Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/BCDrkSX12VvPEJ5rbo1AGuEf7Fg.roa
File: BCDrkSX12VvPEJ5rbo1AGuEf7Fg.roa (raw, json)
Hash identifier: b72npomeakSlbK6vkxDd1iMKsJr9kESFiPFYfL75MWs=
Subject key identifier: 04:20:EB:91:25:F5:D9:5B:CF:10:9E:6B:6E:8D:40:1A:E1:1F:EC:58
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018CC8DF9C84B8EA0B1A4B3D9D55A5DC36E7
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/BCDrkSX12VvPEJ5rbo1AGuEf7Fg.roa
Signing time: Tue 02 Jan 2024 06:32:26 +0000
ROA not before: Tue 02 Jan 2024 06:32:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51200
IP address blocks: 185.102.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 May 2024 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:9c:84:b8:ea:0b:1a:4b:3d:9d:55:a5:dc:36:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 06:32:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0420eb9125f5d95bcf109e6b6e8d401ae11fec58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:16:eb:56:ea:5b:2e:0f:9e:b2:4e:09:fd:50:
c8:14:49:83:42:f0:2e:1e:ef:97:df:84:de:aa:8e:
3a:56:82:80:4e:06:a5:7b:68:b6:f0:05:87:d9:fc:
9a:cb:3b:70:1f:9a:ea:1e:32:14:97:d4:ff:78:82:
9e:e7:4a:9a:67:2f:ba:c9:22:1f:f3:27:a8:39:38:
b8:90:77:ac:2a:b1:6f:c4:4f:a6:be:ee:c0:ef:a1:
f5:6d:51:92:ef:43:21:14:37:cc:57:44:8a:04:88:
3e:4f:4a:37:a7:06:cf:71:a5:fb:2a:b9:04:2c:fd:
16:bd:19:9d:c6:29:23:17:07:5a:c4:40:fb:ff:c3:
f8:10:9f:c2:69:b2:82:eb:a6:d8:69:86:81:1e:cf:
05:fb:a9:9d:0f:53:5d:8c:b3:3b:51:3d:42:1e:38:
0a:4b:b7:fd:a3:6e:3e:24:30:21:c9:43:0f:0b:c8:
b8:29:e7:a5:a9:95:15:3b:fa:d1:48:e4:fa:41:b5:
da:63:26:5d:e0:40:77:77:52:6c:6b:1a:cb:ae:9c:
56:96:49:2b:e2:67:d6:31:8e:c6:cc:e4:8b:2a:fb:
8d:cb:6c:b4:18:17:6d:80:b4:81:b6:1d:88:d0:03:
26:f7:54:a4:5b:fa:19:cb:a6:ea:6d:c0:e7:dd:0e:
20:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:20:EB:91:25:F5:D9:5B:CF:10:9E:6B:6E:8D:40:1A:E1:1F:EC:58
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/BCDrkSX12VvPEJ5rbo1AGuEf7Fg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.138.0/24
Signature Algorithm: sha256WithRSAEncryption
78:43:d2:90:5a:20:33:38:3e:ab:7a:3b:4e:8c:a9:aa:87:0f:
49:7e:40:8e:06:e5:13:9f:91:f3:9f:2b:13:15:10:b0:47:82:
3a:9f:02:b4:8d:68:5e:a5:be:0e:c2:bf:63:be:01:6d:ff:8a:
46:73:8e:ad:7a:2b:9e:e4:9d:ec:42:cf:e1:4e:9b:78:85:7e:
99:2b:b2:4a:0b:76:59:c8:ca:d4:c5:ea:84:19:f9:a9:17:c1:
ea:22:63:4f:a4:3d:08:e2:f3:92:c8:3a:ec:bd:5d:38:0f:9e:
dc:5e:b0:d8:f1:4e:7d:1d:b6:a2:01:82:8f:28:50:4d:97:7b:
e8:c5:d3:58:d4:11:51:11:dd:81:be:88:6e:7d:22:a3:46:29:
45:9a:cd:18:d4:c1:a0:a6:69:3b:5c:af:96:1b:ce:a4:89:aa:
36:3f:3e:28:04:e5:36:91:f7:f8:37:6a:6b:3b:fb:a6:a4:b7:
93:59:9e:d0:ff:f5:d6:4a:7b:3d:b8:8e:a4:eb:24:9c:1c:6c:
7b:71:fc:d0:8e:13:de:3a:f8:fd:31:c9:5c:44:7b:a3:26:6a:
29:b1:74:2e:21:7c:3a:91:28:d0:69:4e:2e:0d:9c:4a:ee:ed:
6b:a8:1f:3c:28:0e:b9:21:a8:c9:6a:9d:43:c8:11:01:03:64:
d0:91:25:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 10:14:20 2024 by rpki-client on console-fra.rpki-client.org