Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/BhkjiYhkHu2dotzHGFXbdk-T6aE.roa
File: BhkjiYhkHu2dotzHGFXbdk-T6aE.roa (raw, json)
Hash identifier: YsknqJsC7kevSUBfFCaurNIdA8QDVAhG4M0jUn4GZYM=
Subject key identifier: 06:19:23:89:88:64:1E:ED:9D:A2:DC:C7:18:55:DB:76:4F:93:E9:A1
Certificate issuer: /CN=4b796f0b3051b5bc814b2e89cb470a3826b2bf00
Certificate serial: 018CC348B42FF7A176BEF66FEE851CE8A3FF
Authority key identifier: 4B:79:6F:0B:30:51:B5:BC:81:4B:2E:89:CB:47:0A:38:26:B2:BF:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3lvCzBRtbyBSy6Jy0cKOCayvwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/BhkjiYhkHu2dotzHGFXbdk-T6aE.roa
Signing time: Mon 01 Jan 2024 04:29:30 +0000
ROA not before: Mon 01 Jan 2024 04:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199937
IP address blocks: 185.42.68.0/23 maxlen: 23
185.42.71.0/24 maxlen: 24
2a04:8e80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3lvCzBRtbyBSy6Jy0cKOCayvwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 19:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:b4:2f:f7:a1:76:be:f6:6f:ee:85:1c:e8:a3:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b796f0b3051b5bc814b2e89cb470a3826b2bf00
Validity
Not Before: Jan 1 04:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0619238988641eed9da2dcc71855db764f93e9a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:32:d0:b4:f1:d4:9d:2a:44:a0:9d:64:11:a9:
1d:bf:d8:2a:4d:6f:57:57:55:3b:f2:82:5c:a3:ad:
ea:29:70:63:53:9d:62:17:d6:54:bf:50:cc:f2:4f:
0e:a2:b9:9c:59:41:95:c7:39:59:78:c0:42:1c:1b:
f4:80:1f:be:89:85:27:04:16:03:d2:f4:57:18:c2:
8d:3f:2f:85:66:ae:8a:e7:96:11:a7:1e:cc:76:50:
8f:f0:f8:01:a9:5c:3a:09:e8:46:e3:14:75:58:54:
d3:60:a4:92:31:43:24:4a:1a:aa:d2:b0:19:81:49:
9e:28:a9:6c:e7:d1:b9:34:6d:54:51:4f:2d:50:f0:
27:d6:9a:94:f9:36:dc:1c:9c:7f:11:9e:03:d1:b5:
be:7a:8b:d4:4c:24:5e:4e:2a:fa:1e:ae:ca:99:b8:
58:18:e8:7a:2d:ef:30:b5:cf:cc:ea:b1:31:bc:46:
5b:d4:a7:79:a2:2e:78:fd:4b:93:0b:ca:be:3f:64:
e2:e3:d4:00:90:23:92:fc:4a:95:a6:7c:07:b4:40:
71:71:a8:49:57:7c:4b:15:99:bb:cf:2e:f7:48:c7:
8e:d2:94:c7:8c:27:c5:5e:de:14:72:86:ed:e0:a4:
37:1f:63:94:f4:92:d2:ad:f9:22:59:f6:e9:df:cc:
c2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:19:23:89:88:64:1E:ED:9D:A2:DC:C7:18:55:DB:76:4F:93:E9:A1
X509v3 Authority Key Identifier:
keyid:4B:79:6F:0B:30:51:B5:BC:81:4B:2E:89:CB:47:0A:38:26:B2:BF:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3lvCzBRtbyBSy6Jy0cKOCayvwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/BhkjiYhkHu2dotzHGFXbdk-T6aE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.68.0/23
185.42.71.0/24
IPv6:
2a04:8e80::/48
Signature Algorithm: sha256WithRSAEncryption
8e:ab:d1:8f:75:b2:bf:0b:77:85:b5:3b:43:46:99:17:d7:61:
af:89:22:54:27:2e:a5:cb:4d:98:08:73:98:99:d0:8c:6e:e1:
14:34:32:81:b9:aa:09:f8:6d:7a:6c:c6:74:17:32:cd:55:5c:
d3:ac:e6:3e:60:45:7a:3f:7e:a8:e4:1a:20:ec:75:a4:d0:9f:
2e:79:94:32:a8:a6:8e:1a:b3:0c:47:fa:eb:a6:d9:95:bb:88:
0b:90:0a:3f:5d:3f:0f:07:fd:aa:22:22:70:b6:49:56:9c:1a:
f7:b6:1a:ce:59:04:29:1f:d1:1c:d9:38:3e:a5:7a:6a:a8:79:
57:54:4a:2d:df:c3:c4:f9:70:43:74:f4:51:f1:b8:dc:5e:82:
ca:e4:e7:79:e7:fa:ff:80:ba:f7:2e:9a:85:0f:41:b0:fa:e5:
80:72:f1:58:7f:17:e9:12:dc:35:b0:28:8b:1b:49:a0:28:3f:
7e:36:b9:09:85:05:e8:36:12:38:f5:ef:04:2c:32:4c:45:0d:
fe:ab:59:7c:4f:ae:b9:c8:95:6a:4b:be:91:3d:7e:92:44:52:
91:c8:05:e9:3f:43:2e:7c:67:ab:6e:85:e6:71:2d:79:83:2a:
61:1b:bb:4d:32:9c:bf:b7:d3:08:6f:f2:1a:d4:c8:7b:58:02:
bd:98:50:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 04:01:34 2024 by rpki-client on console-fra.rpki-client.org