Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/BeHdOauUlwuvmzmMOuyH9lnmBvk.roa
File: BeHdOauUlwuvmzmMOuyH9lnmBvk.roa (raw, json)
Hash identifier: DhaISufkADefSMuSOMIRDtTFxtPj8QOCtwKs+BWqh2A=
Subject key identifier: 05:E1:DD:39:AB:94:97:0B:AF:9B:39:8C:3A:EC:87:F6:59:E6:06:F9
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC802E146968D5EF13520DA3B6F8CBD0D
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/BeHdOauUlwuvmzmMOuyH9lnmBvk.roa
Signing time: Tue 02 Jan 2024 02:31:21 +0000
ROA not before: Tue 02 Jan 2024 02:31:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20626
IP address blocks: 193.235.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:e1:46:96:8d:5e:f1:35:20:da:3b:6f:8c:bd:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05e1dd39ab94970baf9b398c3aec87f659e606f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1d:82:94:96:d3:b1:46:34:7f:42:5f:55:e4:
7e:84:06:ce:40:33:09:34:79:d0:a2:cb:cd:8f:50:
28:55:8c:f9:7e:76:ed:92:0c:dc:07:80:e5:bd:08:
ea:c9:90:8c:ac:66:2b:d1:2e:da:2b:03:c6:91:71:
38:77:ce:fb:a4:83:ec:22:3c:bd:97:9f:97:61:18:
be:d5:03:d4:47:a2:44:44:d7:73:3d:04:65:1e:b6:
7b:af:85:9a:26:f5:b8:bd:00:20:5f:4a:6e:f1:1d:
96:ef:2c:e4:7e:48:3a:c7:81:16:8c:82:ba:1b:f2:
17:ed:f7:bf:23:83:1b:70:52:1f:d9:fc:54:a0:97:
63:1f:a2:e0:8e:de:8d:35:90:ef:08:11:99:2d:c6:
37:d3:87:80:7e:eb:49:8c:97:c0:4b:89:29:75:56:
a2:b7:07:07:e1:aa:f6:13:20:48:74:7c:e9:68:e9:
3e:12:bb:7a:72:35:3d:25:64:25:99:1a:5e:2e:8f:
78:19:a7:82:7c:a8:e0:8c:6e:ac:54:4f:3b:fe:d2:
13:6a:c9:51:0b:a3:19:b7:d3:e2:e6:af:18:b0:4f:
eb:f6:e2:1e:dd:75:fd:63:f8:c9:ae:55:7c:b3:22:
d8:c9:6c:18:af:32:8a:82:1a:ec:8b:4a:70:22:73:
47:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E1:DD:39:AB:94:97:0B:AF:9B:39:8C:3A:EC:87:F6:59:E6:06:F9
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/BeHdOauUlwuvmzmMOuyH9lnmBvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.235.236.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:f3:9c:ba:4f:4c:29:74:29:34:23:9a:c0:89:0c:cf:62:e4:
8e:11:1d:a9:98:3a:96:61:0a:fe:60:22:59:00:ee:dc:b3:2a:
05:a7:a0:67:ef:b7:88:22:88:7f:4d:d9:6a:33:f9:d1:9f:15:
e1:6c:24:e6:a9:e1:06:e6:77:fb:48:3a:5b:8c:65:38:6c:13:
a4:29:a3:23:f1:b9:19:f6:7c:35:45:d7:ee:14:c2:db:a8:b9:
70:41:04:f7:2b:d6:c5:59:40:4f:b0:ec:72:9b:ed:f7:c3:68:
60:c3:11:47:d9:b5:c5:87:2c:d9:aa:00:d9:b3:00:b8:8c:cb:
60:1e:30:07:a6:36:5b:50:da:70:36:23:08:1e:1a:0c:42:4c:
8b:62:4e:e3:64:0e:20:42:af:08:96:c3:e8:e0:03:a3:17:17:
56:14:6a:f4:26:b9:06:27:a3:1a:ec:5d:49:00:3e:9a:0c:e6:
c4:97:02:7e:2b:1e:bc:57:39:d2:c8:14:1e:b3:a5:a9:3a:8c:
60:23:02:30:83:20:c2:2b:44:d5:66:46:1f:91:5c:5e:1e:ac:
ea:91:6f:2e:aa:eb:b2:e8:fa:c6:92:90:31:7b:5d:d2:f0:34:
67:69:d3:55:d7:6c:67:f1:5c:90:e9:7b:e2:fb:ea:0f:71:32:
7b:be:54:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 17:02:14 2024 by rpki-client on console-fra.rpki-client.org