Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/BegmaEIPa7fj3TbU-0SW4DwlhIw.roa
File: BegmaEIPa7fj3TbU-0SW4DwlhIw.roa (raw, json)
Hash identifier: W3GVBfPCrqervRO8iY31mqzU6yGCs5exH0TUSkq3O7A=
Subject key identifier: 05:E8:26:68:42:0F:6B:B7:E3:DD:36:D4:FB:44:96:E0:3C:25:84:8C
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018F4FB32677712BC359B5533C9C8960E901
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/BegmaEIPa7fj3TbU-0SW4DwlhIw.roa
Signing time: Mon 06 May 2024 20:58:11 +0000
ROA not before: Mon 06 May 2024 20:58:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213220
IP address blocks: 45.8.209.0/24 maxlen: 24
213.108.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4f:b3:26:77:71:2b:c3:59:b5:53:3c:9c:89:60:e9:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: May 6 20:58:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05e82668420f6bb7e3dd36d4fb4496e03c25848c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0f:54:64:73:90:82:90:0a:cf:97:af:69:44:
6a:4c:2f:5e:39:a4:2b:51:28:43:07:b6:3f:37:70:
46:28:e7:62:f3:ed:1d:7d:ee:96:1d:a3:b0:c6:82:
2d:72:6e:b7:62:80:f3:bb:a0:a1:c4:9b:15:86:88:
18:c7:03:2a:ff:ac:b8:06:3c:ab:a6:25:46:fd:28:
39:8d:7e:b3:af:00:91:ad:a0:4a:38:4f:0a:71:1f:
e1:80:a2:2d:74:52:b9:04:65:ce:41:fa:8f:b7:ab:
59:74:82:24:5e:27:96:1a:e3:df:57:93:c5:3b:d0:
8e:d0:73:1e:67:9d:68:13:b9:5c:96:be:4e:83:70:
da:9c:00:54:e3:07:41:db:d3:7c:a7:3c:68:cc:c9:
ee:6b:42:b2:42:f1:5d:0a:de:da:1a:88:da:42:ea:
47:2f:1f:bd:b0:c3:9a:fc:42:cb:27:c8:c8:e9:26:
1c:11:26:71:ec:c1:47:61:36:3c:7e:b8:0d:8f:e6:
ce:5f:3a:6e:b9:20:c5:e5:6d:4a:c7:ca:29:97:23:
a6:2f:b1:85:69:1f:d2:d8:a6:96:0b:15:be:a0:2b:
b9:80:6b:25:e3:ea:25:6a:c7:e2:91:9e:f9:01:8e:
c4:ab:34:e4:d7:64:62:17:78:60:70:f1:31:14:bf:
d0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E8:26:68:42:0F:6B:B7:E3:DD:36:D4:FB:44:96:E0:3C:25:84:8C
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/BegmaEIPa7fj3TbU-0SW4DwlhIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.209.0/24
213.108.196.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:17:a1:46:2f:a1:60:cc:22:31:77:d6:a4:75:92:af:39:1c:
51:45:39:97:dd:56:9f:4c:54:f7:89:7a:ac:ed:c2:f4:00:43:
d8:cc:3a:90:b5:43:b1:cc:cc:35:1e:7f:30:09:b0:58:04:9e:
70:00:81:6f:6f:b6:02:1a:be:39:a1:f0:ff:0d:54:2d:1a:99:
5a:3b:05:6e:35:6c:df:c6:18:75:93:20:4c:00:46:ff:2f:08:
b0:79:df:22:48:98:d9:f1:7a:2c:a3:b8:9f:f1:30:16:da:7b:
ab:09:86:0c:d7:99:a5:a0:b4:59:47:5b:07:91:94:11:7a:80:
26:73:2a:ad:45:7b:19:bb:5c:09:9e:fc:cb:54:15:76:37:69:
0e:7b:96:f9:ad:78:8f:10:aa:53:4d:e7:ff:23:5b:7b:8f:76:
a3:91:3e:e4:19:90:57:87:7a:02:74:9d:7c:ec:ee:a3:9b:2f:
34:af:e9:be:6b:63:37:00:c0:cf:54:29:61:e2:02:e3:85:2a:
cb:53:7e:d4:1e:d5:05:4c:59:2b:a9:c3:65:70:8e:2b:ba:3b:
2c:4e:e7:49:ee:45:87:3d:d8:99:f5:db:f4:8e:b0:91:fd:39:
25:5b:22:a9:99:69:04:b0:36:49:23:69:6f:a0:23:6c:4d:6e:
b3:0b:5a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:08:52 2024 by rpki-client on console-fra.rpki-client.org