Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/BqqHg8U68Zjl0sJBCXZCnyXoyUw.roa
File: BqqHg8U68Zjl0sJBCXZCnyXoyUw.roa (raw, json)
Hash identifier: VjfmMjEUVWDqT0ls5C+9t5CykMm+/6/G22axRu+r0BE=
Subject key identifier: 06:AA:87:83:C5:3A:F1:98:E5:D2:C2:41:09:76:42:9F:25:E8:C9:4C
Certificate issuer: /CN=5753c06290a371994d7577318685f5bc4a538d47
Certificate serial: 018DB1E1CD7D3A9B2EDB610957DFCD0BC6D0
Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/BqqHg8U68Zjl0sJBCXZCnyXoyUw.roa
Signing time: Fri 16 Feb 2024 12:26:21 +0000
ROA not before: Fri 16 Feb 2024 12:26:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61388
IP address blocks: 158.172.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b1:e1:cd:7d:3a:9b:2e:db:61:09:57:df:cd:0b:c6:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47
Validity
Not Before: Feb 16 12:26:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=06aa8783c53af198e5d2c2410976429f25e8c94c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:80:3d:9b:6a:35:c6:7c:52:eb:c9:37:10:b3:
d9:4b:29:30:f0:25:26:bb:a7:55:fe:db:ef:92:f9:
54:fc:44:f2:c5:9c:e2:8a:b6:9d:ef:3a:5e:96:0d:
77:b7:b0:cb:a3:ca:b8:0b:c5:34:36:e3:c3:88:33:
f8:6b:7c:0e:f0:b5:34:a2:53:57:d6:36:0e:33:c1:
77:c7:74:08:d4:5a:f4:6e:1a:6e:6e:50:31:7a:2e:
91:88:05:a4:9b:0d:95:07:24:f9:d7:5b:2e:f9:40:
f2:f4:fb:6f:f1:9a:e9:22:ec:d6:e6:68:a5:28:bf:
f1:2b:36:8f:e0:c7:e6:c0:05:0d:d4:cc:d5:11:77:
29:31:fa:2a:03:e7:70:aa:20:32:85:61:22:d9:34:
08:7a:3e:4e:49:c2:28:d4:41:9a:95:90:ce:b4:8d:
15:de:f4:17:f9:f8:f4:59:00:04:a2:1c:7e:69:ec:
36:98:d2:e9:7d:35:c0:34:56:fd:15:66:59:2c:2f:
cb:18:be:b5:82:13:d9:4f:31:5e:7b:ce:88:53:43:
3e:1d:a7:7d:74:38:4a:e7:93:2d:4d:d5:0e:f5:77:
7f:8e:bd:bf:d8:8b:94:82:9e:a6:af:78:cd:3b:80:
97:92:9e:06:63:a0:c3:b5:d3:e3:c6:52:b1:3c:38:
a0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:AA:87:83:C5:3A:F1:98:E5:D2:C2:41:09:76:42:9F:25:E8:C9:4C
X509v3 Authority Key Identifier:
keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/BqqHg8U68Zjl0sJBCXZCnyXoyUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.172.96.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:0e:a9:fc:97:c8:82:f3:fb:9e:9e:77:fc:07:0d:05:0a:2e:
5c:fe:ef:42:b0:46:d0:c5:ac:89:83:fa:77:91:5b:24:55:40:
2f:29:e5:42:e2:50:c4:89:b7:80:4b:81:b4:05:ba:a8:8c:e4:
ba:5b:c7:05:b7:2e:f9:dc:71:43:f7:18:be:38:1b:0d:5f:af:
12:6e:15:49:88:39:ac:d2:f9:c8:f7:5a:11:fa:2e:15:d4:c3:
13:d8:01:9c:f5:e4:5a:91:1c:af:b4:b1:54:73:e6:b8:3b:d3:
b8:91:96:9e:a9:60:9c:cb:e9:85:ee:3e:38:db:89:8a:43:7b:
3f:5c:53:4e:ab:3c:97:bb:c0:5e:98:f4:70:86:ba:d2:89:86:
df:f6:20:48:0e:8e:23:67:6e:6a:54:0a:e3:09:45:61:3e:14:
f1:2e:ef:d9:87:81:3f:ae:a5:bc:cb:e2:2c:72:c4:dd:64:72:
fd:32:4e:7c:07:27:76:ce:ba:4e:29:02:19:e0:8d:9f:97:10:
3d:e4:6b:37:82:10:9f:1d:54:c9:21:39:d2:7a:6f:78:7c:a6:
d4:c1:72:71:74:43:d6:af:e9:45:86:8e:6a:6d:b1:56:49:c8:
3f:4d:56:bf:35:2e:de:31:af:b8:ef:12:22:dd:64:0b:a9:3c:
41:51:f1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 00:50:56 2024 by rpki-client on console-ams.rpki-client.org