Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/wj7SyWRMRiPubuFMLCrs6PxyGg0.roa
File: wj7SyWRMRiPubuFMLCrs6PxyGg0.roa (raw, json)
Hash identifier: L32mEeGZ/b56imxANN2VP6xzlePg6OOJSU50Q8FXKPg=
Subject key identifier: C2:3E:D2:C9:64:4C:46:23:EE:6E:E1:4C:2C:2A:EC:E8:FC:72:1A:0D
Certificate issuer: /CN=053f8469ec62520987896d8926c17228a7bcfb3d
Certificate serial: 018EB34DF3ECEEF822ED572D999A4A972464
Authority key identifier: 05:3F:84:69:EC:62:52:09:87:89:6D:89:26:C1:72:28:A7:BC:FB:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BT-EaexiUgmHiW2JJsFyKKe8-z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/wj7SyWRMRiPubuFMLCrs6PxyGg0.roa
Signing time: Sat 06 Apr 2024 12:06:54 +0000
ROA not before: Sat 06 Apr 2024 12:06:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 196629
IP address blocks: 91.207.218.0/24 maxlen: 24
91.207.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BT-EaexiUgmHiW2JJsFyKKe8-z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:b3:4d:f3:ec:ee:f8:22:ed:57:2d:99:9a:4a:97:24:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=053f8469ec62520987896d8926c17228a7bcfb3d
Validity
Not Before: Apr 6 12:06:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c23ed2c9644c4623ee6ee14c2c2aece8fc721a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9e:e8:54:94:70:8d:5b:16:fc:4d:96:06:d6:
0e:94:e5:f3:5a:86:20:ff:95:da:d7:36:d9:f0:f8:
55:10:30:40:cb:ad:ba:89:2a:6f:01:cd:cd:96:b9:
0c:1d:c2:6b:37:03:fc:94:78:98:5e:5b:de:75:b9:
9a:83:bc:b6:19:7f:77:29:74:19:18:67:a9:42:30:
01:ab:75:e4:96:41:3d:ab:48:f8:8e:0c:9c:a4:a6:
61:7a:de:fc:76:27:10:1d:1d:78:1e:23:06:a4:23:
14:37:10:2a:65:66:3c:0b:aa:4e:e1:0a:34:fb:8a:
d2:ba:a2:81:53:6a:3e:f8:84:d3:58:f2:3a:ec:d3:
71:2a:6c:93:2b:f1:01:2d:cb:0f:35:4a:08:f9:06:
d4:44:40:44:fd:10:21:a9:08:dd:30:66:b5:c4:53:
bf:04:9a:5d:70:04:6b:d1:d8:bd:70:1c:03:4b:a0:
f4:ae:9f:d2:c9:84:b4:87:ce:73:94:0c:c3:c0:de:
40:68:b7:62:28:79:a1:c5:b5:53:0f:b2:ec:cb:36:
12:2c:0a:d9:84:a5:cc:1c:f6:d1:b3:43:d1:75:ff:
07:4d:98:09:36:aa:a5:84:e7:7d:5a:dd:e5:ed:1b:
d8:c6:66:0f:6a:ee:18:25:b1:e3:6f:be:d8:8b:48:
99:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3E:D2:C9:64:4C:46:23:EE:6E:E1:4C:2C:2A:EC:E8:FC:72:1A:0D
X509v3 Authority Key Identifier:
keyid:05:3F:84:69:EC:62:52:09:87:89:6D:89:26:C1:72:28:A7:BC:FB:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT-EaexiUgmHiW2JJsFyKKe8-z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/wj7SyWRMRiPubuFMLCrs6PxyGg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.218.0/23
Signature Algorithm: sha256WithRSAEncryption
65:ff:2a:1c:45:78:d2:37:1f:c5:99:5b:1c:a2:c4:5e:cc:73:
35:49:c2:cf:e8:ea:27:ca:41:0b:e4:3c:0a:7e:a9:8f:ca:fe:
ee:17:cc:a9:44:07:77:2b:da:7b:f7:3a:bc:09:68:00:7d:eb:
f8:ac:89:20:b8:a9:97:84:13:92:c0:f2:61:88:db:b9:d1:70:
3c:51:3c:0f:26:d2:b8:7d:ef:c2:7e:ae:ca:9d:49:a3:f6:a3:
22:da:0e:7a:29:31:fc:e9:cc:9c:be:96:7b:7d:61:fb:a6:37:
a4:7b:4d:6d:15:57:0e:45:08:16:83:63:51:d7:92:5e:e3:d8:
17:d1:fd:bf:5e:80:80:0d:18:fe:02:2f:2e:4a:f5:28:ef:d6:
1d:18:43:1c:9f:37:bb:31:c9:4c:3f:d6:ce:80:51:4b:20:4a:
89:4a:d4:fc:84:52:f5:39:da:cd:45:68:69:a8:76:4e:43:ed:
c8:da:1c:63:84:11:7d:67:90:c7:17:e6:48:a6:b5:95:47:ee:
b4:6f:92:eb:f4:21:7b:eb:15:34:26:f1:5a:f3:9e:55:44:ca:
fb:cb:00:33:e0:9c:e5:bd:8f:ba:a6:38:86:c1:d4:f0:d6:2c:
fb:88:78:e5:d7:c8:d1:dd:90:93:05:f7:e0:ac:21:ac:31:98:
d1:f1:11:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 03:38:36 2024 by rpki-client on console-fra.rpki-client.org