Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/ButQDztwSvwCSV6P7Nii1aMj7mk.roa
File: ButQDztwSvwCSV6P7Nii1aMj7mk.roa (raw, json)
Hash identifier: nIgAGegg6xKZYcqQ3pmRwbPKElUP1DZ3fYbLe6UkB4U=
Subject key identifier: 06:EB:50:0F:3B:70:4A:FC:02:49:5E:8F:EC:D8:A2:D5:A3:23:EE:69
Certificate issuer: /CN=c679522eb892589d7364af579a724040e929f0aa
Certificate serial: 018CC5006E5C53ED1FC2261E1B29B48E92AB
Authority key identifier: C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/ButQDztwSvwCSV6P7Nii1aMj7mk.roa
Signing time: Mon 01 Jan 2024 12:29:48 +0000
ROA not before: Mon 01 Jan 2024 12:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202513
IP address blocks: 185.248.78.0/23 maxlen: 23
185.248.78.0/24 maxlen: 24
185.248.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:6e:5c:53:ed:1f:c2:26:1e:1b:29:b4:8e:92:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c679522eb892589d7364af579a724040e929f0aa
Validity
Not Before: Jan 1 12:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=06eb500f3b704afc02495e8fecd8a2d5a323ee69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:23:96:65:aa:58:cd:4e:ae:9e:42:5d:39:cf:
6e:c2:4f:eb:b9:f9:10:9b:67:a6:33:e3:0b:d1:fd:
a2:dc:f1:fd:17:c2:a2:30:99:74:8a:b6:00:6c:c2:
4e:6f:9a:c7:70:23:2f:ee:68:63:24:ab:4d:1e:92:
d8:32:51:77:65:5c:13:58:b9:27:62:75:4b:81:aa:
ae:7d:43:e4:41:7d:96:f8:e5:d1:54:20:24:d2:c1:
11:4d:05:2a:ae:df:bf:d0:fe:48:a3:3d:fc:fe:f6:
2e:be:ff:45:0a:35:3a:0a:18:4e:18:b8:33:9c:0b:
63:4a:13:70:99:d0:c9:f8:95:99:a1:32:36:4d:70:
da:89:a0:d1:ff:30:dc:de:66:01:40:01:c3:e9:e3:
30:3a:e6:cb:c2:38:2f:1f:06:a7:55:c0:8a:2c:23:
46:7f:59:03:c8:4c:ae:56:68:a2:65:34:93:df:9e:
84:37:6d:76:fe:4d:27:c6:56:d2:d2:d4:df:77:67:
c1:e0:9a:22:e5:fb:36:ec:81:fe:16:b9:49:98:f3:
e3:9d:a4:df:79:73:47:14:0c:d0:5c:ac:a7:00:92:
46:3d:03:a1:cd:9e:8f:d8:a7:b6:04:29:f9:86:18:
92:3b:58:88:d2:11:08:c7:38:f8:21:7d:27:26:44:
83:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:EB:50:0F:3B:70:4A:FC:02:49:5E:8F:EC:D8:A2:D5:A3:23:EE:69
X509v3 Authority Key Identifier:
keyid:C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/ButQDztwSvwCSV6P7Nii1aMj7mk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.78.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:f1:a0:f8:c2:58:17:51:7b:45:54:53:f1:c0:23:63:9f:c8:
0f:6b:7d:ff:fb:9b:f3:e2:99:d9:4d:ce:7b:ed:96:6b:27:04:
fb:92:b9:14:8d:88:fb:e3:fc:c8:69:22:ad:28:12:60:26:3f:
74:9a:4d:4c:c3:d7:9d:58:f0:70:0f:f4:ac:60:86:72:ca:d8:
82:f8:f9:15:ef:a9:a9:b6:b5:eb:b7:83:40:46:6c:b1:08:eb:
d4:67:92:36:1c:b6:43:49:b3:6d:d1:d9:8d:ba:74:29:4e:53:
f0:02:f2:b2:6f:ea:1e:d2:1d:da:b8:8e:de:ed:c9:23:14:89:
e0:fd:bc:fa:8d:2d:a9:65:81:0d:ce:20:87:b5:28:05:18:35:
2a:bf:9a:35:8e:7f:d4:ae:df:27:9c:38:16:77:8b:9f:76:e4:
c5:54:fe:6a:50:9c:20:28:e2:1e:c0:22:79:b7:f1:45:ff:50:
21:dd:07:16:2c:5a:72:66:73:70:2e:2c:9a:3a:64:30:61:0a:
4d:3c:bc:96:5a:41:e9:6b:50:7d:1e:03:b6:9d:da:1e:0a:ae:
e7:3c:18:f6:b2:c0:ed:87:fd:7f:a0:70:29:e8:26:ef:3f:b8:
77:32:b9:c1:fa:e1:ca:bb:f4:4d:6a:34:e5:32:9d:ef:48:b3:
f3:58:47:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:43:58 2024 by rpki-client on console-fra.rpki-client.org