Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/BLdASE4AwE_pYovPJn30di8s99E.roa
File: BLdASE4AwE_pYovPJn30di8s99E.roa (raw, json)
Hash identifier: j9A7sdu0kEiEVGfkn1Rx5vRPFZNX44Ib9mIv0/k1M7g=
Subject key identifier: 04:B7:40:48:4E:00:C0:4F:E9:62:8B:CF:26:7D:F4:76:2F:2C:F7:D1
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 018CC56EFE522A0F1FC8C8C47CB4EB9D5E3E
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/BLdASE4AwE_pYovPJn30di8s99E.roa
Signing time: Mon 01 Jan 2024 14:30:34 +0000
ROA not before: Mon 01 Jan 2024 14:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35503
IP address blocks: 89.252.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:fe:52:2a:0f:1f:c8:c8:c4:7c:b4:eb:9d:5e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: Jan 1 14:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=04b740484e00c04fe9628bcf267df4762f2cf7d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:64:f3:97:0b:07:ca:0f:ce:a6:18:38:eb:a3:
32:6f:ca:29:6e:c6:f7:21:74:a4:54:42:f4:8f:a1:
0c:15:fa:6b:7e:13:78:bb:78:25:10:b4:8d:df:ca:
b9:9b:69:48:dc:c1:4a:f9:d6:ca:01:17:82:c7:80:
8d:fd:f0:ca:6c:5b:ee:59:70:8b:e2:e2:b1:f2:63:
77:39:6e:05:67:d6:be:25:9f:ac:ca:ee:fb:cb:1b:
80:59:7c:30:12:44:ff:5f:72:05:82:77:ef:38:f7:
b7:70:62:1d:53:a0:90:da:ae:fe:bd:ee:1d:21:10:
8b:eb:d6:b7:f9:35:dc:7f:78:bd:fb:45:8e:8e:84:
71:71:bb:7a:b4:69:c8:64:96:a4:b1:ff:df:96:db:
d1:43:ef:79:ed:2f:21:ad:97:de:64:8b:5f:06:e5:
68:82:81:fb:31:80:ac:6b:d7:99:3c:1c:d5:67:f5:
b9:08:8b:82:8a:b2:13:1d:ee:0d:d5:56:91:2d:35:
b5:5a:14:56:6b:eb:23:d4:90:3c:81:f1:d2:82:95:
72:6d:39:a3:86:d9:cf:28:cd:96:6d:17:85:e5:d6:
e6:f6:6c:e1:d6:11:32:3f:63:ce:37:fa:59:b4:7b:
be:75:a2:bb:d1:60:35:fa:fd:d6:1b:ab:a6:db:2a:
a8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B7:40:48:4E:00:C0:4F:E9:62:8B:CF:26:7D:F4:76:2F:2C:F7:D1
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/BLdASE4AwE_pYovPJn30di8s99E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.252.196.0/24
Signature Algorithm: sha256WithRSAEncryption
71:14:f7:2a:64:8c:60:2c:5e:d4:c7:a4:90:69:2f:bc:f7:0a:
f1:f2:c1:1b:87:c8:00:af:b4:15:8a:49:3f:43:78:e3:9b:a4:
ac:b1:2d:86:a0:3c:2f:b4:5d:bf:af:2d:4b:57:4e:2b:bb:c5:
30:2a:12:69:83:5f:c0:18:03:01:0f:bf:e7:28:6e:aa:1c:ae:
44:d2:f9:dd:97:85:e5:6a:7a:40:f0:a8:4a:b9:c7:4e:4a:3c:
c9:0a:00:cb:c7:83:30:b8:6a:7b:5f:b5:49:e4:88:94:98:1e:
4d:45:14:b7:0d:b8:1a:76:7f:47:d4:31:a1:12:1d:ab:37:61:
3b:9c:c0:74:5d:56:23:f0:e2:db:ba:c5:c9:b7:58:e6:c3:a9:
dd:8a:54:42:f0:55:fd:96:ec:e1:90:d9:6a:81:d2:eb:68:ad:
4d:e6:bb:99:b6:b1:12:b4:3a:74:a7:84:f3:d4:99:07:67:c9:
33:ef:69:3d:c5:80:43:ba:0c:e7:15:ed:6d:9b:93:f5:75:e8:
aa:27:68:2a:10:b6:16:36:a8:78:62:71:30:70:48:8c:5d:dd:
6c:d8:c2:f9:6f:03:b1:4a:1d:f4:0a:24:07:88:1f:6f:14:dc:
6d:f4:31:58:53:56:ce:f5:0f:d1:a2:14:08:3d:8c:a3:d2:a5:
53:c4:af:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 20:38:15 2024 by rpki-client on console-ams.rpki-client.org