Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/Bf7vw6XNWd79pL8skGv9KUebZrk.roa
File: Bf7vw6XNWd79pL8skGv9KUebZrk.roa (raw, json)
Hash identifier: HEhkCrCOWPpMk9lmkK9RM/SMAGJVxww/g9NObTZe30M=
Subject key identifier: 05:FE:EF:C3:A5:CD:59:DE:FD:A4:BF:2C:90:6B:FD:29:47:9B:66:B9
Certificate issuer: /CN=0e05e6cea4b39345ce2902c97a1dbabcb46d2a3b
Certificate serial: 018CC56E1882AAE67A57A0A47D07E6661B90
Authority key identifier: 0E:05:E6:CE:A4:B3:93:45:CE:29:02:C9:7A:1D:BA:BC:B4:6D:2A:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgXmzqSzk0XOKQLJeh26vLRtKjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/Bf7vw6XNWd79pL8skGv9KUebZrk.roa
Signing time: Mon 01 Jan 2024 14:29:35 +0000
ROA not before: Mon 01 Jan 2024 14:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201213
IP address blocks: 91.199.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DgXmzqSzk0XOKQLJeh26vLRtKjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:18:82:aa:e6:7a:57:a0:a4:7d:07:e6:66:1b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e05e6cea4b39345ce2902c97a1dbabcb46d2a3b
Validity
Not Before: Jan 1 14:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05feefc3a5cd59defda4bf2c906bfd29479b66b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:35:16:7e:01:36:8d:61:8a:cc:00:1d:91:c4:
7d:20:01:39:74:1a:7e:5c:36:3b:e3:f1:70:a5:42:
4e:e7:c2:23:85:42:bb:9c:61:a4:56:3d:e5:03:11:
95:d2:3e:87:67:b3:7f:f5:d7:0a:f2:3a:a4:43:df:
a2:d1:c0:46:b2:f9:2a:4b:a3:7a:19:63:96:3f:94:
b3:56:82:8d:c4:65:16:7b:c5:5b:0c:49:fe:df:ff:
cc:72:67:b5:c0:d2:f8:7c:a6:b1:17:11:47:6c:7c:
9b:78:16:8b:0c:57:f7:bb:48:d2:f0:2c:4a:e7:b2:
5a:4b:92:e1:33:cc:0d:b4:0c:cb:bf:01:dc:53:35:
cd:ad:dc:1c:31:8b:d6:77:64:49:e7:93:49:ee:b6:
91:d7:c0:ce:63:e4:8e:15:9d:4d:40:a4:7c:03:d8:
cd:ec:b0:62:1d:8a:18:2e:ec:7a:17:92:89:71:41:
54:42:72:54:8e:af:cd:f8:e4:56:f1:f8:4c:d8:da:
19:0f:2b:b5:06:0d:03:ca:85:c1:1b:6e:53:74:c8:
2c:90:3b:55:70:0a:5d:62:84:1c:2b:4b:e3:34:12:
3a:92:bc:62:14:1e:2e:7c:25:fa:50:99:9a:eb:5d:
84:ed:91:58:8d:f6:3d:60:06:60:f3:38:98:3c:65:
30:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:FE:EF:C3:A5:CD:59:DE:FD:A4:BF:2C:90:6B:FD:29:47:9B:66:B9
X509v3 Authority Key Identifier:
keyid:0E:05:E6:CE:A4:B3:93:45:CE:29:02:C9:7A:1D:BA:BC:B4:6D:2A:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgXmzqSzk0XOKQLJeh26vLRtKjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/Bf7vw6XNWd79pL8skGv9KUebZrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.75.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:54:49:32:c8:c3:03:77:0e:dc:b2:53:a6:43:04:f5:36:e5:
32:fa:e4:04:74:95:d7:49:6d:e9:60:5a:0c:58:6e:fc:20:38:
7a:38:5c:ba:72:d5:e2:3b:34:8d:3b:a7:27:9d:85:5b:d4:bd:
64:cd:2a:de:8e:5c:4c:f4:33:d7:31:d9:d4:dd:d2:fc:b2:da:
b2:7a:12:68:71:ad:90:17:6f:95:51:ac:5d:9f:f6:8a:8a:42:
2f:e2:b5:f6:f7:0f:4c:6f:d9:76:60:10:1a:13:bf:3f:ab:59:
eb:84:c7:19:59:d1:eb:a2:f0:cc:f2:1e:08:0f:1a:ef:9b:71:
75:ae:61:96:65:cf:97:77:a8:8e:29:4b:0a:d6:a1:b9:88:23:
a8:e8:39:fd:1a:c8:35:6c:b0:db:4b:dc:6e:70:e1:c0:2d:a4:
93:79:f8:60:d2:85:21:c9:b6:b7:87:6b:18:13:bf:e5:3a:33:
62:39:3d:ce:b0:4f:3a:cb:a1:0c:32:d4:b0:bf:a6:61:fd:f3:
a8:b8:ff:98:a6:f4:a7:20:17:2c:10:14:f6:49:48:49:a0:c3:
2a:b3:86:4c:4c:2d:37:43:01:75:d6:14:90:34:74:a7:93:2e:
02:ff:f3:48:12:ee:49:3e:52:aa:31:a0:c6:04:3a:f6:3a:f2:
83:c1:54:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:24:09 2024 by rpki-client on console-fra.rpki-client.org