Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/BBTzC1hfW78kw7OlpDLZSxuWPdQ.roa
File: BBTzC1hfW78kw7OlpDLZSxuWPdQ.roa (raw, json)
Hash identifier: BhxEDCZvX+ayycatvRtRBUHcz4Nht3WfjtjN+e3AbQw=
Subject key identifier: 04:14:F3:0B:58:5F:5B:BF:24:C3:B3:A5:A4:32:D9:4B:1B:96:3D:D4
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 018CC56EEDCB00ACAC05BDC990766B21B802
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/BBTzC1hfW78kw7OlpDLZSxuWPdQ.roa
Signing time: Mon 01 Jan 2024 14:30:30 +0000
ROA not before: Mon 01 Jan 2024 14:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199048
IP address blocks: 94.72.146.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:ed:cb:00:ac:ac:05:bd:c9:90:76:6b:21:b8:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 1 14:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0414f30b585f5bbf24c3b3a5a432d94b1b963dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4b:0e:db:79:47:0f:a8:56:28:9a:a3:4f:97:
05:2e:36:bf:3f:56:63:ee:31:ac:62:94:4f:14:67:
d5:cb:99:48:f7:29:cb:d1:89:fa:cf:36:4b:22:00:
41:9c:77:80:55:f7:65:49:3e:36:b5:03:79:3e:bf:
0c:da:68:0e:be:48:dd:50:bb:05:63:49:38:31:27:
96:97:46:01:53:ca:0d:a2:72:15:b5:98:c3:5a:69:
1e:08:5e:fe:f2:da:3e:c9:08:16:0b:fc:d3:7a:b5:
fc:0a:00:ca:90:75:89:32:bb:ed:74:16:a3:10:50:
c2:a9:99:32:99:74:72:f6:43:50:38:dc:cd:ad:35:
2b:03:5a:1d:85:4b:bb:67:c6:73:9a:f3:6b:7a:5a:
7f:a0:cd:62:dd:c3:4e:bf:59:ad:57:71:cb:f5:f3:
bb:75:29:5c:99:cc:42:67:bb:ed:96:48:dd:ba:8a:
45:9e:0e:17:09:3d:8c:83:a9:a6:b4:29:16:9b:d4:
41:e5:1b:b8:4c:86:7a:53:0d:7e:e9:a9:ec:90:47:
a6:cf:7c:56:00:40:5e:09:5f:fb:cf:66:9e:fa:04:
c8:79:ac:b4:b6:79:0d:0c:bf:89:1d:7d:ce:ce:66:
bf:b8:46:9c:8b:d1:27:b5:56:70:bd:f7:56:1b:01:
46:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:14:F3:0B:58:5F:5B:BF:24:C3:B3:A5:A4:32:D9:4B:1B:96:3D:D4
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/BBTzC1hfW78kw7OlpDLZSxuWPdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.72.146.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:4a:96:b5:e3:6a:74:9a:83:63:f7:a1:08:1a:89:5e:a9:0e:
f7:49:6b:b9:94:51:91:f4:7c:02:54:a6:05:8e:ad:4c:3c:bf:
85:ea:49:c2:27:46:b1:99:46:4c:91:e3:21:4f:d1:ea:dc:b0:
64:74:35:37:5d:35:13:7c:d7:82:b3:c3:97:bb:22:0e:dc:ca:
35:e9:28:8c:97:79:d4:89:af:23:97:db:03:af:ea:9b:b7:0f:
0e:23:bd:a8:59:9c:23:81:58:bc:c4:3f:bf:af:e5:b3:df:c2:
7a:25:d5:5a:f5:68:04:32:f7:1b:a7:14:8b:2f:7c:51:cb:bd:
ab:f1:d6:c1:40:a5:4f:22:6c:74:fe:0a:b5:20:10:ae:30:f8:
7c:0a:51:93:30:b5:ad:dd:c5:56:f6:19:d6:65:98:c9:a3:1e:
de:2e:9f:71:02:c0:bd:23:bd:f1:ad:55:70:05:ae:fb:8b:dc:
cf:3e:87:d0:cb:9f:0a:67:11:26:0c:67:09:e2:1e:97:74:cd:
74:ae:31:a6:99:87:cd:f2:b9:9c:e7:7c:20:c3:e5:74:4a:e6:
f8:63:ec:ed:cf:73:f2:28:3e:93:22:57:5c:f5:e1:89:57:af:
a0:48:ca:35:ac:23:ff:91:f7:91:03:a4:42:09:36:95:4b:d9:
58:93:83:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:00:25 2024 by rpki-client on console-fra.rpki-client.org