Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/bpkmbmgFnuRRBpan_wgQHNfDmjw.roa
File: bpkmbmgFnuRRBpan_wgQHNfDmjw.roa (raw, json)
Hash identifier: zRu2Z/ZXS8X6LRRiD1mpCUgs7zmw8unwSjVbhCYw34g=
Subject key identifier: 6E:99:26:6E:68:05:9E:E4:51:06:96:A7:FF:08:10:1C:D7:C3:9A:3C
Certificate issuer: /CN=333361fba8409174fb3c482b8ca26f235ebd22c2
Certificate serial: 018CCA2B41AEE79743B6ECF19387C92E74EC
Authority key identifier: 33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/bpkmbmgFnuRRBpan_wgQHNfDmjw.roa
Signing time: Tue 02 Jan 2024 12:34:41 +0000
ROA not before: Tue 02 Jan 2024 12:34:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 45.134.80.0/24 maxlen: 24
45.134.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:41:ae:e7:97:43:b6:ec:f1:93:87:c9:2e:74:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=333361fba8409174fb3c482b8ca26f235ebd22c2
Validity
Not Before: Jan 2 12:34:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e99266e68059ee4510696a7ff08101cd7c39a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fc:03:84:e0:ea:cb:b7:34:7f:af:68:da:b9:
72:2a:91:24:23:ce:6e:3d:1e:56:e4:8e:6f:36:d9:
eb:00:0a:f7:91:9c:b9:a7:26:36:87:c6:9d:1f:4b:
8d:09:0e:be:eb:43:eb:32:19:1b:3c:00:80:21:02:
cb:99:8c:18:74:38:2e:a8:78:23:6d:1c:a4:34:a2:
02:12:1b:7b:17:ed:a7:d4:6a:fb:6c:97:8b:4a:6c:
d0:3c:a7:14:89:8f:11:65:4f:ef:b0:0b:64:18:dd:
69:ed:12:a4:cd:af:f1:a3:a5:06:41:97:a2:21:fb:
d8:bf:39:ec:ae:77:40:f1:df:0b:87:9c:66:cf:2e:
47:ad:4b:0f:da:d0:f8:0b:55:9d:c9:17:79:bb:4d:
2e:8a:9c:54:7e:e2:8f:6b:33:57:a5:0d:6b:5f:57:
94:7e:b4:96:a9:6c:c9:38:22:89:a4:c2:b6:77:85:
b5:0b:53:07:b8:79:da:26:b0:45:5b:51:53:1e:6e:
1b:b5:e3:4d:b6:af:6c:0a:f2:41:b0:45:cb:27:39:
a2:85:e5:16:71:2c:70:51:74:f2:5d:15:ff:86:0f:
5a:51:40:c6:2c:b5:0b:d8:f2:a5:c1:0f:6a:0f:1d:
67:e2:1f:2a:1b:b2:59:44:91:95:48:4b:b4:8b:e7:
33:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:99:26:6E:68:05:9E:E4:51:06:96:A7:FF:08:10:1C:D7:C3:9A:3C
X509v3 Authority Key Identifier:
keyid:33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/bpkmbmgFnuRRBpan_wgQHNfDmjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.80.0/23
Signature Algorithm: sha256WithRSAEncryption
61:bd:98:48:3f:4a:38:8a:8d:a1:b6:b7:57:ad:c7:96:2c:3f:
3c:e2:ae:90:48:a5:57:3c:b5:ab:8c:ff:23:c6:3f:48:25:8c:
33:6c:5b:74:94:c0:b9:f9:12:50:64:3d:d4:76:af:f7:9d:33:
95:2e:63:a7:a6:d3:bb:0c:00:cb:a6:a4:9d:ea:95:9d:ae:20:
a9:0a:84:ed:b0:ce:f8:07:e2:00:aa:e8:3b:d4:d7:e3:1b:52:
d3:95:78:60:6c:4e:dc:d3:77:d8:a9:03:ef:24:3b:cc:05:72:
3e:8c:3a:80:44:22:bb:be:58:52:28:1e:5e:04:53:7b:05:4f:
6d:6c:fa:20:10:7a:12:52:8c:93:8b:d6:90:9c:7a:1b:aa:cc:
72:da:b6:52:9b:17:34:67:d7:e1:46:f3:57:26:05:a6:46:c9:
c7:7e:91:00:d1:3d:ee:d2:68:0b:4f:d0:9b:52:2c:db:ed:22:
2e:d3:29:9a:59:0d:a7:76:6b:65:a6:4b:40:f5:cb:c1:48:8c:
07:8c:b9:90:23:4a:c7:65:42:b4:c4:e5:c7:ba:1b:c6:c5:e2:
05:5c:c0:88:a2:09:10:a2:75:9e:a5:1c:af:df:4e:cf:e7:a2:
10:ab:aa:46:6e:d7:f4:f4:da:8d:92:bc:23:d0:20:c3:ec:73:
c0:2c:93:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 19:42:19 2024 by rpki-client on console-fra.rpki-client.org