Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/B0VWJP-TXcJH7Sff-BolI2aKgs8.roa
File: B0VWJP-TXcJH7Sff-BolI2aKgs8.roa (raw, json)
Hash identifier: q2t2jXRsFXQKYfWM1lbpH/Gj0VjdtsD3khJY0hRifp0=
Subject key identifier: 07:45:56:24:FF:93:5D:C2:47:ED:27:DF:F8:1A:25:23:66:8A:82:CF
Certificate issuer: /CN=4bef30624210c00d3a86dfd6c8010612bb1b12a0
Certificate serial: 018D78C2E8F32AC36A2842F6AC5515928A94
Authority key identifier: 4B:EF:30:62:42:10:C0:0D:3A:86:DF:D6:C8:01:06:12:BB:1B:12:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/B0VWJP-TXcJH7Sff-BolI2aKgs8.roa
Signing time: Mon 05 Feb 2024 10:14:15 +0000
ROA not before: Mon 05 Feb 2024 10:14:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9145
IP address blocks: 193.101.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:78:c2:e8:f3:2a:c3:6a:28:42:f6:ac:55:15:92:8a:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bef30624210c00d3a86dfd6c8010612bb1b12a0
Validity
Not Before: Feb 5 10:14:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07455624ff935dc247ed27dff81a2523668a82cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:28:fa:7b:84:84:e6:57:63:84:4b:a3:99:11:
d4:8d:7a:47:8f:4f:69:6f:1d:d5:91:09:24:b5:30:
0e:ab:98:6f:53:21:c5:03:44:af:68:5a:28:02:88:
ca:56:d6:55:d6:50:5d:b4:38:3d:db:e1:df:b1:e1:
80:bb:85:b7:33:1b:5e:75:47:14:4e:4a:09:27:b1:
09:99:a9:c0:73:43:bf:71:ad:1d:9a:c1:17:a2:96:
06:4f:4e:d7:59:ef:82:a3:e6:2d:40:96:83:92:cc:
4d:7a:7d:ad:30:40:d4:e0:06:f7:8d:5d:3e:10:5f:
02:62:b4:d0:2e:70:9b:c2:26:97:ff:b8:b0:aa:82:
fe:e4:3d:28:63:33:28:24:57:dd:4d:02:19:dc:ab:
39:9d:71:3b:b1:fa:9c:14:95:44:ec:c9:48:fc:cc:
fb:3d:9e:f9:2f:6e:89:ad:d6:b5:61:74:fa:e2:6d:
68:09:ef:fd:ef:66:32:5a:c8:5a:37:cd:bb:52:3b:
d5:7e:8d:23:37:b2:f2:cb:5c:af:32:f5:4c:a4:af:
5c:dc:86:dc:40:6a:21:16:e9:fe:64:f4:c4:06:27:
6c:10:e2:f4:83:a4:8f:c4:d9:c2:ed:82:ee:15:7d:
24:3e:c3:d4:52:59:4f:d1:0e:a0:94:1d:60:2f:f5:
a8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:45:56:24:FF:93:5D:C2:47:ED:27:DF:F8:1A:25:23:66:8A:82:CF
X509v3 Authority Key Identifier:
keyid:4B:EF:30:62:42:10:C0:0D:3A:86:DF:D6:C8:01:06:12:BB:1B:12:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/B0VWJP-TXcJH7Sff-BolI2aKgs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.101.250.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:73:b5:e4:13:00:10:c6:e4:a1:8c:d5:b9:e3:1f:24:a3:b5:
59:b0:92:ae:61:f1:9d:ac:9f:7f:32:42:86:f6:6a:8e:55:27:
10:28:21:df:e9:5a:22:fd:14:c1:b6:18:14:82:cf:14:d6:f7:
f5:09:3d:dd:5d:27:3b:bb:43:f4:1e:ca:22:88:9c:3e:f7:a5:
bc:ab:11:1e:5b:e4:5a:aa:da:28:95:72:0a:3a:ba:21:02:8b:
51:0a:c3:46:b9:dd:b2:72:27:45:33:ef:e2:e9:46:3b:5a:c4:
9f:43:8a:9f:d1:a5:43:72:df:77:4a:bd:5d:d1:ef:86:f2:30:
b8:56:7e:56:a6:bc:7e:a4:ad:bd:25:75:20:3c:97:8c:bd:a0:
82:ba:a9:87:20:6b:9a:21:94:36:d4:5a:1d:9a:88:de:0d:17:
d4:6c:27:13:47:d2:d3:4a:1c:0b:4c:97:3b:33:8c:49:d3:32:
b6:78:30:ed:95:9d:1c:f6:a6:2b:1b:a2:75:86:fb:c1:c5:b6:
c6:90:89:a5:ae:e2:e6:fd:e4:ca:af:4a:40:ef:d3:8c:5d:92:
92:da:cf:3e:4f:ed:00:df:c9:72:ff:e1:5f:af:2f:c8:02:68:
ef:12:cf:03:4e:a8:d2:4d:9f:c8:9f:2c:63:62:f9:c8:40:91:
cb:e8:f7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 22:18:40 2024 by rpki-client on console-fra.rpki-client.org