Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/bbDaCf03gGSMg3F4AxKOtXtCzQI.roa
File: bbDaCf03gGSMg3F4AxKOtXtCzQI.roa (raw, json)
Hash identifier: AZ7qU4YJUj3nyjozZ+QjNi253XVgCPxid5W4fmvgvQA=
Subject key identifier: 6D:B0:DA:09:FD:37:80:64:8C:83:71:78:03:12:8E:B5:7B:42:CD:02
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018CC8DF966A1A6CF480A0C8E4346C13B44E
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/bbDaCf03gGSMg3F4AxKOtXtCzQI.roa
Signing time: Tue 02 Jan 2024 06:32:25 +0000
ROA not before: Tue 02 Jan 2024 06:32:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41904
IP address blocks: 185.229.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Jun 2024 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:96:6a:1a:6c:f4:80:a0:c8:e4:34:6c:13:b4:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 06:32:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6db0da09fd3780648c83717803128eb57b42cd02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:7e:7c:f0:34:57:9c:d6:46:c9:05:cf:03:3a:
2a:cd:36:3c:00:9a:1a:39:9e:84:2e:36:76:42:48:
b8:86:af:3c:92:dd:4b:ef:82:49:43:64:5d:9a:9c:
f7:9b:9e:ce:d4:98:20:98:8a:8d:f7:1f:03:64:49:
ab:d2:5c:3a:b7:93:cc:c7:cf:2b:fb:97:5f:72:07:
c3:72:ba:6b:5f:dc:3d:9e:07:f2:bc:73:d5:aa:f8:
1e:b5:62:e9:e8:16:76:de:c1:d0:04:f5:97:7b:a2:
48:3c:5b:bc:e9:bf:05:e3:bf:5f:b4:a0:28:a5:17:
8f:5b:2b:b8:d3:ee:03:1c:a3:30:29:25:e3:40:13:
9c:36:cb:d4:cc:bb:0a:13:50:26:8f:0d:d7:b2:4f:
09:e8:56:73:b1:a8:02:33:18:43:0b:37:92:c7:e2:
a4:7d:a0:b7:6e:8a:84:4e:b0:fb:2f:85:22:bf:84:
37:9d:f1:d1:cf:d9:56:6f:59:99:06:28:5d:55:41:
13:d1:d3:e0:bf:92:d3:e6:57:f6:0b:e8:5e:09:40:
26:50:7a:b4:f3:25:91:9c:81:e5:00:4d:ac:bb:ee:
f8:6c:17:b7:da:92:9d:c5:ba:47:ba:2e:11:72:da:
21:9e:ad:2f:dc:47:c3:81:43:e4:e5:a1:7a:09:d2:
d2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B0:DA:09:FD:37:80:64:8C:83:71:78:03:12:8E:B5:7B:42:CD:02
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/bbDaCf03gGSMg3F4AxKOtXtCzQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.67.0/24
Signature Algorithm: sha256WithRSAEncryption
77:b4:8f:de:8b:04:d4:e2:f3:9a:c8:ff:b5:2d:08:35:db:7a:
2e:6d:c5:1a:92:62:d4:cd:46:32:48:21:5b:04:b1:0b:33:37:
c5:b5:f4:6f:09:8b:4b:6f:c1:47:b5:24:e9:66:a8:48:dd:38:
f1:48:a1:97:5f:2d:9b:0c:be:38:53:0c:a9:70:ed:41:6d:ed:
22:1c:8e:2c:f6:d1:7b:10:fd:cb:ed:2c:f0:6c:d4:68:8e:84:
9b:03:0b:33:2c:23:8d:c2:bf:30:3b:80:6b:26:5e:d2:4c:c5:
9f:b3:28:c3:ba:95:d2:15:8e:57:a7:5a:20:8b:a6:23:71:fe:
25:ac:a5:0a:6f:8f:c8:50:cd:b7:b1:02:d2:4a:cb:62:18:4b:
44:19:6e:53:82:28:76:6a:ec:e1:1a:61:24:35:0f:80:e6:4e:
28:f9:ab:c8:7f:a5:bb:99:4b:00:8c:56:f1:53:71:54:20:9c:
f4:ab:91:7e:05:d2:68:34:49:46:a1:01:06:13:40:56:2a:36:
b2:74:2b:aa:43:8b:99:ee:45:b7:3c:ca:64:0c:8d:89:5a:88:
04:24:7b:59:96:25:1c:85:29:10:79:64:f3:c2:e3:9a:75:ae:
28:8a:6b:28:80:ba:51:11:cc:f9:1e:1e:f6:da:71:81:dd:38:
5a:57:36:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 12:06:02 2024 by rpki-client on console-ams.rpki-client.org