Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/bhOZBycWb86UhLTISNKALRsPASk.roa
File: bhOZBycWb86UhLTISNKALRsPASk.roa (raw, json)
Hash identifier: qk2QiV8RRuDy2H1/H8sMhmIqNFJZXqQtQjU7qLMqJ/U=
Subject key identifier: 6E:13:99:07:27:16:6F:CE:94:84:B4:C8:48:D2:80:2D:1B:0F:01:29
Certificate issuer: /CN=e3b35956a4038a0938ccda85592ad531e4a883ad
Certificate serial: 018CC726E0485915F89F276C9AE96975E115
Authority key identifier: E3:B3:59:56:A4:03:8A:09:38:CC:DA:85:59:2A:D5:31:E4:A8:83:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/bhOZBycWb86UhLTISNKALRsPASk.roa
Signing time: Mon 01 Jan 2024 22:31:02 +0000
ROA not before: Mon 01 Jan 2024 22:31:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204741
IP address blocks: 185.242.24.0/22 maxlen: 22
185.242.24.0/23 maxlen: 23
185.242.24.0/24 maxlen: 24
185.242.26.0/23 maxlen: 23
185.242.27.0/24 maxlen: 24
185.242.26.0/24 maxlen: 24
185.242.25.0/24 maxlen: 24
2a0c:ba80::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 May 2024 19:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:e0:48:59:15:f8:9f:27:6c:9a:e9:69:75:e1:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3b35956a4038a0938ccda85592ad531e4a883ad
Validity
Not Before: Jan 1 22:31:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e13990727166fce9484b4c848d2802d1b0f0129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:33:23:0a:b2:e7:ee:2b:c8:1a:b9:73:3d:15:
6e:c8:71:c4:8f:49:f9:80:89:8d:7e:84:68:71:8d:
ae:a6:b4:6c:0c:53:cc:a6:31:10:56:b8:30:be:d3:
47:01:3a:5f:89:f7:5e:d9:56:ad:c8:4e:f5:6a:1d:
fa:e9:d1:57:0b:af:9c:a7:d9:84:18:4c:f0:be:2b:
56:01:92:75:28:e0:e4:79:5c:32:81:ea:74:1b:b3:
7d:42:00:91:a0:a2:58:84:58:71:f0:ae:0d:fb:82:
cd:29:ea:ab:e8:95:42:e2:30:f5:b9:8b:bc:00:2b:
39:f1:04:1a:41:b9:83:bb:96:0e:4e:94:52:6e:69:
b6:fc:3d:dd:1d:b2:7e:23:91:74:46:be:df:42:0d:
67:26:05:ca:58:00:02:49:7c:6d:ec:f8:7b:e1:94:
55:d3:8d:51:04:b3:07:90:8f:28:f3:0e:f3:fe:0f:
6d:97:dc:e4:2f:8d:88:27:3e:86:b7:27:12:f8:bb:
56:c0:04:ce:11:13:0d:a2:ff:c7:03:c5:88:55:06:
d0:54:73:1a:62:06:06:52:d7:07:53:2b:74:28:98:
47:70:52:a0:1e:69:25:a3:55:ef:b2:a3:f8:30:bf:
4a:0c:e9:0f:a4:14:e3:ff:7e:ae:d1:ca:cf:1f:f0:
52:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:13:99:07:27:16:6F:CE:94:84:B4:C8:48:D2:80:2D:1B:0F:01:29
X509v3 Authority Key Identifier:
keyid:E3:B3:59:56:A4:03:8A:09:38:CC:DA:85:59:2A:D5:31:E4:A8:83:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/bhOZBycWb86UhLTISNKALRsPASk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.24.0/22
IPv6:
2a0c:ba80::/29
Signature Algorithm: sha256WithRSAEncryption
6f:82:c8:cf:40:ef:66:d7:8d:09:d4:e7:e2:65:44:a7:25:70:
54:59:4b:e8:91:0d:c1:61:fb:ff:fd:9e:13:22:d9:c0:2a:66:
0e:2d:2f:5e:b3:d8:dc:28:4e:8f:d8:09:d4:d2:48:f9:22:5b:
72:4a:64:5d:48:9b:0b:5e:0c:54:24:c9:b9:48:73:d7:e4:ba:
db:6f:50:75:8c:d4:8b:9f:dc:ca:3b:fb:9f:25:8c:9a:04:7e:
07:83:71:aa:ad:00:3c:a2:3c:c2:21:7f:0b:f6:a7:f9:d3:f6:
51:ec:b8:f1:24:68:7e:7d:07:43:67:9d:cd:f2:70:43:fd:83:
91:bb:45:c1:16:e1:4a:1c:77:b1:38:45:71:61:94:0f:ea:b5:
43:2e:cb:a0:9e:40:86:c9:8a:d9:c4:4a:24:01:15:08:1b:c9:
1d:8b:76:eb:e6:9c:4a:cd:ef:3c:56:f2:c3:0d:fc:ec:83:b3:
ee:cd:bf:58:b8:84:0e:64:7f:0a:90:f6:0b:df:71:b2:ca:e4:
71:0f:c7:7e:6d:e7:33:31:b7:9d:64:d6:07:8f:aa:d0:8d:f2:
0e:1d:25:b5:47:7b:7b:9b:65:f1:03:53:6a:d8:af:57:2c:1a:
19:4f:44:2c:2f:d2:d5:3b:26:aa:7b:44:0f:79:83:af:ed:f4:
a2:f9:03:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 04:33:05 2024 by rpki-client on console-ams.rpki-client.org