Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/bZX0qYbyLwXxGa2q57bl7_tBWsE.roa
File: bZX0qYbyLwXxGa2q57bl7_tBWsE.roa (raw, json)
Hash identifier: HoUuBzzI3ejHhzqppUJnzj+opwdEnYAbEt9ADE0YzEU=
Subject key identifier: 6D:95:F4:A9:86:F2:2F:05:F1:19:AD:AA:E7:B6:E5:EF:FB:41:5A:C1
Certificate issuer: /CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
Certificate serial: 01900DF0F896DFDB497C42FFC645E0881F88
Authority key identifier: BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/bZX0qYbyLwXxGa2q57bl7_tBWsE.roa
Signing time: Wed 12 Jun 2024 19:33:34 +0000
ROA not before: Wed 12 Jun 2024 19:33:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41488
IP address blocks: 185.214.80.0/24 maxlen: 24
185.214.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:0d:f0:f8:96:df:db:49:7c:42:ff:c6:45:e0:88:1f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
Validity
Not Before: Jun 12 19:33:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d95f4a986f22f05f119adaae7b6e5effb415ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:89:d0:82:cb:cf:ab:5a:a3:f4:a3:1a:f6:5f:
fa:7c:c7:db:d1:ce:3f:3e:86:d3:20:10:de:a4:50:
3c:28:35:43:99:fa:a4:58:3b:59:26:b9:5a:a4:60:
4c:bd:54:63:b6:46:da:2c:16:18:35:a2:c9:af:19:
9d:7b:67:6a:a9:3c:b7:f4:f3:38:c8:b3:02:a4:ca:
be:fd:f5:b4:c3:24:96:59:cc:db:2c:77:5b:b0:9b:
df:e9:69:61:c5:b2:90:ee:54:8f:e0:c4:8b:87:d3:
c7:8b:4c:b3:4f:b9:8c:90:5b:35:7e:94:1c:65:4b:
02:a0:94:f6:f5:80:3a:26:9c:0e:34:be:e8:1d:cc:
08:e7:f2:e7:4e:6c:da:d0:29:9f:c0:37:2f:17:47:
2e:5f:da:cc:58:97:a8:9e:a7:49:71:78:87:dd:87:
3c:7d:9c:29:af:70:cf:c8:a7:ef:29:55:1f:2a:f3:
d9:d8:54:28:34:55:53:53:e4:9d:52:77:58:1d:cd:
3d:9c:08:49:86:f3:fe:b9:35:72:b2:f1:7a:b4:c4:
c5:98:3c:a7:9b:f3:df:9f:06:4f:ca:c7:d4:27:a7:
e0:db:01:1d:e6:f4:d1:45:a8:77:6a:65:9c:76:6b:
36:a7:79:dd:a1:d2:32:56:d8:85:44:91:45:22:b7:
f3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:95:F4:A9:86:F2:2F:05:F1:19:AD:AA:E7:B6:E5:EF:FB:41:5A:C1
X509v3 Authority Key Identifier:
keyid:BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/bZX0qYbyLwXxGa2q57bl7_tBWsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.80.0/24
185.214.82.0/24
Signature Algorithm: sha256WithRSAEncryption
71:60:ef:d4:47:81:bd:1d:c7:b4:1e:60:f8:4a:ab:26:f6:8d:
19:3e:9d:52:d2:0f:56:7d:84:2d:18:b1:b3:ff:8d:79:e6:79:
62:31:0e:6c:17:f9:b2:20:43:4e:fd:a0:0c:fa:4c:73:9a:90:
ee:b0:93:37:f2:94:61:f3:5b:5b:3e:6e:27:90:d1:b1:7f:f5:
b0:9e:94:1f:13:d2:5c:f0:49:7a:9d:1f:a2:29:17:b7:10:37:
f4:1d:f0:b0:8f:15:3c:c9:62:58:58:f0:3b:b8:99:1f:ef:1f:
fd:06:3d:b0:33:78:49:4c:88:92:3d:7a:cc:b8:e4:af:76:58:
07:d2:f0:9f:36:54:0c:8e:60:6a:f8:02:f2:b2:f7:c9:59:5e:
5e:36:b7:32:84:8d:73:6f:fa:a1:b1:2e:6e:33:a4:0f:19:17:
b5:6a:3a:07:64:92:7c:18:a0:ad:a0:c0:b7:12:2d:71:d5:84:
3e:e4:5b:4b:6e:6c:a5:49:78:43:6a:d9:7b:9d:b8:c2:3e:86:
37:71:ff:cb:c8:87:05:4f:56:e2:8f:82:8f:07:e3:1e:36:ea:
0e:c2:d8:9a:1a:f7:6e:44:a5:4e:21:0e:62:7c:e5:1d:ca:80:
42:8a:a0:6b:d5:d0:80:f7:9d:a1:d0:83:29:dc:25:16:e3:0f:
d3:04:9e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:56:57 2024 by rpki-client on console-fra.rpki-client.org