Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/BdxiybDhFedBlEbfzFdBXLiwoug.roa
File: BdxiybDhFedBlEbfzFdBXLiwoug.roa (raw, json)
Hash identifier: T6Sb/Cki+7G8K17ASpuKH8jkgIgdpJHMgoRZQvQJvy4=
Subject key identifier: 05:DC:62:C9:B0:E1:15:E7:41:94:46:DF:CC:57:41:5C:B8:B0:A2:E8
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 018CC56F086155D89DDB6F4256C309E65940
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/BdxiybDhFedBlEbfzFdBXLiwoug.roa
Signing time: Mon 01 Jan 2024 14:30:37 +0000
ROA not before: Mon 01 Jan 2024 14:30:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206796
IP address blocks: 85.14.46.0/24 maxlen: 24
185.92.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6f:08:61:55:d8:9d:db:6f:42:56:c3:09:e6:59:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: Jan 1 14:30:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05dc62c9b0e115e7419446dfcc57415cb8b0a2e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:56:ac:36:29:08:4a:d7:06:53:79:ac:b1:f3:
05:40:f8:56:db:01:a3:d5:7e:82:db:45:ce:24:34:
93:0e:68:f1:22:22:f5:ee:78:04:37:92:3e:f7:c8:
54:68:ca:7d:3c:d9:78:ff:6b:71:bf:d0:ba:49:55:
da:23:03:8d:03:80:b8:ca:e9:08:39:91:bc:c9:13:
2d:ae:b2:f3:52:c6:f4:60:22:3a:8d:b0:14:7e:96:
b5:2d:63:e1:47:d5:bc:b8:db:1d:74:81:98:68:df:
ed:b5:bd:53:74:af:92:40:1e:54:f6:91:7f:39:78:
a8:45:dd:6d:64:65:b3:3f:58:14:64:fd:99:14:cc:
74:73:09:58:4b:43:c8:51:2a:9b:69:21:b7:0b:58:
fe:8a:36:74:4c:03:9e:b6:c0:be:a6:b6:48:b5:1c:
e4:a2:09:18:f8:5b:77:c8:b1:67:4c:36:8c:a6:cf:
89:66:b7:4d:a1:5c:3e:02:da:2a:19:88:59:f9:d5:
b1:62:52:f4:91:9f:1e:75:07:20:ee:d6:66:ed:4c:
90:75:2e:bf:bc:96:c5:1d:89:20:55:55:46:20:fa:
50:e1:90:71:75:ac:e7:e0:81:3b:7a:86:35:58:eb:
45:ad:4d:15:6f:e0:14:76:99:f8:ec:91:88:d6:74:
55:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:DC:62:C9:B0:E1:15:E7:41:94:46:DF:CC:57:41:5C:B8:B0:A2:E8
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/BdxiybDhFedBlEbfzFdBXLiwoug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.14.46.0/24
185.92.133.0/24
Signature Algorithm: sha256WithRSAEncryption
66:ed:39:ce:63:21:78:6d:8c:e3:48:ba:0d:a0:46:f3:ef:43:
7e:89:5e:b8:15:0f:b8:48:32:5e:04:a0:f9:5d:a6:c3:ad:f6:
af:c9:02:dc:c0:9d:40:be:14:5d:d0:ea:75:1f:a3:aa:f4:d1:
f2:02:d9:11:74:b6:2f:b4:4e:43:0a:2b:ba:c4:e2:99:12:2d:
a8:cb:f7:54:a1:ce:b9:ea:c6:63:94:7d:d8:85:2f:0d:f0:b1:
1d:9d:cc:87:f4:a1:3d:ad:00:7e:e0:4e:74:6c:4c:f7:53:5c:
2d:6c:48:51:d0:31:50:bb:21:bc:83:f2:c3:87:3c:04:6a:7a:
71:4e:c6:13:52:3c:27:f6:28:0f:f7:98:92:de:c8:eb:ab:af:
99:57:6e:76:41:eb:47:ac:04:c4:3d:7a:80:a8:1e:06:5e:82:
d2:8f:7a:a3:56:ac:d4:86:e3:08:4d:f1:9e:f3:e5:76:d2:93:
c0:86:44:fa:d7:33:c7:41:bf:5a:e8:02:cd:16:4c:7c:79:cd:
96:a5:56:e8:be:e7:02:86:ce:0f:a3:03:c4:8d:52:76:9b:32:
b0:59:ce:34:46:00:0a:b6:cd:57:b2:f5:5a:88:8f:1b:de:b4:
5c:38:b6:87:fb:9c:db:b8:dc:bc:32:8b:58:57:d6:01:cb:61:
9f:6f:eb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:23:05 2024 by rpki-client on console-ams.rpki-client.org