Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/bWvPkaR09c6Cswk7dqX7MszV_iA.roa
File: bWvPkaR09c6Cswk7dqX7MszV_iA.roa (raw, json)
Hash identifier: v8VTLGFtn0o9f6WDz5qR6djpajxYLTh/VRssiJElxcs=
Subject key identifier: 6D:6B:CF:91:A4:74:F5:CE:82:B3:09:3B:76:A5:FB:32:CC:D5:FE:20
Certificate issuer: /CN=0f92c52f86009879c177092f7cd83418b4df8cab
Certificate serial: 018CC3494C71E9D98F13F73082213462AA68
Authority key identifier: 0F:92:C5:2F:86:00:98:79:C1:77:09:2F:7C:D8:34:18:B4:DF:8C:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/bWvPkaR09c6Cswk7dqX7MszV_iA.roa
Signing time: Mon 01 Jan 2024 04:30:09 +0000
ROA not before: Mon 01 Jan 2024 04:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 4755
IP address blocks: 81.28.112.0/20 maxlen: 24
188.123.160.0/19 maxlen: 24
185.175.248.0/22 maxlen: 24
82.212.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:4c:71:e9:d9:8f:13:f7:30:82:21:34:62:aa:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f92c52f86009879c177092f7cd83418b4df8cab
Validity
Not Before: Jan 1 04:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d6bcf91a474f5ce82b3093b76a5fb32ccd5fe20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d3:93:5c:03:72:c5:5f:76:ad:95:b5:45:1d:
a0:ae:fb:ee:b5:0f:27:b9:34:08:8c:1e:f6:8c:a4:
2e:37:1d:ae:4f:a9:3a:7d:b4:1a:82:21:00:c5:10:
04:8b:bf:67:23:2f:d1:4f:95:54:bb:2b:35:7c:18:
c5:c3:a8:e9:3a:2c:8e:af:13:00:e4:d0:b6:d8:a9:
b4:e9:fa:b0:c1:c3:cd:4d:9b:cd:22:fd:12:92:3f:
3c:b8:4a:48:b0:a0:78:62:98:73:68:8f:d8:e5:ce:
37:8e:c8:d4:41:7b:49:14:90:a9:b7:7e:61:87:d1:
41:0a:1d:37:b5:94:f0:62:1f:67:e3:4f:88:47:7d:
91:ab:19:c1:91:67:f0:18:2e:89:4a:0b:2f:36:05:
14:75:06:2e:71:17:4a:70:1f:f5:3c:72:c1:e0:56:
92:31:19:c4:62:9e:9e:8a:7a:b1:75:e2:47:38:2d:
49:30:b3:da:b3:a5:a9:b6:73:f1:40:89:ed:36:1c:
5e:f5:3d:93:42:1b:04:63:9f:e1:00:f0:90:37:cd:
c4:0a:37:4d:a9:9e:ea:54:73:35:eb:30:fc:b3:b6:
ba:70:14:4d:57:a0:f4:1d:6e:20:0c:5d:5c:83:d6:
90:87:34:dd:84:3f:7e:85:f7:19:5b:de:9e:d4:c8:
98:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:6B:CF:91:A4:74:F5:CE:82:B3:09:3B:76:A5:FB:32:CC:D5:FE:20
X509v3 Authority Key Identifier:
keyid:0F:92:C5:2F:86:00:98:79:C1:77:09:2F:7C:D8:34:18:B4:DF:8C:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/bWvPkaR09c6Cswk7dqX7MszV_iA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.28.112.0/20
82.212.64.0/18
185.175.248.0/22
188.123.160.0/19
Signature Algorithm: sha256WithRSAEncryption
34:0a:b9:bc:20:16:6f:aa:98:39:af:d3:00:84:82:44:4d:0b:
51:2e:5f:1b:8d:b1:86:59:4b:ec:90:a7:38:f8:c7:8d:1a:af:
1c:c1:c8:a2:fa:64:1b:35:2d:d7:21:a6:25:6f:01:7a:62:1e:
49:5c:94:ca:85:bc:1d:e7:44:0c:cb:9a:41:2f:9f:a6:19:b8:
ab:80:24:45:6d:e8:04:8e:dc:57:2f:37:b1:84:27:55:b3:5e:
b4:84:4f:41:f2:8b:34:b5:5c:3b:65:92:db:42:5a:60:2d:bd:
a0:3b:a8:63:84:18:5b:37:7e:bc:34:f2:f1:4b:28:58:18:20:
83:2a:84:db:50:30:85:8a:4f:60:0d:d6:41:32:2d:5e:d1:82:
9a:10:6e:9d:ce:b7:50:60:b5:a6:5e:1f:f3:09:97:e1:fd:ce:
a6:49:ee:93:2a:3f:6c:e4:31:19:25:0c:93:d0:a4:c6:fa:20:
a2:b3:53:e4:a7:bf:aa:e0:98:40:27:39:63:04:71:d8:08:8b:
81:11:82:59:56:19:92:3e:35:49:39:93:53:17:1e:fe:c4:68:
f4:5f:8d:09:d5:98:59:ac:8b:27:7d:7f:da:58:ec:8b:94:22:
7d:c1:c8:b5:d3:7e:31:cb:00:9a:08:9d:aa:bc:89:25:ed:e8:
74:ea:66:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 09:08:20 2024 by rpki-client on console-ams.rpki-client.org