Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/bbxVX_aK6vn4Mkh3-1BOksl_F7k.roa
File: bbxVX_aK6vn4Mkh3-1BOksl_F7k.roa (raw, json)
Hash identifier: ytJ4Ui8l/pthvVNOm9FhBXBqVhxr2YFn/vsBRZjrR04=
Subject key identifier: 6D:BC:55:5F:F6:8A:EA:F9:F8:32:48:77:FB:50:4E:92:C9:7F:17:B9
Certificate issuer: /CN=dc3f2639ffc78871ad64bfed71b7954bc90deab5
Certificate serial: 018CC64A5E9DB6E604FEFEC20BB53ADE189E
Authority key identifier: DC:3F:26:39:FF:C7:88:71:AD:64:BF:ED:71:B7:95:4B:C9:0D:EA:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3D8mOf_HiHGtZL_tcbeVS8kN6rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/bbxVX_aK6vn4Mkh3-1BOksl_F7k.roa
Signing time: Mon 01 Jan 2024 18:30:11 +0000
ROA not before: Mon 01 Jan 2024 18:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199141
IP address blocks: 91.245.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3D8mOf_HiHGtZL_tcbeVS8kN6rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:5e:9d:b6:e6:04:fe:fe:c2:0b:b5:3a:de:18:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc3f2639ffc78871ad64bfed71b7954bc90deab5
Validity
Not Before: Jan 1 18:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6dbc555ff68aeaf9f8324877fb504e92c97f17b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a8:ae:79:77:2c:94:dc:69:03:87:52:a5:cb:
e0:4d:13:a5:e3:2f:ba:fe:19:7e:81:84:02:1a:ca:
c6:41:59:4f:78:90:2b:51:a5:57:b0:83:a1:b6:16:
e5:7f:c1:de:3f:25:33:ca:1b:63:bb:9d:64:d3:69:
0f:c2:96:5e:4f:dc:21:f7:c6:e5:ea:57:60:51:33:
16:d6:1c:9e:43:2a:b7:43:a6:f4:f9:3f:e5:6b:59:
c5:ed:13:6d:66:5b:da:9b:63:15:7f:8e:48:83:e5:
fd:14:9a:77:73:87:19:10:a3:4c:19:8d:da:2e:95:
d8:78:9e:e9:ab:d1:cb:17:ed:d9:94:14:b4:de:e8:
1d:2a:bb:9f:62:ae:66:a4:75:7d:92:3a:47:3c:5b:
7f:91:24:10:da:28:c9:a6:48:77:a2:8f:29:8f:98:
2c:f7:ef:89:0b:f7:1e:64:fc:70:b7:05:98:a5:41:
ba:b4:41:84:21:ca:7e:e1:d2:b3:75:11:cf:ad:63:
71:80:38:b5:f2:bc:c5:96:87:0c:6e:8b:13:0f:8b:
fa:a9:b0:7f:02:c4:13:e9:f1:e6:6b:68:4d:ad:8c:
b5:52:c5:83:8b:4f:8d:c5:16:4c:4d:75:6e:1e:4f:
0c:8b:8b:4b:5f:60:28:d7:28:62:55:35:50:eb:91:
bc:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:BC:55:5F:F6:8A:EA:F9:F8:32:48:77:FB:50:4E:92:C9:7F:17:B9
X509v3 Authority Key Identifier:
keyid:DC:3F:26:39:FF:C7:88:71:AD:64:BF:ED:71:B7:95:4B:C9:0D:EA:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3D8mOf_HiHGtZL_tcbeVS8kN6rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/bbxVX_aK6vn4Mkh3-1BOksl_F7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.245.195.0/24
Signature Algorithm: sha256WithRSAEncryption
06:13:0e:2d:8e:c2:56:a3:80:f2:30:42:29:2c:08:17:6a:7e:
83:9c:15:c0:aa:30:83:0c:89:fc:df:ed:b8:69:a4:ad:ed:7b:
7d:24:6f:53:06:a0:3f:2a:49:6d:6d:41:06:4a:3b:bf:88:86:
06:a2:c9:ca:2d:1f:a3:58:16:c3:fc:56:20:8a:00:81:bf:14:
ec:e7:68:3e:8b:b4:d6:7c:c2:30:84:37:59:95:3f:1c:b5:c5:
d0:73:29:7e:83:ee:66:34:e8:a6:3a:d6:72:b4:5b:2b:14:96:
19:71:1c:ab:5f:51:3a:a5:8b:a4:83:be:0f:ab:ad:03:87:7d:
32:2a:f9:52:b7:26:a1:cd:f6:ad:3b:6b:43:41:23:43:06:67:
59:48:07:1d:35:7e:b7:b6:a7:dc:44:6c:57:a8:1a:e9:e4:f7:
c2:e5:29:b5:84:15:81:16:df:bf:ff:47:ae:f5:49:5b:87:a4:
2e:af:1c:67:e3:44:da:4a:ac:f7:2a:d6:5b:be:89:2f:cf:9c:
4b:ca:9e:f8:8c:5d:59:b8:11:64:b3:9f:34:3c:80:97:8e:e2:
fb:25:6f:c2:a7:b2:2d:8c:5d:81:7d:9d:5d:13:47:2d:af:32:
95:44:0a:23:f5:62:5b:36:40:7d:db:38:7f:1c:46:0a:08:9f:
04:3c:5a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:59:07 2024 by rpki-client on console-ams.rpki-client.org