Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/BV6b_9GcjAbADVNxTJaFAJQEzoc.roa
File: BV6b_9GcjAbADVNxTJaFAJQEzoc.roa (raw, json)
Hash identifier: sW4XQ4M/EpgGEUHzFtNEcfIZpSh176Gmlq2ljM8MYOM=
Subject key identifier: 05:5E:9B:FF:D1:9C:8C:06:C0:0D:53:71:4C:96:85:00:94:04:CE:87
Certificate issuer: /CN=3936daf03756baf83ba4f38dbe5d68cb9baceff9
Certificate serial: 0191B29F3045D2BF7CD502AACF3D5B21DD4A
Authority key identifier: 39:36:DA:F0:37:56:BA:F8:3B:A4:F3:8D:BE:5D:68:CB:9B:AC:EF:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTba8DdWuvg7pPONvl1oy5us7_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/BV6b_9GcjAbADVNxTJaFAJQEzoc.roa
Signing time: Mon 02 Sep 2024 12:04:22 +0000
ROA not before: Mon 02 Sep 2024 12:04:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 149457
IP address blocks: 195.190.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTba8DdWuvg7pPONvl1oy5us7_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b2:9f:30:45:d2:bf:7c:d5:02:aa:cf:3d:5b:21:dd:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3936daf03756baf83ba4f38dbe5d68cb9baceff9
Validity
Not Before: Sep 2 12:04:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=055e9bffd19c8c06c00d53714c9685009404ce87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bb:d3:8b:f1:62:15:46:1f:3a:0e:62:ad:ec:
9c:ad:95:cd:75:35:ab:94:5e:97:bd:32:ec:14:4b:
1d:0e:19:bc:59:4f:04:40:4a:ca:60:72:09:33:06:
be:5f:b9:fe:5a:4b:00:0e:a2:20:19:a2:2a:a5:dd:
e2:fc:50:68:1e:97:a4:a6:59:06:3b:45:1a:17:c9:
a6:46:32:7c:89:00:b8:27:04:0b:9a:3a:7e:76:fe:
7f:78:d8:4d:3a:e9:92:76:65:9d:b2:8c:66:d5:1f:
9a:f4:37:17:05:87:b3:39:92:e6:50:6b:e9:cd:f6:
ca:8f:f6:ca:d6:b3:28:36:e4:5a:20:21:54:30:80:
a2:7a:45:10:72:3a:bc:0d:0a:07:52:64:4e:df:b0:
66:fa:d5:6b:98:b7:24:90:05:50:69:65:ad:b5:d6:
2d:18:50:19:ea:4d:6b:61:a1:df:99:26:3c:f9:bb:
cd:1e:86:86:6c:40:8d:75:f3:f1:81:3f:5c:68:b0:
0c:d7:2d:bd:8a:4a:aa:d4:ac:e7:2c:02:23:cf:be:
cb:34:fb:91:2d:9e:04:66:94:8a:6f:a4:bb:1f:a8:
73:39:50:9a:0c:8b:82:6a:61:fd:1e:8c:e7:27:8a:
b4:73:fc:21:34:6e:6f:e6:fe:9d:26:58:56:3b:71:
aa:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:5E:9B:FF:D1:9C:8C:06:C0:0D:53:71:4C:96:85:00:94:04:CE:87
X509v3 Authority Key Identifier:
keyid:39:36:DA:F0:37:56:BA:F8:3B:A4:F3:8D:BE:5D:68:CB:9B:AC:EF:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTba8DdWuvg7pPONvl1oy5us7_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/BV6b_9GcjAbADVNxTJaFAJQEzoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.190.130.0/24
Signature Algorithm: sha256WithRSAEncryption
44:dc:31:a8:47:23:a4:62:0a:8b:05:60:d2:f2:ba:dd:c5:fb:
7d:05:55:bb:59:12:52:64:14:8d:1a:31:a3:d1:74:f0:d3:a1:
b8:75:26:fd:b6:34:72:13:69:09:4f:89:18:6f:9b:ac:f6:23:
cf:39:33:06:d4:3e:2e:32:74:38:f3:94:fe:3b:2c:e2:01:98:
7e:8f:23:c8:2a:2d:0e:e8:7d:65:a0:80:85:fe:41:77:97:58:
e2:57:56:95:60:35:b3:54:3d:b6:6b:6a:7f:96:42:86:a1:ab:
45:de:4a:8c:ba:de:d1:a0:e1:4c:88:ae:ee:02:a2:f1:88:7e:
c8:ad:3c:5d:70:02:70:24:2e:e0:bb:07:8d:01:e9:c7:df:c5:
ee:46:74:b7:84:51:20:25:14:36:dd:2a:1b:15:11:77:cc:40:
eb:3a:fd:45:f7:42:2c:58:c3:71:66:d6:1c:3f:94:c4:76:f3:
22:7a:26:fa:43:ec:0f:56:c1:ec:3a:dd:19:23:ed:1f:1c:4f:
94:72:4a:2e:09:9c:a1:60:f8:0f:c4:b0:a1:7a:b6:a4:39:ae:
d1:62:67:7b:a7:aa:80:d5:45:3d:00:5f:13:17:25:80:7b:f5:
b4:9d:f5:27:53:c7:06:69:02:41:43:40:a8:eb:87:5b:37:53:
e9:cd:c3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:25:44 2024 by rpki-client on console-fra.rpki-client.org