Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/bhnkYjS33mhKJahynyppH990EvY.roa
File: bhnkYjS33mhKJahynyppH990EvY.roa (raw, json)
Hash identifier: kHrqeF85TNkmzRi6YVepzW+YfnKIfoRJ4H2GvBWrwb0=
Subject key identifier: 6E:19:E4:62:34:B7:DE:68:4A:25:A8:72:9F:2A:69:1F:DF:74:12:F6
Certificate issuer: /CN=2aa3c99ff58b8f733ef2c62a7772c0c1f29e57fc
Certificate serial: 018CC72764416323759964A5A3AF7B43C1DB
Authority key identifier: 2A:A3:C9:9F:F5:8B:8F:73:3E:F2:C6:2A:77:72:C0:C1:F2:9E:57:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/bhnkYjS33mhKJahynyppH990EvY.roa
Signing time: Mon 01 Jan 2024 22:31:36 +0000
ROA not before: Mon 01 Jan 2024 22:31:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42334
IP address blocks: 185.236.205.0/24 maxlen: 24
185.236.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:64:41:63:23:75:99:64:a5:a3:af:7b:43:c1:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa3c99ff58b8f733ef2c62a7772c0c1f29e57fc
Validity
Not Before: Jan 1 22:31:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e19e46234b7de684a25a8729f2a691fdf7412f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:38:9f:a7:1d:ab:76:bc:a9:39:3c:4c:72:39:
be:81:81:dd:99:ee:18:8d:4c:6a:c2:54:f3:50:10:
e6:26:4b:85:90:88:56:c7:43:71:1c:76:af:2c:68:
f3:62:50:62:fa:c2:a4:53:19:40:38:d8:5b:4c:d4:
5c:f0:b6:33:89:48:85:0e:73:a2:87:94:13:70:66:
38:ea:72:f1:1d:79:6b:6f:a8:14:76:43:0c:5e:a9:
4c:6c:98:f5:5d:87:d3:37:58:ff:4f:7c:8c:d1:c6:
c8:aa:99:d4:94:be:a6:76:e9:a7:56:7b:30:25:81:
7a:44:ba:89:7f:f9:c1:44:34:fa:92:e3:52:25:c4:
a7:70:a9:0d:ca:b6:f5:b0:68:18:49:62:f5:c6:9f:
9f:5d:dd:dd:92:c6:7e:f6:f3:b2:e4:c5:9b:19:a9:
55:34:9e:08:de:9f:c0:68:a0:dc:ea:71:29:73:18:
70:99:06:26:5e:f8:dd:79:45:68:0d:ee:d7:44:7d:
2b:04:a5:6a:46:ee:2b:66:73:5e:b7:37:34:10:dd:
fb:de:7b:49:d9:14:9c:be:21:ef:8c:62:d1:03:27:
78:0a:2d:a4:d5:e3:22:2e:99:8b:0d:0c:f5:19:20:
99:6d:c8:53:f5:b2:c0:74:d5:76:df:73:20:23:32:
f7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:19:E4:62:34:B7:DE:68:4A:25:A8:72:9F:2A:69:1F:DF:74:12:F6
X509v3 Authority Key Identifier:
keyid:2A:A3:C9:9F:F5:8B:8F:73:3E:F2:C6:2A:77:72:C0:C1:F2:9E:57:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/bhnkYjS33mhKJahynyppH990EvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.204.0/23
Signature Algorithm: sha256WithRSAEncryption
08:44:4f:c6:52:28:fd:ec:0c:dd:18:fb:88:7c:52:27:be:f1:
4d:04:a4:95:ee:89:f9:81:ac:52:b5:7e:78:29:a6:57:b7:c3:
e6:71:6d:19:0f:6d:bf:6d:c7:2a:87:62:9e:89:7d:94:ff:f8:
1f:e0:98:94:a7:d8:8f:98:65:8f:d4:36:f3:ee:8b:17:fc:86:
2b:91:e8:d9:d6:fa:40:a7:5c:48:23:87:ec:02:f7:12:cb:82:
64:1e:79:52:34:9a:cd:aa:18:15:4c:bb:06:55:92:78:60:e7:
0e:0a:9e:71:4c:42:4e:85:c3:98:86:e3:b0:26:40:9f:f3:74:
40:af:99:d0:99:29:c9:e0:cb:54:13:45:96:5a:67:99:99:69:
12:55:52:ee:d5:22:02:c4:53:08:96:19:5d:f7:77:fd:6e:87:
00:eb:4b:c3:fa:ac:d9:c2:56:ca:35:ea:8a:2b:84:ce:52:b5:
3b:2e:dc:0d:a1:fc:7b:ae:f6:d9:e8:1d:6c:6e:f6:f0:9c:45:
23:c0:7d:57:f9:f8:71:64:4a:05:c6:ff:1f:06:ba:80:e4:a1:
95:e1:6a:78:71:0b:c4:8d:fb:4e:b2:df:75:f2:be:4e:f3:08:
2d:b2:1f:2f:eb:a1:ae:5d:06:28:72:d3:39:3f:5a:fe:3b:89:
34:15:de:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:03:47 2024 by rpki-client on console-fra.rpki-client.org