Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/BWwU6KZHfS2DO8KnKek3C5tHKsI.roa
File: BWwU6KZHfS2DO8KnKek3C5tHKsI.roa (raw, json)
Hash identifier: i5KwVVQjTuoT0tY4eEKQTq7YbO0v/rZE0s3yUVuLTDk=
Subject key identifier: 05:6C:14:E8:A6:47:7D:2D:83:3B:C2:A7:29:E9:37:0B:9B:47:2A:C2
Certificate issuer: /CN=be55779bc8b0bbe5e57a07755b1328a57c9cad60
Certificate serial: 018CC9BBE63C06A462F28C41EC17DC3E9281
Authority key identifier: BE:55:77:9B:C8:B0:BB:E5:E5:7A:07:75:5B:13:28:A5:7C:9C:AD:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlV3m8iwu-Xlegd1WxMopXycrWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/BWwU6KZHfS2DO8KnKek3C5tHKsI.roa
Signing time: Tue 02 Jan 2024 10:33:03 +0000
ROA not before: Tue 02 Jan 2024 10:33:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47692
IP address blocks: 194.146.187.0/24 maxlen: 24
194.146.184.0/24 maxlen: 24
194.146.185.0/24 maxlen: 24
194.146.186.0/24 maxlen: 24
2001:67c:2af4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vlV3m8iwu-Xlegd1WxMopXycrWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:e6:3c:06:a4:62:f2:8c:41:ec:17:dc:3e:92:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be55779bc8b0bbe5e57a07755b1328a57c9cad60
Validity
Not Before: Jan 2 10:33:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=056c14e8a6477d2d833bc2a729e9370b9b472ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c4:2f:8c:17:5f:c6:d4:51:98:a9:5d:b9:06:
04:ac:52:92:99:b5:b1:de:5a:fa:fa:ce:36:ef:32:
5e:7b:9f:65:78:c7:ee:71:2b:1c:3d:aa:5f:fc:86:
ff:9a:b6:52:51:10:eb:d3:28:5c:d4:33:57:58:e9:
c5:48:25:da:10:d2:a3:e9:dd:52:32:9e:a1:6e:1a:
a1:6e:82:e9:f7:93:10:45:58:6e:68:45:d2:ea:f1:
93:45:5e:e2:80:5f:29:9a:2a:79:60:77:66:b4:b3:
81:89:a4:db:fb:bc:8e:ac:cd:9a:97:5b:f0:b6:b6:
3b:84:bd:cd:9c:a1:bb:42:c0:66:04:66:d6:c6:29:
44:56:a9:f0:66:f3:35:da:3f:35:a7:97:64:f8:3a:
03:d7:c5:94:8e:a0:8c:7d:c6:f5:05:53:4e:7f:24:
36:68:3a:16:c3:89:2a:9b:f5:af:62:de:21:a6:c8:
5b:fe:76:d8:b5:73:f6:d8:2d:d9:dc:7e:66:25:a0:
df:59:6c:3d:ee:ce:7d:b3:96:06:04:9b:6d:fb:ea:
f2:6e:a7:62:e9:e0:05:de:26:c2:80:49:1c:ea:52:
86:e8:d0:10:28:7a:b5:22:46:b2:00:f8:11:ab:26:
6a:46:80:00:d5:84:aa:2e:73:fb:85:04:8a:98:41:
4c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:6C:14:E8:A6:47:7D:2D:83:3B:C2:A7:29:E9:37:0B:9B:47:2A:C2
X509v3 Authority Key Identifier:
keyid:BE:55:77:9B:C8:B0:BB:E5:E5:7A:07:75:5B:13:28:A5:7C:9C:AD:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlV3m8iwu-Xlegd1WxMopXycrWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/BWwU6KZHfS2DO8KnKek3C5tHKsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.184.0/22
IPv6:
2001:67c:2af4::/48
Signature Algorithm: sha256WithRSAEncryption
55:c5:28:f3:b8:87:7c:23:77:97:d0:f8:d0:3b:aa:7d:7c:07:
a9:c3:a7:3f:10:c3:dc:21:85:97:1b:ad:da:26:f4:bc:86:b2:
89:09:6d:f5:6e:4e:66:b1:45:7c:5b:c5:29:14:7e:86:25:1d:
49:79:85:d3:5c:8a:7a:71:91:fd:fe:da:ef:d9:53:34:cc:a7:
9a:fa:69:e1:04:fe:85:45:c7:8c:14:65:8c:d5:8f:2f:b3:ba:
69:78:2d:e9:3f:8e:1d:bf:48:c3:1a:c3:2b:2a:10:1a:11:ae:
a5:87:a9:d5:fc:1e:a1:fa:40:b9:33:32:8b:2d:5f:c0:3d:6c:
f1:12:69:aa:9b:1f:53:c1:69:7a:2f:c0:ec:bb:ab:7c:a3:24:
b1:54:b7:bb:fc:35:ca:55:6f:0f:02:43:6c:52:76:82:89:9d:
57:0c:b4:97:60:3f:c1:55:54:5f:c7:1f:a5:54:05:bd:f5:1c:
c8:c6:92:57:c2:a8:68:81:89:0c:2c:83:c9:08:db:08:c3:61:
35:6e:e2:66:cf:17:98:b2:ad:bd:d8:6b:24:22:eb:87:6c:2f:
52:5e:14:d7:f0:8c:84:45:6f:d4:4b:a3:fc:06:dd:52:bd:fb:
7d:69:67:a4:2e:69:13:a7:83:3a:81:68:45:d1:f7:1c:8c:70:
3f:25:22:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:48:28 2024 by rpki-client on console-fra.rpki-client.org