Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/6e12c8-9dd7-478b-9071-1423e4a07296/1/bt-EFFaHB8Ro_HwnNbh9aAK8amI.roa
File: bt-EFFaHB8Ro_HwnNbh9aAK8amI.roa (raw, json)
Hash identifier: MOkpfZ3gNS3lmgm+HCRI4PSiV0Fm30N1NcdjldPQlAM=
Subject key identifier: 6E:DF:84:14:56:87:07:C4:68:FC:7C:27:35:B8:7D:68:02:BC:6A:62
Certificate issuer: /CN=620d0fcb4b94e411a8de26209dc15e32dfa89aa0
Certificate serial: 018CC4939A4FF7B26C5B18407F3942812B72
Authority key identifier: 62:0D:0F:CB:4B:94:E4:11:A8:DE:26:20:9D:C1:5E:32:DF:A8:9A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yg0Py0uU5BGo3iYgncFeMt-omqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/6e12c8-9dd7-478b-9071-1423e4a07296/1/bt-EFFaHB8Ro_HwnNbh9aAK8amI.roa
Signing time: Mon 01 Jan 2024 10:30:56 +0000
ROA not before: Mon 01 Jan 2024 10:30:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200195
IP address blocks: 91.211.114.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/6e12c8-9dd7-478b-9071-1423e4a07296/1/Yg0Py0uU5BGo3iYgncFeMt-omqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/6e12c8-9dd7-478b-9071-1423e4a07296/1/Yg0Py0uU5BGo3iYgncFeMt-omqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yg0Py0uU5BGo3iYgncFeMt-omqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jul 2024 14:20:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:9a:4f:f7:b2:6c:5b:18:40:7f:39:42:81:2b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=620d0fcb4b94e411a8de26209dc15e32dfa89aa0
Validity
Not Before: Jan 1 10:30:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6edf8414568707c468fc7c2735b87d6802bc6a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a6:17:84:11:c8:5c:5a:fb:00:ac:fc:45:e4:
45:ac:b8:08:81:34:06:0c:93:7a:6f:96:8b:37:8a:
a0:72:f0:72:57:69:7e:cf:69:9b:98:93:f2:12:2c:
ee:12:8d:4f:95:f1:dc:b1:68:f5:40:54:2f:27:f9:
b2:8d:8e:d2:86:60:e9:eb:b9:1a:8d:cf:5a:11:be:
f6:dd:3d:4d:08:3d:74:99:c8:1a:64:e2:e9:6d:bf:
ea:7c:e0:32:7c:c5:2e:85:6d:e9:57:f2:34:05:70:
31:27:19:db:dd:f2:41:bf:09:eb:fe:2d:53:e7:a6:
3d:f4:a8:f7:96:e8:91:ea:4e:e2:ee:73:47:89:6b:
6b:5d:be:23:fe:84:d5:6c:f2:c1:63:ba:9a:3c:b9:
8e:ed:69:cd:28:de:7a:97:2a:49:c3:03:14:9b:d1:
45:c1:16:95:c5:3d:c2:98:1d:75:27:18:33:eb:db:
79:8f:de:34:f8:07:f1:c4:47:54:54:c3:52:48:ad:
73:41:4a:4f:18:87:89:cd:7d:c7:c8:0a:3c:1f:11:
5e:29:fe:39:84:f6:f5:fb:b2:cd:b0:9a:5a:4a:a3:
82:d5:90:46:d7:c0:0e:20:87:d6:53:c8:8f:57:8d:
8c:f0:72:68:e4:7c:7f:9a:20:07:0e:c5:79:ee:61:
88:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:DF:84:14:56:87:07:C4:68:FC:7C:27:35:B8:7D:68:02:BC:6A:62
X509v3 Authority Key Identifier:
keyid:62:0D:0F:CB:4B:94:E4:11:A8:DE:26:20:9D:C1:5E:32:DF:A8:9A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yg0Py0uU5BGo3iYgncFeMt-omqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6e12c8-9dd7-478b-9071-1423e4a07296/1/bt-EFFaHB8Ro_HwnNbh9aAK8amI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6e12c8-9dd7-478b-9071-1423e4a07296/1/Yg0Py0uU5BGo3iYgncFeMt-omqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.114.0/24
Signature Algorithm: sha256WithRSAEncryption
03:ec:81:19:ed:0c:bd:82:e0:07:ce:29:e0:61:d2:a8:d1:33:
88:6a:9b:db:37:c1:ae:be:bf:87:f1:87:83:13:7d:ac:36:f5:
d9:be:7f:a1:8b:fb:9b:ad:f0:8a:6a:8d:b9:0f:57:67:b3:73:
2f:23:94:8a:71:d2:e1:08:e9:7b:bb:c5:0b:38:89:19:7a:8e:
91:32:db:3a:44:8d:5a:38:a8:c5:7d:5a:4a:ff:d5:fb:e3:88:
fb:ef:b1:65:7e:af:1e:97:20:61:19:bb:f8:65:0e:00:05:c6:
65:b1:ab:81:43:2b:8a:35:37:7b:3e:7a:a3:96:de:99:88:aa:
9e:dd:09:a5:3b:9c:0d:25:97:6e:a3:50:0a:eb:ad:55:fd:a6:
a3:04:72:0b:42:7c:46:a2:29:8e:26:85:5c:79:64:fc:c7:27:
32:7c:ac:3f:97:3b:6e:93:dc:70:42:df:7b:5a:08:6b:48:ec:
c2:81:de:c8:aa:ae:47:3a:e5:df:f8:fa:49:d5:e7:fb:34:5a:
f6:6d:29:64:16:59:7c:43:10:f8:ca:5e:67:bf:2e:39:a0:e2:
82:75:d6:c3:ac:8b:1c:63:55:1f:5d:e2:39:0e:81:7e:2b:d3:
c3:92:a4:cf:5e:41:41:b2:a6:fe:57:be:86:64:f8:6c:b5:af:
2d:71:e0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 21:42:57 2024 by rpki-client on console-ams.rpki-client.org