Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/BvJmho0mBVVViVioGi4D_oq803s.roa
File: BvJmho0mBVVViVioGi4D_oq803s.roa (raw, json)
Hash identifier: rTgbzmvyUP2/YRsgR5/cB/nvmhYO5gjbu+RZo7VDwic=
Subject key identifier: 06:F2:66:86:8D:26:05:55:55:89:58:A8:1A:2E:03:FE:8A:BC:D3:7B
Certificate issuer: /CN=6743e5de39c21f8a78be6a457a3b86d5822bc17c
Certificate serial: 018F4A59023DF56CFAFA6D74F168F1FD4B79
Authority key identifier: 67:43:E5:DE:39:C2:1F:8A:78:BE:6A:45:7A:3B:86:D5:82:2B:C1:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/BvJmho0mBVVViVioGi4D_oq803s.roa
Signing time: Sun 05 May 2024 20:01:38 +0000
ROA not before: Sun 05 May 2024 20:01:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57358
IP address blocks: 185.236.50.0/23 maxlen: 23
2001:67c:5f8::/48 maxlen: 48
2a13:9d40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4a:59:02:3d:f5:6c:fa:fa:6d:74:f1:68:f1:fd:4b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6743e5de39c21f8a78be6a457a3b86d5822bc17c
Validity
Not Before: May 5 20:01:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=06f266868d260555558958a81a2e03fe8abcd37b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d0:88:d9:51:9c:02:83:e2:45:c8:57:23:d8:
a8:b4:08:20:de:ae:a8:cd:c3:3e:65:d2:d9:1f:6d:
c9:6e:62:08:ad:1c:7d:55:19:62:de:cd:05:5a:a8:
21:c0:d5:00:66:e5:ae:e6:92:14:71:7a:b3:4e:f8:
be:98:b2:2d:fb:19:9e:d7:87:3d:2a:e0:b3:48:35:
51:7b:3c:ed:79:50:57:7f:cd:e8:24:84:3d:08:bf:
a2:c1:10:14:66:db:56:16:34:80:ee:05:9c:a8:15:
aa:bd:c8:51:28:fc:11:f3:73:af:d3:bb:b5:0e:78:
65:81:30:a0:b7:be:06:a8:c0:8f:9d:fb:ab:51:1f:
11:32:7d:2d:9d:f1:87:5b:31:d2:87:5e:e4:47:ea:
cf:ba:6d:fc:19:80:62:d7:22:fd:6d:d0:4a:80:77:
d3:5d:1e:91:60:dd:be:84:89:9a:5f:f7:b3:44:c7:
a4:65:e5:89:0b:0a:4a:93:87:ef:19:21:61:87:f2:
1e:53:3b:98:08:38:d1:c6:b0:52:a6:fd:c0:be:30:
df:01:ae:ba:56:f3:a6:da:66:d6:19:6e:98:99:5f:
fb:06:68:21:b5:35:38:bf:21:0f:8c:a2:f8:1c:0e:
4a:18:4d:7f:74:20:3d:33:f3:4b:cc:a2:42:6f:77:
41:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F2:66:86:8D:26:05:55:55:89:58:A8:1A:2E:03:FE:8A:BC:D3:7B
X509v3 Authority Key Identifier:
keyid:67:43:E5:DE:39:C2:1F:8A:78:BE:6A:45:7A:3B:86:D5:82:2B:C1:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/BvJmho0mBVVViVioGi4D_oq803s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.50.0/23
IPv6:
2001:67c:5f8::/48
2a13:9d40::/29
Signature Algorithm: sha256WithRSAEncryption
0b:ff:ab:9d:0f:a3:c6:b7:0f:d2:6e:b5:54:49:f8:80:2c:85:
23:33:29:09:7c:7e:14:6c:5c:c3:bf:9e:f6:dc:94:8b:c5:af:
f5:53:fe:fb:fe:db:cf:86:16:e0:22:7f:31:94:b8:17:2d:2b:
bb:d0:9a:ed:e7:6d:1a:36:a4:be:4f:a0:3f:be:5a:d6:72:81:
b8:01:e6:2b:6f:ec:f3:81:de:d2:8e:93:b2:8e:27:6e:3c:31:
40:0a:b8:17:b3:ff:23:5c:a3:e5:76:a9:06:27:1c:c9:c2:05:
9d:2d:31:59:29:8e:7d:74:23:c3:02:ba:dd:35:b7:e7:0f:c8:
6d:e0:82:3c:4a:98:e8:06:4f:5d:c4:b4:87:1d:32:c5:c2:25:
39:21:ce:6b:f8:11:b3:df:f7:49:02:dc:68:63:4a:f7:50:24:
b8:26:ca:cf:76:5f:46:94:a6:ba:da:d5:ec:44:cd:42:c1:a1:
16:9c:6c:cc:2e:9a:28:9c:ef:ab:b5:7a:72:71:99:dc:f0:c8:
b8:80:93:df:48:62:15:d1:7d:bd:fb:f4:71:d6:d5:98:e6:a4:
74:ce:70:5f:24:39:c4:5b:c1:e5:49:80:ca:b3:e7:00:e1:24:
23:42:2e:e4:7f:77:72:1d:e4:1f:e5:1e:ad:90:78:bd:a3:76:
6b:d2:29:a0
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAY9KWQI99Wz6+m108Wjx/Ut5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NDNlNWRlMzljMjFmOGE3OGJlNmE0NTdhM2I4NmQ1ODIy
YmMxN2MwHhcNMjQwNTA1MjAwMTM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNmYyNjY4NjhkMjYwNTU1NTU4OTU4YTgxYTJlMDNmZThhYmNkMzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9CI2VGcAoPiRchXI9iotAgg3q6o
zcM+ZdLZH23JbmIIrRx9VRli3s0FWqghwNUAZuWu5pIUcXqzTvi+mLIt+xme14c9
KuCzSDVRezzteVBXf83oJIQ9CL+iwRAUZttWFjSA7gWcqBWqvchRKPwR83Ov07u1
DnhlgTCgt74GqMCPnfurUR8RMn0tnfGHWzHSh17kR+rPum38GYBi1yL9bdBKgHfT
XR6RYN2+hImaX/ezRMekZeWJCwpKk4fvGSFhh/IeUzuYCDjRxrBSpv3AvjDfAa66
VvOm2mbWGW6YmV/7BmghtTU4vyEPjKL4HA5KGE1/dCA9M/NLzKJCb3dBcQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFAbyZoaNJgVVVYlYqBouA/6KvNN7MB8GA1UdIwQY
MBaAFGdD5d45wh+KeL5qRXo7htWCK8F8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjBQbDNqbkNINHA0dm1wRmVqdUcxWUlyd1h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8zOWU1YzUtNDMxYy00Mzc1LWI3ZTEt
N2FhZTUyMTc2ZDhiLzEvQnZKbWhvMG1CVlZWaVZpb0dpNERfb3E4MDNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8zOWU1YzUtNDMxYy00Mzc1LWI3ZTEtN2FhZTUyMTc2ZDhi
LzEvWjBQbDNqbkNINHA0dm1wRmVqdUcxWUlyd1h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQBuewyMBYE
AgACMBADBwAgAQZ8BfgDBQMqE51AMA0GCSqGSIb3DQEBCwUAA4IBAQAL/6udD6PG
tw/SbrVUSfiALIUjMykJfH4UbFzDv5723JSLxa/1U/77/tvPhhbgIn8xlLgXLSu7
0Jrt520aNqS+T6A/vlrWcoG4AeYrb+zzgd7SjpOyjiduPDFACrgXs/8jXKPldqkG
JxzJwgWdLTFZKY59dCPDArrdNbfnD8ht4II8SpjoBk9dxLSHHTLFwiU5Ic5r+BGz
3/dJAtxoY0r3UCS4JsrPdl9GlKa62tXsRM1CwaEWnGzMLpoonO+rtXpycZnc8Mi4
gJPfSGIV0X29+/Rx1tWY5qR0znBfJDnEW8HlSYDKs+cA4SQjQi7kf3dyHeQf5R6t
kHi9o3Zr0img
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:15:09 2024 by rpki-client on console-fra.rpki-client.org