Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/BTsCabcnLmQEP58ZAAVwgpRXeWI.roa
File: BTsCabcnLmQEP58ZAAVwgpRXeWI.roa (raw, json)
Hash identifier: ituN/2tgM914IjbGS8bVWkYjVzTQWQEzx2KkFOalwiM=
Subject key identifier: 05:3B:02:69:B7:27:2E:64:04:3F:9F:19:00:05:70:82:94:57:79:62
Certificate issuer: /CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33
Certificate serial: 018DFC862D9133AF2E4637D03215AAD2CBB0
Authority key identifier: 89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/BTsCabcnLmQEP58ZAAVwgpRXeWI.roa
Signing time: Sat 02 Mar 2024 00:17:48 +0000
ROA not before: Sat 02 Mar 2024 00:17:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60788
IP address blocks: 46.227.48.0/21 maxlen: 21
185.47.104.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:fc:86:2d:91:33:af:2e:46:37:d0:32:15:aa:d2:cb:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33
Validity
Not Before: Mar 2 00:17:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=053b0269b7272e64043f9f190005708294577962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:33:a4:8d:81:99:21:7f:c6:66:90:2d:11:64:
b1:15:1e:21:27:5f:8e:4e:d1:67:d1:5f:be:4b:18:
c6:e0:2c:7a:d3:8c:f8:50:0a:31:5f:85:35:94:2c:
99:6a:5d:bc:f3:a3:1c:c8:a7:75:9f:a4:e3:ea:c1:
a9:7b:e6:d3:40:22:2f:d7:db:d4:b6:89:bd:92:3a:
de:7a:24:ed:42:be:7b:ec:b9:65:68:d3:d7:e8:89:
84:8b:e5:1a:bd:38:1c:e2:ef:9a:b3:33:93:1d:b6:
81:78:30:f6:90:a3:b3:df:5d:50:05:f5:88:6e:21:
63:8d:08:95:60:05:76:0f:71:ad:f4:af:15:af:78:
f9:b1:35:7a:54:63:30:7f:3b:17:83:35:4a:23:63:
b2:b2:b7:ea:d1:f2:65:97:f9:eb:dc:f7:61:51:d9:
14:92:f5:47:72:cf:c7:5b:26:1b:d4:ee:46:00:9a:
2c:82:ca:43:23:8d:a5:84:f8:92:2b:24:c3:ac:d2:
4e:a4:51:d4:69:b5:c8:e1:44:b8:2a:71:40:4e:76:
67:eb:23:8f:8a:ec:fb:79:54:07:10:d5:11:8c:86:
31:f5:15:87:e0:4a:99:e8:aa:20:77:a8:d4:4a:54:
40:f9:b4:65:9f:5d:de:03:18:f2:76:3d:d5:90:08:
fc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:3B:02:69:B7:27:2E:64:04:3F:9F:19:00:05:70:82:94:57:79:62
X509v3 Authority Key Identifier:
keyid:89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/BTsCabcnLmQEP58ZAAVwgpRXeWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.48.0/21
185.47.104.0/22
Signature Algorithm: sha256WithRSAEncryption
47:a0:5f:6d:da:40:ab:53:c2:67:a8:75:ff:c0:73:6e:df:9c:
46:d7:f9:8a:d6:95:c1:7b:ea:48:ce:8c:9f:0b:5f:69:fe:1b:
0a:ac:e5:40:73:cd:4e:52:bc:4c:e8:e5:c6:21:32:49:40:2b:
b9:27:05:39:ac:e5:46:bb:c2:a7:60:89:93:a2:8b:14:ce:cf:
24:6c:ed:d6:9c:34:84:ef:93:cc:5f:93:6d:6b:57:11:84:24:
2c:87:c2:ec:d5:e5:b0:41:23:de:a6:4c:c8:2a:e6:71:cc:a0:
31:84:ee:be:87:cc:58:62:1e:d3:b5:68:bc:a5:eb:04:82:3f:
7e:93:7a:4a:3d:36:ed:84:88:5c:6a:33:0c:18:54:eb:0f:6b:
f8:2b:17:11:9b:64:49:5e:dd:17:b2:40:84:d0:7f:bc:c3:7b:
20:7d:df:6b:f4:c0:37:e7:1a:b2:b6:da:9b:8f:fb:d1:4c:76:
7f:04:3c:b5:de:84:0c:bf:be:80:dc:30:ab:4d:29:1c:55:06:
77:d7:ac:4b:10:02:aa:7f:ed:1b:4d:12:dd:db:c4:aa:e1:13:
c3:f5:5b:50:87:b0:fd:50:dd:b2:d6:28:03:4a:8f:11:c4:b6:
2a:0b:b4:44:a0:1f:cf:bd:18:a9:ff:6b:d9:49:11:7e:41:d6:
79:47:95:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:52:20 2024 by rpki-client on console-fra.rpki-client.org