Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/bxd_4QhlQprfak-mVPmLXJcmi14.roa
File: bxd_4QhlQprfak-mVPmLXJcmi14.roa (raw, json)
Hash identifier: t/Z2y4+FlSMMYj5h1Tca7K5ZNmsANEIfbFvKFPzGXq8=
Subject key identifier: 6F:17:7F:E1:08:65:42:9A:DF:6A:4F:A6:54:F9:8B:5C:97:26:8B:5E
Certificate issuer: /CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Certificate serial: 018CC56E3DA5AD4DEC828D5F7322CF886E31
Authority key identifier: 9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/bxd_4QhlQprfak-mVPmLXJcmi14.roa
Signing time: Mon 01 Jan 2024 14:29:45 +0000
ROA not before: Mon 01 Jan 2024 14:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 45000
IP address blocks: 193.0.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 11:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:3d:a5:ad:4d:ec:82:8d:5f:73:22:cf:88:6e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Validity
Not Before: Jan 1 14:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f177fe10865429adf6a4fa654f98b5c97268b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:08:08:1b:31:5e:ef:2a:05:d4:d4:d5:19:35:
a9:cd:4a:47:b5:b8:45:be:86:0f:ef:33:52:de:e4:
c3:63:27:25:0f:61:0b:96:cc:1c:1a:34:2b:25:6e:
3e:41:c1:fe:9e:9a:b9:42:e5:79:25:b6:58:c8:6c:
02:80:8e:6c:fb:c0:35:94:13:46:98:fa:5d:c6:76:
84:19:4c:58:3a:d1:a0:22:a4:e6:5b:f1:c9:cb:56:
54:47:f9:67:78:36:ec:71:cf:29:94:77:18:d5:b5:
79:4f:a2:62:47:63:2b:85:ee:8c:4f:44:e6:d7:22:
6f:08:6d:55:35:dc:2b:dd:2e:34:86:87:54:92:e2:
88:3c:50:2b:8a:e8:14:fd:a1:89:e6:c7:57:b1:1a:
32:38:d8:df:56:41:e5:c3:0f:00:0e:c4:68:b5:a0:
26:87:96:c9:f1:69:82:48:c9:e5:5e:8a:e3:64:7c:
55:dd:89:76:cb:a0:f8:71:75:49:ff:5e:dd:47:56:
4e:75:27:a4:a3:6d:98:8f:6a:54:23:34:58:27:7d:
ed:7c:b0:e6:0e:b7:be:1b:0d:65:2d:aa:c3:9d:bc:
1a:b7:b2:fa:c8:89:d0:75:30:3d:3f:1e:74:27:5e:
72:5c:7d:fe:b8:83:c7:80:cd:98:06:c6:00:fd:49:
23:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:17:7F:E1:08:65:42:9A:DF:6A:4F:A6:54:F9:8B:5C:97:26:8B:5E
X509v3 Authority Key Identifier:
keyid:9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/bxd_4QhlQprfak-mVPmLXJcmi14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.185.0/24
Signature Algorithm: sha256WithRSAEncryption
75:e4:d1:90:d1:05:4b:de:a9:b4:3e:e5:45:6f:30:14:51:9a:
4d:98:34:b6:65:ef:aa:88:6f:65:c4:aa:d4:a8:b2:4a:2f:09:
57:d9:ab:06:3c:01:c1:2a:55:ea:2a:b2:a3:25:d0:64:06:96:
50:21:f3:06:36:bd:57:87:47:86:e2:29:af:04:2f:44:d6:ff:
84:b6:66:98:b1:fa:61:6a:ef:a3:13:73:3a:18:d7:a8:06:5f:
5c:22:8c:8b:6e:00:e8:27:70:b6:d9:78:49:c7:9c:24:d5:20:
6a:b5:d8:55:72:25:1b:8a:50:c8:7a:81:1c:36:4e:c4:52:0c:
c1:d5:53:31:dd:fc:39:ec:6d:7f:71:48:8f:63:ee:33:9f:b2:
48:8b:e0:82:19:cf:de:37:17:c5:07:79:50:42:3b:13:a5:ba:
69:1b:8d:30:0f:b9:ef:4e:68:8a:bb:87:75:d7:06:92:c6:db:
1e:74:6c:cb:92:9d:3a:81:46:b1:2f:b1:6f:b4:05:3b:b8:02:
99:55:c4:fe:05:34:5e:2a:b2:de:82:22:53:0c:0d:10:9a:0f:
00:b7:ab:09:e1:8f:30:4c:3a:aa:07:92:98:58:56:9f:76:7a:
c5:f8:5c:e7:7e:3c:af:69:46:20:b4:e7:55:22:28:75:81:7e:
26:ef:f4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 21:27:56 2024 by rpki-client on console-ams.rpki-client.org