Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/BCDfkGWZ4j5sg071XDgyasOADDs.roa
File: BCDfkGWZ4j5sg071XDgyasOADDs.roa (raw, json)
Hash identifier: Jkprtz8Jaz1IFk3JeeY/eiWdxo9MdB88uQ2ZAB8xCSE=
Subject key identifier: 04:20:DF:90:65:99:E2:3E:6C:83:4E:F5:5C:38:32:6A:C3:80:0C:3B
Certificate issuer: /CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592
Certificate serial: 018D144220E5F1B713EF5727EACADC5B6A4E
Authority key identifier: 40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/BCDfkGWZ4j5sg071XDgyasOADDs.roa
Signing time: Tue 16 Jan 2024 21:51:34 +0000
ROA not before: Tue 16 Jan 2024 21:51:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211993
IP address blocks: 185.233.34.0/24 maxlen: 24
2a10:de80::/32 maxlen: 32
2a10:de80::/48 maxlen: 48
2a10:de80:1::/48 maxlen: 48
2a10:de80:b000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:14:42:20:e5:f1:b7:13:ef:57:27:ea:ca:dc:5b:6a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592
Validity
Not Before: Jan 16 21:51:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0420df906599e23e6c834ef55c38326ac3800c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:50:c0:dd:fb:4d:bf:63:26:52:35:bb:d8:b8:
84:d4:0d:06:6c:c1:bd:21:88:74:e8:b1:67:d7:58:
a1:1c:cd:da:eb:cc:5a:05:58:32:f8:0f:5f:39:91:
de:9c:b4:6c:61:f6:45:65:a3:4c:b4:2a:60:e3:d3:
9f:e1:a5:81:95:b4:f6:36:03:cb:ec:36:fb:8b:3f:
d0:e9:07:9f:db:f9:6d:0b:ed:d1:ad:be:b3:6d:14:
c0:51:48:2c:89:48:9a:42:b8:49:d0:ed:5f:9f:f9:
fb:20:ee:4a:35:b1:00:11:c0:67:1e:0d:2b:87:ac:
4a:81:0e:cd:13:8c:f2:ed:4d:11:2e:cd:2d:3d:08:
35:18:9e:4a:93:26:43:f9:78:86:e2:2d:3f:53:de:
58:35:41:f1:5a:bb:47:c7:79:82:3d:59:4f:48:31:
8d:c3:dc:f4:58:67:67:db:97:77:50:de:ef:c9:f4:
f9:44:d2:14:ae:8a:fe:b8:22:10:ce:4b:19:76:28:
7e:39:dd:93:f7:04:6a:28:24:c5:d1:c7:9c:34:3b:
4b:bc:0c:71:7e:1c:2b:d7:0a:93:15:1e:f7:7f:18:
f9:4d:c4:87:27:9a:a0:b9:ae:fc:7c:72:a8:19:ea:
c0:3c:f5:a5:8a:b7:08:51:96:a3:15:a2:e5:12:d3:
76:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:20:DF:90:65:99:E2:3E:6C:83:4E:F5:5C:38:32:6A:C3:80:0C:3B
X509v3 Authority Key Identifier:
keyid:40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/BCDfkGWZ4j5sg071XDgyasOADDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.34.0/24
IPv6:
2a10:de80::/32
Signature Algorithm: sha256WithRSAEncryption
0b:3c:27:e8:7b:19:f6:55:ac:e4:cb:e2:cd:69:4b:3e:80:10:
9d:2e:9d:3a:01:79:7c:2e:7d:c0:a2:81:f1:25:72:3b:ab:bb:
c6:51:48:26:f3:34:e8:6b:c9:72:7d:24:72:e7:e9:c3:c0:02:
eb:c8:4d:8d:b0:10:cc:d4:55:fc:64:38:28:79:52:f7:3f:cb:
a0:c0:87:80:45:ee:eb:24:1b:e0:3b:6b:60:43:9e:d0:ff:c8:
46:0f:41:d4:20:37:87:62:c1:f2:64:01:51:f6:a3:7d:b4:05:
d1:cd:0a:c4:51:d3:1e:27:73:ce:d7:02:e4:7d:49:45:15:10:
72:30:97:bd:47:b6:9c:19:1f:3c:3e:3a:e8:35:ab:85:9b:64:
3a:c4:ed:89:aa:eb:e6:ec:13:0b:fc:f1:92:cd:dd:96:82:66:
ff:9f:bd:63:aa:d0:3d:c2:a6:7d:0e:9b:9d:55:5b:d7:d3:61:
df:12:45:b8:18:13:69:4b:63:2b:92:b8:44:6f:8a:8a:df:9c:
3c:ba:11:7f:6c:aa:0b:79:58:aa:72:8d:3a:f5:af:c8:76:c2:
67:77:3d:3c:bd:e9:37:85:5c:58:3e:ec:06:68:81:cd:71:d6:
56:ca:d9:8d:75:0b:31:19:75:ab:5f:f3:d1:0d:f7:36:87:73:
99:19:cb:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:54:55 2024 by rpki-client on console-ams.rpki-client.org