Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/BblkZJXuH18S031Yafe5FIduP8M.roa
File: BblkZJXuH18S031Yafe5FIduP8M.roa (raw, json)
Hash identifier: zjQ6Lg6hVEpwTcwrbz7z+g75Cspy3xVbaZmnMVGj5oQ=
Subject key identifier: 05:B9:64:64:95:EE:1F:5F:12:D3:7D:58:69:F7:B9:14:87:6E:3F:C3
Certificate issuer: /CN=d947b281348abdac24c2bd16da06775ca755f410
Certificate serial: 018CC726C5E153D2B07C99C9015E5D497FDC
Authority key identifier: D9:47:B2:81:34:8A:BD:AC:24:C2:BD:16:DA:06:77:5C:A7:55:F4:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/BblkZJXuH18S031Yafe5FIduP8M.roa
Signing time: Mon 01 Jan 2024 22:30:56 +0000
ROA not before: Mon 01 Jan 2024 22:30:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49264
IP address blocks: 185.161.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:c5:e1:53:d2:b0:7c:99:c9:01:5e:5d:49:7f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d947b281348abdac24c2bd16da06775ca755f410
Validity
Not Before: Jan 1 22:30:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05b9646495ee1f5f12d37d5869f7b914876e3fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3d:91:dc:7e:79:f1:4b:20:0e:df:6d:dd:47:
dc:6a:19:c8:78:49:70:c1:b8:9a:e1:a1:9e:35:bc:
99:28:10:b9:2c:52:2c:0c:10:94:e6:ad:34:b0:33:
e6:9e:37:dc:e5:d4:ff:12:95:af:71:a2:f0:81:52:
29:73:b1:51:96:94:3e:7c:12:7b:dc:af:56:a3:81:
81:a8:eb:42:10:fe:67:6d:60:29:ec:bb:63:fe:3e:
39:f9:b1:44:e2:e0:d5:b1:70:b9:b1:e5:8b:12:24:
43:ad:46:2b:eb:37:15:98:23:e3:c3:05:11:44:9d:
05:ea:81:65:e2:16:93:f3:29:92:c9:6b:50:38:64:
35:62:95:8c:0b:02:39:cb:b2:90:ef:e6:72:0f:6a:
dd:29:fa:7a:db:b2:28:bf:0e:53:56:25:60:7d:b0:
58:1a:ef:ae:a0:1d:55:3a:d8:d5:08:f5:eb:5c:a0:
76:06:37:87:b4:47:7f:fb:8b:35:d7:1d:64:c0:78:
71:eb:d8:76:ce:09:37:31:c4:32:19:14:3c:4e:c4:
ac:37:74:9f:c5:7f:9b:f9:e2:e4:41:1a:5c:73:91:
fd:8e:b8:7b:d5:a1:ab:ea:7d:9a:5c:36:2e:58:98:
85:a5:df:ef:5c:e5:a0:a2:85:96:d8:a4:53:10:6a:
b2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B9:64:64:95:EE:1F:5F:12:D3:7D:58:69:F7:B9:14:87:6E:3F:C3
X509v3 Authority Key Identifier:
keyid:D9:47:B2:81:34:8A:BD:AC:24:C2:BD:16:DA:06:77:5C:A7:55:F4:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/BblkZJXuH18S031Yafe5FIduP8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.160.0/24
Signature Algorithm: sha256WithRSAEncryption
33:af:82:3b:11:e2:2d:3b:e6:e5:c6:e9:58:5d:b7:e3:ad:10:
72:b1:2f:12:b9:fe:86:15:91:f3:22:96:69:93:3c:c3:a1:93:
8b:11:cc:d2:3c:31:0a:a7:1a:98:d5:7e:5d:e3:09:bb:15:7a:
e4:01:82:f3:62:a6:3f:02:f2:bc:27:d2:a0:10:ec:39:62:ed:
f4:ca:62:27:cd:a3:15:af:1f:9a:eb:c2:44:3e:72:79:10:95:
09:3e:c8:2f:5d:c1:6d:f0:65:89:d8:45:5d:bf:78:a7:32:74:
c5:9e:1c:bc:8c:2d:cc:29:16:d3:0f:4a:72:f4:b0:63:4b:79:
e0:cd:a4:57:5a:7a:fd:4e:13:a9:f5:33:2b:5e:1e:0e:4a:73:
dc:b6:f9:dc:1a:9d:0a:d5:9b:8d:a0:fd:dc:24:a1:a9:36:ca:
77:fa:63:70:5d:cc:f0:ca:db:45:ce:f5:a5:a7:47:18:af:a9:
6b:5a:39:d5:99:30:57:b7:b7:7e:34:22:e7:83:1e:b4:88:30:
18:0d:d0:f3:7a:0c:01:90:29:00:4a:fc:cf:ae:a1:29:f2:2d:
60:a3:aa:6e:4a:55:51:66:b5:9c:bb:4a:df:a9:97:a8:49:e6:
dd:46:b3:e2:af:cb:ee:6f:bf:a4:e2:95:0c:fa:66:93:bc:42:
ec:94:b5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 09:14:01 2024 by rpki-client on console-fra.rpki-client.org