:c8:e6:81:
8d:49:0a:7f:a1:f1:6b:67:00:9a:7c:f4:e7:d8:cc:d4:7e:fd:
db:49:f6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 19:27:59 2024 by rpki-client on console-fra.rpki-client.org