Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/bvbKuK6r_HusO6AFZY-INpKN_9I.roa
File: bvbKuK6r_HusO6AFZY-INpKN_9I.roa (raw, json)
Hash identifier: 1mC0i0moURfX0oGtgIl7vYqqadEMEllQ6OjGI0xIngg=
Subject key identifier: 6E:F6:CA:B8:AE:AB:FC:7B:AC:3B:A0:05:65:8F:88:36:92:8D:FF:D2
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC80302A17E5C3D7E3B11288FCD6D3DF7
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/bvbKuK6r_HusO6AFZY-INpKN_9I.roa
Signing time: Tue 02 Jan 2024 02:31:29 +0000
ROA not before: Tue 02 Jan 2024 02:31:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206013
IP address blocks: 193.180.112.0/23 maxlen: 24
193.180.114.0/24 maxlen: 24
193.180.104.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:03:02:a1:7e:5c:3d:7e:3b:11:28:8f:cd:6d:3d:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ef6cab8aeabfc7bac3ba005658f8836928dffd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:84:ec:db:84:c1:07:bc:7f:57:86:2f:67:3c:
ac:56:aa:8b:ec:bc:76:53:7b:3b:45:29:c0:14:5d:
5c:8c:9d:9d:fd:d9:80:ad:89:e1:5c:58:1c:df:0b:
ff:54:ec:4b:8c:15:e6:dc:0d:65:d0:d2:e8:9b:8c:
a0:b3:ba:fe:10:dd:7d:09:b8:34:92:aa:6e:ff:42:
2f:28:8b:97:aa:03:e0:dd:d9:f7:ec:a2:26:a2:5d:
27:c5:b2:54:41:66:52:4a:95:ca:87:42:5a:df:a5:
af:78:76:cb:b6:c6:67:ae:34:dd:db:19:2f:32:b3:
e1:88:b8:6e:24:8f:52:c9:f3:8a:45:7c:99:97:91:
7e:4a:9b:fd:5b:0f:d9:88:3d:6d:7a:45:9e:9f:35:
f0:1a:69:22:4c:19:51:67:24:3a:50:7b:79:84:0a:
28:b7:bf:f5:8e:bd:01:09:03:d9:ff:3d:7c:7d:a0:
94:65:ba:04:cc:93:83:43:b5:c4:a4:b9:6a:41:41:
1d:2e:15:34:f1:ea:12:ff:cd:c1:2d:56:22:b8:04:
46:94:ff:df:66:58:18:cc:87:9a:85:e3:c0:6d:d0:
9f:b5:4e:d0:ee:f4:37:02:60:06:c0:14:6d:25:ab:
c5:95:4c:04:c0:65:b2:46:bb:36:26:5e:82:26:4e:
4d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F6:CA:B8:AE:AB:FC:7B:AC:3B:A0:05:65:8F:88:36:92:8D:FF:D2
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/bvbKuK6r_HusO6AFZY-INpKN_9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.180.104.0-193.180.114.255
Signature Algorithm: sha256WithRSAEncryption
62:5e:52:93:71:0f:2b:05:6e:3e:d3:98:fa:e5:4e:de:10:cf:
77:76:2f:27:24:4c:7b:75:f6:6a:79:6d:15:3a:b8:b2:36:e9:
3d:9f:38:2d:f6:8a:f5:1e:99:5a:fe:46:e5:2b:1a:a4:b1:0a:
a4:c0:7f:ae:d7:9a:79:1d:2c:e6:58:e2:fc:ef:ca:e1:0d:08:
38:01:d3:de:de:27:e4:72:3a:81:cc:41:35:4d:bb:2b:d9:c6:
4c:08:51:3f:05:39:c5:df:d9:3a:7b:58:d0:e4:2c:93:d8:e5:
c7:f1:c2:fd:e2:47:fb:e0:6c:1f:84:5a:fa:6a:17:37:9d:57:
32:49:ed:ff:84:c9:51:16:6d:5d:7f:8d:e8:89:f7:69:6c:8b:
02:36:d4:d6:d4:68:a7:fe:49:67:9a:04:d3:7b:d4:ad:8f:ab:
ed:e6:a6:21:bf:51:a0:43:d2:ff:4e:27:59:df:77:bf:38:98:
55:5d:d2:fd:0c:34:ac:f0:79:71:f8:d3:3a:c0:d7:15:65:63:
24:80:05:65:19:a6:b1:87:f9:b0:65:a7:55:99:8d:67:56:f1:
e2:04:df:63:3d:b6:fc:78:64:29:ca:e4:19:2f:44:3c:39:23:
5e:f3:5f:5a:e7:7b:e6:08:f8:d1:a4:41:38:3c:60:c8:23:8e:
0a:54:a3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 19:45:10 2024 by rpki-client on console-fra.rpki-client.org