Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/BgCeZFCB2RMaktGv9snknt9TtSM.roa
File: BgCeZFCB2RMaktGv9snknt9TtSM.roa (raw, json)
Hash identifier: t/c3YUoSm8O+J8KrnhkjpjuXIjTY9Ee2L5Sp3DdKY14=
Subject key identifier: 06:00:9E:64:50:81:D9:13:1A:92:D1:AF:F6:C9:E4:9E:DF:53:B5:23
Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f
Certificate serial: 018E752F1B4E4595C18671AC7019D65CA817
Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/BgCeZFCB2RMaktGv9snknt9TtSM.roa
Signing time: Mon 25 Mar 2024 10:36:45 +0000
ROA not before: Mon 25 Mar 2024 10:36:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 84.239.18.0/24 maxlen: 24
84.239.29.0/24 maxlen: 24
84.239.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:75:2f:1b:4e:45:95:c1:86:71:ac:70:19:d6:5c:a8:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f
Validity
Not Before: Mar 25 10:36:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=06009e645081d9131a92d1aff6c9e49edf53b523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f4:2a:c5:84:0d:13:7c:d4:5a:63:46:5a:40:
ac:01:04:e2:cd:27:0e:82:b9:cc:f0:2f:05:6e:4f:
00:b6:41:1d:f8:83:94:1d:26:3b:26:ed:c3:ac:57:
90:a5:de:cb:06:93:39:8d:6f:8f:eb:78:c0:5c:d8:
48:7e:44:90:c4:be:9a:23:06:b1:f8:d7:b4:fb:ad:
b8:b3:4a:e7:26:5a:68:1e:f9:bd:14:82:d4:5d:df:
d6:ad:12:43:44:40:8c:e0:30:c1:78:a6:c9:dc:45:
e4:09:5e:c3:58:74:60:30:07:eb:0f:50:3c:b5:03:
b6:59:f8:b5:6d:b8:64:b5:ee:d6:7b:92:6b:3f:17:
89:29:2e:39:58:09:6a:3a:d8:c6:63:cb:b7:2e:08:
7d:81:a8:ed:68:f8:9a:2b:fc:61:c6:1b:5c:a4:05:
e4:01:4a:1a:e9:7b:40:98:31:28:0f:30:af:5f:db:
c6:d5:45:1d:36:da:94:16:9b:2a:84:32:70:c0:85:
c5:34:4c:65:4f:51:29:f2:0b:ab:86:31:24:94:b3:
81:08:ab:4f:0b:69:93:f5:3e:f1:ce:10:fb:6d:97:
78:9f:a6:a4:c2:22:04:3a:c5:38:ef:bd:82:b0:e5:
41:f1:ad:3f:55:ee:ce:5a:10:e7:e0:80:d7:86:31:
3b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:00:9E:64:50:81:D9:13:1A:92:D1:AF:F6:C9:E4:9E:DF:53:B5:23
X509v3 Authority Key Identifier:
keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/BgCeZFCB2RMaktGv9snknt9TtSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.239.18.0/24
84.239.29.0-84.239.30.255
Signature Algorithm: sha256WithRSAEncryption
4f:64:a5:4f:0b:b2:cb:ab:ce:77:13:5f:23:c2:30:12:60:77:
19:60:4e:8e:bf:2a:8f:7c:13:ee:eb:27:06:52:79:59:17:6b:
0f:5e:bb:7d:eb:4a:7e:40:9e:fe:ec:a4:bb:45:94:52:94:5e:
0f:d6:54:e3:1d:33:aa:91:b4:d3:90:d0:a0:8b:01:42:df:bb:
f2:5b:b7:03:59:6a:d5:84:c3:79:bd:86:78:91:10:61:65:25:
7d:d7:55:ac:da:71:46:20:33:15:33:1a:4c:7c:32:c2:2f:55:
c9:5f:a8:75:c6:79:37:83:28:65:16:76:41:8b:70:63:28:c8:
69:ab:75:39:8a:bf:81:5d:ac:4c:a5:b5:a4:32:f7:cc:c0:9f:
21:85:91:5a:4e:16:0a:ad:6a:1b:50:49:c1:4e:ec:55:d9:5d:
4d:73:e4:f1:7e:b3:d5:40:b7:dd:11:5f:29:48:2f:44:d3:f0:
00:c6:65:88:2f:c3:20:9d:0f:fd:4d:a9:fc:7d:43:9a:88:cc:
24:9b:82:c5:37:76:c7:4a:e2:87:18:c3:5d:6a:6b:4c:b7:c5:
01:05:5a:ce:b2:87:1c:8d:31:66:12:d0:5b:51:d1:1c:e0:4c:
7c:87:c2:66:f8:15:c9:46:6a:f6:19:ac:2a:e3:cc:04:47:91:
57:fc:cc:14
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 28 05:50:01 2024 by rpki-client on console-ams.rpki-client.org