Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/bBM0Sul2m5-TJgpFy7jtIiEW0p4.roa
File: bBM0Sul2m5-TJgpFy7jtIiEW0p4.roa (raw, json)
Hash identifier: Q1+ajVQFfPsejICXKMV5jg57a1bVskTyLXu8UykuHa8=
Subject key identifier: 6C:13:34:4A:E9:76:9B:9F:93:26:0A:45:CB:B8:ED:22:21:16:D2:9E
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018ED12E78797559E77A2136664FA19889CB
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/bBM0Sul2m5-TJgpFy7jtIiEW0p4.roa
Signing time: Fri 12 Apr 2024 07:21:07 +0000
ROA not before: Fri 12 Apr 2024 07:21:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61162
IP address blocks: 192.71.254.0/23 maxlen: 24
192.176.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d1:2e:78:79:75:59:e7:7a:21:36:66:4f:a1:98:89:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Apr 12 07:21:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c13344ae9769b9f93260a45cbb8ed222116d29e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:60:cc:41:e0:a1:0d:cd:1c:d4:23:9d:f7:34:
ed:3a:fc:58:3b:92:90:51:d6:35:85:57:24:e2:e0:
b0:e0:79:bf:fa:01:8f:d1:a4:bf:1a:2e:a8:af:5c:
73:d3:05:6a:36:80:5c:d1:fb:6c:32:63:03:13:2e:
ac:2b:2a:83:f1:82:02:0a:14:fc:85:6f:5f:85:28:
c7:75:32:46:2f:22:cd:3a:1a:ef:46:cf:05:36:95:
e9:9e:e9:d3:e8:f6:49:a1:24:5e:dc:e2:fd:42:3f:
84:d1:c4:f2:6d:9b:aa:de:a6:5d:3f:5f:22:9e:e6:
ac:d8:42:10:00:90:4b:26:db:47:02:3d:71:4d:c8:
36:52:03:37:ed:c2:14:65:ae:90:34:66:ab:00:66:
2c:55:d4:cf:b5:db:7d:17:0d:58:11:d3:51:65:bc:
4b:25:6d:26:22:dc:3d:74:ea:29:68:65:e8:fb:d0:
fe:53:83:de:7f:b7:8e:30:3a:b3:bc:53:e1:a3:c3:
87:23:bb:8a:74:cc:38:5b:b8:54:6f:69:c4:c0:0a:
06:47:e0:4e:15:f8:ed:83:0c:e4:24:3a:fa:a1:98:
bc:4f:78:c9:55:06:e9:06:e3:4a:af:ed:6b:ac:0e:
94:75:c3:46:c7:da:2d:21:36:d2:bc:65:dd:87:8f:
ce:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:13:34:4A:E9:76:9B:9F:93:26:0A:45:CB:B8:ED:22:21:16:D2:9E
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/bBM0Sul2m5-TJgpFy7jtIiEW0p4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.254.0/23
192.176.43.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:c1:52:5f:36:ef:84:8f:e2:f0:91:d6:53:87:73:00:78:69:
bd:b7:33:85:c2:47:9e:8c:64:8f:52:12:f7:64:19:81:02:98:
c0:9c:23:a9:28:f0:fe:39:3e:87:76:58:16:38:2c:7b:ae:65:
a1:28:38:b1:99:30:98:0e:97:97:f0:2c:fb:e1:78:94:72:1b:
5b:72:30:9b:0e:d4:bd:d7:0a:b1:c6:ab:4c:8c:95:0a:eb:7d:
e5:5e:b1:ab:b8:7b:15:1c:77:34:5d:45:47:b9:aa:4a:25:d8:
49:9a:f7:5d:9c:3e:97:36:b3:b0:0d:99:2b:82:67:f0:ca:c8:
38:1e:3f:94:bd:4c:56:32:10:bd:70:d2:f6:dd:c6:9e:43:da:
fc:e8:15:fc:c2:f4:45:1d:09:ea:b5:ea:02:28:c5:10:6d:0b:
1d:4b:2e:e1:45:13:40:42:f4:5f:ad:ce:47:45:4b:37:eb:91:
bf:64:8d:c2:63:36:7a:9c:5a:ad:9f:f0:56:c1:95:63:e8:6b:
03:76:67:f0:e4:fb:a9:de:ce:3e:13:22:38:20:c0:12:81:61:
dc:85:b2:49:d0:80:77:4f:2c:dc:df:eb:98:fd:e5:72:d9:2f:
63:b1:0c:25:0f:40:58:0a:97:69:5a:6a:03:b6:90:af:1f:84:
01:ef:8b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 17:02:14 2024 by rpki-client on console-fra.rpki-client.org