Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/92f56e-a6a9-492f-9828-1205fe4ce361/1/BaCUmJaF1FYDd52LbV4nsbmakuQ.roa
File: BaCUmJaF1FYDd52LbV4nsbmakuQ.roa (raw, json)
Hash identifier: tCrK0nL6mqu51rpOAwgszitVTIMRyzPtJ6byyPtFbxk=
Subject key identifier: 05:A0:94:98:96:85:D4:56:03:77:9D:8B:6D:5E:27:B1:B9:9A:92:E4
Certificate issuer: /CN=965e0880b3c7bd0b90a64c244e2fa1cf0d37d072
Certificate serial: 0191DAE816EB215483E72285E390017D754C
Authority key identifier: 96:5E:08:80:B3:C7:BD:0B:90:A6:4C:24:4E:2F:A1:CF:0D:37:D0:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ll4IgLPHvQuQpkwkTi-hzw030HI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/92f56e-a6a9-492f-9828-1205fe4ce361/1/BaCUmJaF1FYDd52LbV4nsbmakuQ.roa
Signing time: Tue 10 Sep 2024 07:48:48 +0000
ROA not before: Tue 10 Sep 2024 07:48:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200845
IP address blocks: 185.201.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/92f56e-a6a9-492f-9828-1205fe4ce361/1/ll4IgLPHvQuQpkwkTi-hzw030HI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/92f56e-a6a9-492f-9828-1205fe4ce361/1/ll4IgLPHvQuQpkwkTi-hzw030HI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ll4IgLPHvQuQpkwkTi-hzw030HI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:da:e8:16:eb:21:54:83:e7:22:85:e3:90:01:7d:75:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965e0880b3c7bd0b90a64c244e2fa1cf0d37d072
Validity
Not Before: Sep 10 07:48:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05a094989685d45603779d8b6d5e27b1b99a92e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6e:31:90:93:74:d3:c4:75:97:fc:83:aa:1f:
a1:87:40:39:cd:04:cf:ca:13:d0:6f:bd:ab:37:da:
4c:25:90:4f:68:d5:02:66:e4:f4:12:5a:50:e6:cf:
4a:49:03:20:74:41:1b:75:80:87:c1:0d:a8:22:21:
88:6d:a3:63:93:06:03:8d:c3:25:94:ea:42:e1:58:
e1:63:bc:18:82:8d:c6:ce:ea:70:a2:f3:be:3c:a0:
84:41:da:14:d4:6c:8f:4f:f3:86:33:d0:8c:22:df:
3a:52:e1:96:87:d7:2e:e0:1f:f8:24:26:f1:b1:6f:
3c:09:d6:8c:7a:af:f6:88:55:f2:42:e5:ac:65:76:
ec:a3:1d:d2:ca:be:65:23:cb:f9:ed:ea:9d:d9:1a:
60:4c:b1:37:9f:4b:9e:e2:a1:13:87:14:12:17:43:
b0:10:b7:f2:ff:c7:b0:56:b1:ee:0e:1c:4f:28:2a:
bc:ab:63:f0:a4:2c:f5:69:61:d8:19:81:e0:b9:a4:
f7:6c:08:72:42:83:d1:a7:57:21:90:7d:34:73:61:
e0:4c:fb:9c:5d:6e:e8:e9:12:56:b0:6f:bf:c8:81:
9f:0d:5e:e1:99:e4:8d:e1:5d:3a:52:82:f6:11:eb:
56:52:12:3e:6c:1c:67:b4:1d:ae:ad:21:c5:c1:78:
35:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A0:94:98:96:85:D4:56:03:77:9D:8B:6D:5E:27:B1:B9:9A:92:E4
X509v3 Authority Key Identifier:
keyid:96:5E:08:80:B3:C7:BD:0B:90:A6:4C:24:4E:2F:A1:CF:0D:37:D0:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ll4IgLPHvQuQpkwkTi-hzw030HI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/92f56e-a6a9-492f-9828-1205fe4ce361/1/BaCUmJaF1FYDd52LbV4nsbmakuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/92f56e-a6a9-492f-9828-1205fe4ce361/1/ll4IgLPHvQuQpkwkTi-hzw030HI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.176.0/22
Signature Algorithm: sha256WithRSAEncryption
96:43:71:cd:0b:25:e0:f5:ba:55:ef:d1:0a:46:f0:ef:fd:4b:
90:c2:13:89:45:27:0a:c7:b7:73:e4:e5:c5:c7:cd:c6:08:98:
ce:f1:7a:7a:1e:57:f0:22:29:63:f6:8f:f4:02:e7:d8:34:47:
e0:a5:d6:72:f3:9b:06:db:3b:4e:9f:d4:15:e9:1c:f2:b2:2e:
c9:74:bf:13:e9:ec:9c:f5:bb:f1:6b:89:3d:21:f6:87:53:7b:
9a:0a:ab:56:30:3b:26:61:2e:69:98:bc:f7:e0:a0:97:00:dd:
7c:ac:4e:5c:65:fb:c1:bb:fb:c1:ad:ca:0b:59:1a:ec:be:c6:
31:58:ea:62:f1:b3:e6:3d:94:e8:14:ab:9d:aa:bf:74:66:39:
a3:f1:e8:a8:bd:12:51:1f:c9:46:0e:9a:dc:62:a0:7e:e1:e3:
d4:83:23:8a:c5:ea:e7:32:6e:bc:71:a1:ea:b0:2a:ea:55:3d:
b1:34:36:55:77:ea:11:19:cf:c5:35:80:d7:4b:82:c5:c7:7d:
ad:7d:de:40:0f:eb:b0:0f:8a:4e:2b:10:1e:1e:aa:79:1b:b7:
ee:da:43:da:aa:1f:ca:f7:99:9d:1d:c3:66:ab:8c:50:03:1a:
4a:38:58:d9:dc:71:c5:a0:3d:f9:5e:87:af:d9:b2:17:2c:9a:
85:49:e8:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:34:58 2024 by rpki-client on console-ams.rpki-client.org