Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/kHaLra5ESw60J7J_ZJOHUym84a8.roa
File: kHaLra5ESw60J7J_ZJOHUym84a8.roa (raw, json)
Hash identifier: OagdNW2Uuuoo8HIRYYtmEoSTP0ZEdNWfN0PiN4sWCPw=
Subject key identifier: 90:76:8B:AD:AE:44:4B:0E:B4:27:B2:7F:64:93:87:53:29:BC:E1:AF
Certificate issuer: /CN=053f8469ec62520987896d8926c17228a7bcfb3d
Certificate serial: 018F3B25622F161504281C947598E2189352
Authority key identifier: 05:3F:84:69:EC:62:52:09:87:89:6D:89:26:C1:72:28:A7:BC:FB:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BT-EaexiUgmHiW2JJsFyKKe8-z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/kHaLra5ESw60J7J_ZJOHUym84a8.roa
Signing time: Thu 02 May 2024 21:10:56 +0000
ROA not before: Thu 02 May 2024 21:10:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197015
IP address blocks: 91.219.140.0/22 maxlen: 22
91.221.6.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BT-EaexiUgmHiW2JJsFyKKe8-z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 14:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3b:25:62:2f:16:15:04:28:1c:94:75:98:e2:18:93:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=053f8469ec62520987896d8926c17228a7bcfb3d
Validity
Not Before: May 2 21:10:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=90768badae444b0eb427b27f6493875329bce1af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:41:ce:be:14:66:58:cf:7b:cb:9d:a4:04:9f:
c3:92:b7:3d:66:a4:a8:f3:9e:f3:c6:3f:d4:5d:27:
de:7b:c5:c6:a7:11:a0:ac:6b:14:9a:b9:7a:e7:a9:
c4:3c:59:74:26:ac:10:fa:31:1d:01:7f:29:e4:57:
16:bc:14:88:d5:50:14:2d:0c:33:68:af:a7:28:80:
de:24:8d:d4:da:b9:5f:66:02:5e:42:5e:f4:a6:3f:
42:e6:e6:79:67:80:7a:1d:ee:cc:6e:e3:44:25:b0:
e7:84:5f:1f:3b:46:80:16:67:6e:8a:ec:0f:cf:e4:
7b:7d:c5:a4:84:ee:36:46:c2:06:fb:c0:ec:94:fb:
0d:bd:88:70:68:6e:31:0b:7a:d5:cb:19:9f:f4:53:
23:ea:3a:94:cb:fd:9d:bd:ed:98:91:42:17:32:03:
c2:a8:75:24:9a:54:4b:e4:60:7e:83:28:a3:97:b5:
9c:a7:ef:8c:7f:6f:3a:d5:46:93:65:27:f6:65:c2:
59:e2:8e:fe:05:53:d6:01:51:10:b4:14:2d:d8:49:
90:f4:3f:b5:65:a3:fa:19:98:2d:68:7f:cc:26:0c:
97:e6:8f:f3:71:28:4c:24:7a:c2:97:89:ad:64:02:
6a:18:51:e1:04:70:f1:a2:41:41:49:d5:18:5f:c3:
8e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:76:8B:AD:AE:44:4B:0E:B4:27:B2:7F:64:93:87:53:29:BC:E1:AF
X509v3 Authority Key Identifier:
keyid:05:3F:84:69:EC:62:52:09:87:89:6D:89:26:C1:72:28:A7:BC:FB:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT-EaexiUgmHiW2JJsFyKKe8-z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/kHaLra5ESw60J7J_ZJOHUym84a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.140.0/22
91.221.6.0/23
Signature Algorithm: sha256WithRSAEncryption
63:c1:9f:5e:18:2e:3d:2a:c3:ec:3f:e3:25:73:1d:11:a6:0c:
c4:32:e7:85:f8:d9:11:61:05:09:6d:67:5f:57:c7:60:ec:79:
75:0c:5a:8f:fd:1f:7a:56:63:88:df:07:4a:d7:5a:5e:ec:4b:
11:b7:69:17:e7:ef:4e:48:cc:2e:56:9d:02:8c:5a:42:f8:8e:
0a:56:eb:41:90:8c:ca:e7:a6:1c:c7:88:f1:88:79:ef:f1:f2:
7c:5a:0b:b8:44:39:ec:0d:1f:9b:5a:bf:08:36:2f:36:7d:5d:
ca:67:38:f8:f6:77:45:5c:47:08:34:f6:c9:5b:d1:31:01:10:
84:9d:0c:82:9a:28:ea:52:44:d7:9b:13:bc:93:dc:70:16:c6:
59:4a:1f:44:27:81:48:5c:f1:cf:e3:29:a2:4a:73:29:f0:9c:
30:47:5d:40:78:22:9c:f5:50:18:98:f2:ca:db:e2:27:bc:42:
52:60:ea:40:af:3c:ca:6b:0e:cd:d5:02:ea:7c:75:dc:32:d2:
e0:51:7a:35:74:30:e6:ac:78:da:3a:4c:ae:55:0d:f1:56:11:
90:cd:7a:69:96:2c:c6:22:73:3c:59:8a:d4:63:96:ce:98:02:
ef:40:0a:ab:ce:53:0f:71:bf:a2:b6:87:1e:2b:fb:fe:db:51:
7f:b1:38:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 00:02:20 2024 by rpki-client on console-ams.rpki-client.org