Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/vB2lKyci65KRHyUsuBF1geqnui0.roa
File: vB2lKyci65KRHyUsuBF1geqnui0.roa (raw, json)
Hash identifier: vmUp4LyMO2Qu/gOP/RPoXLqWERMp08wwXipH45wBylE=
Subject key identifier: BC:1D:A5:2B:27:22:EB:92:91:1F:25:2C:B8:11:75:81:EA:A7:BA:2D
Certificate issuer: /CN=bfe57cc3db1840470c73a09605d187d7bd9595cb
Certificate serial: 018CC801999653DED28FCF29F21132DE6F08
Authority key identifier: BF:E5:7C:C3:DB:18:40:47:0C:73:A0:96:05:D1:87:D7:BD:95:95:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-V8w9sYQEcMc6CWBdGH172Vlcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/vB2lKyci65KRHyUsuBF1geqnui0.roa
Signing time: Tue 02 Jan 2024 02:29:57 +0000
ROA not before: Tue 02 Jan 2024 02:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205544
IP address blocks: 185.245.124.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-V8w9sYQEcMc6CWBdGH172Vlcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 10:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:99:96:53:de:d2:8f:cf:29:f2:11:32:de:6f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe57cc3db1840470c73a09605d187d7bd9595cb
Validity
Not Before: Jan 2 02:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc1da52b2722eb92911f252cb8117581eaa7ba2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:17:08:86:e0:a6:93:b9:18:5b:e4:7d:55:96:
de:94:8a:29:33:b3:ad:da:b6:09:0d:a9:e7:8a:8c:
6d:9c:2a:b1:af:bc:74:6f:8f:50:8f:30:b2:1e:9a:
8f:39:03:63:5d:1b:1d:93:48:f8:6c:bd:6f:f7:3a:
38:f4:cd:4e:36:4b:00:f5:1d:82:df:04:48:1e:3d:
d2:80:fb:ca:37:f5:1f:76:b7:c8:fd:66:9c:47:52:
72:7d:f3:53:a7:bd:49:aa:f9:96:86:74:c4:2c:ef:
24:c1:ac:d2:60:cd:30:58:2f:ef:b3:61:f8:88:05:
3d:d0:4c:dd:63:e4:04:0c:81:b8:b1:4d:f6:d7:5b:
0c:ec:5f:f7:89:83:d2:c9:79:cf:51:28:cc:95:ce:
a5:a4:db:b1:f8:d1:16:07:ca:cc:13:c7:e2:9b:32:
0d:50:b3:d1:f2:9d:1c:75:fc:db:de:bb:e8:ea:42:
79:58:1a:d5:c6:91:cc:1f:8a:6d:d1:43:4e:ca:2c:
03:7c:2a:71:60:ef:cd:bf:51:eb:f5:89:62:b0:c0:
bf:53:af:f7:1e:b8:92:52:a3:b3:75:f6:3f:04:4b:
73:b6:52:74:5b:61:88:c6:72:75:13:ef:ea:42:ba:
f7:5d:f4:0d:77:01:d6:fb:c9:12:10:d5:d4:fb:cb:
df:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1D:A5:2B:27:22:EB:92:91:1F:25:2C:B8:11:75:81:EA:A7:BA:2D
X509v3 Authority Key Identifier:
keyid:BF:E5:7C:C3:DB:18:40:47:0C:73:A0:96:05:D1:87:D7:BD:95:95:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-V8w9sYQEcMc6CWBdGH172Vlcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/vB2lKyci65KRHyUsuBF1geqnui0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.124.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:b2:9d:91:10:81:35:90:cb:d4:ea:84:f2:ae:20:ca:86:89:
b9:aa:ed:81:68:a5:0f:e2:0e:ed:18:fa:08:bd:bd:7b:46:6e:
4a:15:ad:a4:7a:1b:91:fb:8e:00:49:4b:0d:8a:c0:f5:59:36:
ac:d4:82:4f:16:c2:6c:ba:78:03:65:44:21:1d:3a:9b:be:35:
5f:6a:72:5c:25:99:04:31:dd:cc:2a:ef:86:9a:09:ff:e1:0c:
7a:12:03:7d:47:4f:ae:10:14:96:e5:36:3c:43:c1:1b:f5:04:
1a:02:57:1f:c9:55:09:3e:51:6d:25:d4:e7:d5:5e:dd:3e:28:
93:09:bd:2c:65:6b:0c:c1:cc:fe:53:f6:27:25:a4:ae:45:ea:
53:7f:0f:47:21:21:ed:17:c2:95:57:6f:8b:8a:d3:08:52:b0:
8a:5d:b4:f7:b7:07:23:a4:d6:c7:25:97:31:2e:0a:55:22:e5:
fa:91:59:90:67:9b:91:ef:b0:8e:7a:92:cc:2c:b7:08:f3:8e:
85:b0:28:e1:3b:7f:e0:3e:38:ed:6d:a0:62:ac:b4:d7:35:dd:
fb:60:4d:99:ce:52:b1:56:93:aa:8b:71:52:cd:4f:9b:09:e6:
e9:38:e3:f1:9b:fe:d7:cd:f1:e8:16:56:c5:c6:1a:42:e9:ca:
d3:b3:03:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 18:51:41 2024 by rpki-client on console-ams.rpki-client.org