Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/bhvcZVwccPo5jIFTA11j0C1F3K4.roa
File: bhvcZVwccPo5jIFTA11j0C1F3K4.roa (raw, json)
Hash identifier: ZDbb/I0HyeFVt2bDtp6mwAkm8M6eUY+3mun0XMN+HEc=
Subject key identifier: 6E:1B:DC:65:5C:1C:70:FA:39:8C:81:53:03:5D:63:D0:2D:45:DC:AE
Certificate issuer: /CN=bbc264b5a6494f890fa314f61fd7d27587e35830
Certificate serial: 018CC725DB320194008B09C95F050ABE4824
Authority key identifier: BB:C2:64:B5:A6:49:4F:89:0F:A3:14:F6:1F:D7:D2:75:87:E3:58:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8JktaZJT4kPoxT2H9fSdYfjWDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/bhvcZVwccPo5jIFTA11j0C1F3K4.roa
Signing time: Mon 01 Jan 2024 22:29:56 +0000
ROA not before: Mon 01 Jan 2024 22:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200026
IP address blocks: 185.40.52.0/22 maxlen: 22
145.14.248.0/21 maxlen: 21
153.92.112.0/21 maxlen: 21
2a00:f120::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/u8JktaZJT4kPoxT2H9fSdYfjWDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:db:32:01:94:00:8b:09:c9:5f:05:0a:be:48:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbc264b5a6494f890fa314f61fd7d27587e35830
Validity
Not Before: Jan 1 22:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e1bdc655c1c70fa398c8153035d63d02d45dcae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ea:1b:3f:3d:6d:a4:89:07:51:04:2c:a1:41:
83:6a:48:b9:0b:ae:bc:a4:2c:d7:87:1e:eb:ea:23:
03:e6:ce:c4:51:47:64:e6:b9:4c:65:8e:75:5f:d6:
9c:92:fb:b0:ed:a6:e8:19:64:64:a4:38:30:a5:17:
dc:72:0c:5f:01:0d:2e:ef:4b:24:7b:7f:a3:cc:c6:
d6:5c:47:b5:18:61:74:72:bb:a1:55:78:ff:19:69:
95:69:ce:67:50:f9:fa:5b:c7:46:d0:7e:95:49:03:
08:d4:a8:77:02:28:31:c6:ab:1d:d7:81:f1:cf:99:
be:d2:ce:6c:a2:18:23:6c:b1:99:4f:b6:84:7f:24:
41:5b:98:db:54:2a:28:97:5c:a1:e0:d5:8c:f2:6b:
e1:e1:db:71:cb:83:26:39:f0:a5:18:fd:c3:82:56:
75:ba:4c:0f:3e:13:c4:23:77:18:d3:3a:56:89:cb:
df:1e:02:cd:76:d9:13:4b:91:bf:ab:10:66:e7:9e:
47:ec:80:46:6e:c8:df:b0:23:5f:2f:c1:27:eb:bd:
ee:c9:a3:ba:6e:5d:5e:bf:20:37:f3:f9:b4:a4:1a:
e6:7e:fb:c0:d1:26:e4:63:50:b0:04:24:fb:a4:c6:
c9:d2:64:50:07:b5:24:21:17:c9:bc:c7:65:c8:43:
82:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:1B:DC:65:5C:1C:70:FA:39:8C:81:53:03:5D:63:D0:2D:45:DC:AE
X509v3 Authority Key Identifier:
keyid:BB:C2:64:B5:A6:49:4F:89:0F:A3:14:F6:1F:D7:D2:75:87:E3:58:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8JktaZJT4kPoxT2H9fSdYfjWDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/bhvcZVwccPo5jIFTA11j0C1F3K4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.14.248.0/21
153.92.112.0/21
185.40.52.0/22
IPv6:
2a00:f120::/32
Signature Algorithm: sha256WithRSAEncryption
69:de:d1:f2:e4:0b:00:5b:da:df:17:91:73:9a:97:3b:be:98:
62:11:c6:c3:3a:f1:a8:f8:58:e7:e7:53:3d:a9:44:42:42:85:
5f:12:54:c3:ee:4d:dc:84:8a:cf:2b:1a:dd:fd:eb:a3:52:8f:
f5:d5:40:38:8d:ae:46:dd:31:21:77:03:ae:1e:6a:f2:3d:12:
f8:15:98:bf:68:f1:b7:55:61:23:ba:9c:b5:8c:81:6c:be:1b:
76:c8:e0:49:d6:b5:87:1b:f6:98:40:e0:e8:6b:72:1c:0d:ef:
ea:ca:dd:b8:53:5b:98:10:96:34:48:c4:59:54:67:4d:66:df:
21:5d:0c:5e:77:f2:40:e6:9d:96:7f:bf:97:ed:5e:7e:ce:f4:
3f:18:9f:97:e0:c0:8d:36:ca:09:be:9f:31:78:35:e7:5f:d8:
7b:76:eb:ea:b1:36:db:3c:fb:3d:a6:83:73:92:8d:85:e6:10:
65:f1:5a:4d:14:4e:98:0c:cc:48:aa:72:89:7a:64:0c:c3:85:
24:20:0c:0d:1b:63:8d:8d:22:35:ce:ab:20:f4:eb:73:92:a0:
b1:4c:2e:cc:34:2b:ee:cf:58:b8:22:0e:61:b8:46:64:35:74:
a8:75:6c:4b:1c:b3:b3:79:cd:6b:71:ba:b6:f2:4b:1e:78:00:
5b:f5:96:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:21:32 2024 by rpki-client on console-fra.rpki-client.org