Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/BjSivJWYHT9d0DWzddphciadnAo.roa
File: BjSivJWYHT9d0DWzddphciadnAo.roa (raw, json)
Hash identifier: 979+wAy5kfaq6HVS3tMkPvg59KmOayr0WHW0PV4Ypyk=
Subject key identifier: 06:34:A2:BC:95:98:1D:3F:5D:D0:35:B3:75:DA:61:72:26:9D:9C:0A
Certificate issuer: /CN=b744309908269e538b2b4fa963370c9ec2077a78
Certificate serial: 018CC6B78EFF54026B5CC39EA00F2D61667F
Authority key identifier: B7:44:30:99:08:26:9E:53:8B:2B:4F:A9:63:37:0C:9E:C2:07:7A:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/BjSivJWYHT9d0DWzddphciadnAo.roa
Signing time: Mon 01 Jan 2024 20:29:27 +0000
ROA not before: Mon 01 Jan 2024 20:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57777
IP address blocks: 185.173.128.0/24 maxlen: 24
2a10:fc40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:03:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:8e:ff:54:02:6b:5c:c3:9e:a0:0f:2d:61:66:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b744309908269e538b2b4fa963370c9ec2077a78
Validity
Not Before: Jan 1 20:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0634a2bc95981d3f5dd035b375da6172269d9c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7a:5f:06:a2:26:f8:20:43:2e:41:d9:19:f1:
8a:7b:82:db:13:f8:e4:f9:52:1e:0b:4c:17:09:57:
93:6c:84:46:ec:17:52:f0:2f:a3:59:b0:ec:96:5c:
e4:c8:fe:b0:4a:20:4d:3d:fb:3c:c7:0d:27:a2:0f:
c1:47:45:33:e8:90:ce:22:69:3d:52:19:73:79:ee:
59:ed:08:6b:98:9f:ac:e9:d1:58:4e:af:47:67:e4:
c6:ba:f6:3c:56:8d:53:6f:fa:8d:ee:2f:2f:37:16:
64:6e:e4:6f:76:c9:0a:f2:ff:82:b0:bd:36:c8:f9:
fe:36:2f:f8:0d:96:0d:9a:f3:2d:f7:11:0e:10:b0:
80:a5:73:d9:ae:3b:d1:5a:07:2c:59:ee:e3:79:54:
21:99:a3:70:1b:a1:93:2b:e5:7b:a3:f4:30:92:46:
e7:3e:da:c5:b8:ba:2a:c3:de:c9:60:67:69:25:30:
a2:5a:26:c5:90:c4:94:0f:95:94:1e:8b:2b:37:0c:
0b:bc:a7:20:ef:4c:e7:f5:73:ed:8d:bc:ae:fe:b7:
bf:8c:a6:08:13:6c:34:c7:01:81:53:d5:d2:cc:7c:
72:f5:88:7f:ce:75:fe:5a:97:d4:b7:76:86:95:fd:
ab:dc:18:8b:0a:44:58:6e:bb:cf:46:29:d0:9b:e6:
bd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:34:A2:BC:95:98:1D:3F:5D:D0:35:B3:75:DA:61:72:26:9D:9C:0A
X509v3 Authority Key Identifier:
keyid:B7:44:30:99:08:26:9E:53:8B:2B:4F:A9:63:37:0C:9E:C2:07:7A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/BjSivJWYHT9d0DWzddphciadnAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.128.0/24
IPv6:
2a10:fc40::/29
Signature Algorithm: sha256WithRSAEncryption
6d:93:3c:d5:03:bf:f0:01:46:ef:06:bc:3a:05:7e:a8:cd:f1:
d0:75:e5:1f:c6:64:38:82:d1:86:ab:2c:23:be:68:c0:f3:ad:
4e:8a:9a:29:49:9a:c5:e8:34:5a:f3:12:7b:df:67:0a:a2:52:
8b:06:ea:f5:63:0f:bc:6e:80:f6:52:47:b7:a6:94:6a:fd:97:
d7:51:1c:e5:f3:b4:f1:27:25:17:20:5b:62:b1:06:5a:e6:e3:
bc:33:27:70:e5:f7:fc:63:c7:af:c1:98:0d:cc:06:86:28:f4:
3c:b1:5a:da:8e:31:60:fe:98:61:42:54:df:e1:0f:3f:df:ea:
68:8b:29:85:87:db:ec:af:74:59:b1:b1:71:e3:7f:c8:1f:15:
54:6b:4e:a0:6d:35:93:39:41:28:f1:e2:9f:0d:78:ce:d9:3f:
90:0b:a7:49:e6:f5:d1:c2:41:30:c6:f7:98:57:17:9f:c0:c1:
d4:12:2f:e9:e9:06:a1:aa:b6:49:b9:1c:f5:ff:e5:6e:fd:ba:
46:a6:e2:ec:b5:c5:c2:77:81:29:3e:fd:8b:9f:ec:8d:db:d1:
f0:79:18:eb:d4:6c:da:9d:3f:31:3f:66:1f:53:53:1a:05:e1:
a7:68:1a:97:20:31:12:cd:0e:35:09:08:b1:aa:ab:2e:68:1b:
12:fe:8b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 21:10:07 2024 by rpki-client on console-fra.rpki-client.org