Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/BZFHdZ-pBAfL8JgNtpTadqCFI6Y.roa
File: BZFHdZ-pBAfL8JgNtpTadqCFI6Y.roa (raw, json)
Hash identifier: uGcqn8qteIJKKcUHJv2QCxF08cfvPuCIlGgiA5OImkk=
Subject key identifier: 05:91:47:75:9F:A9:04:07:CB:F0:98:0D:B6:94:DA:76:A0:85:23:A6
Certificate issuer: /CN=bbffc9a9832667ac0d6d1e2406550533c3b55618
Certificate serial: 018CC9BCBFDCD51AD3EFBBF39B6F46B1E54D
Authority key identifier: BB:FF:C9:A9:83:26:67:AC:0D:6D:1E:24:06:55:05:33:C3:B5:56:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/BZFHdZ-pBAfL8JgNtpTadqCFI6Y.roa
Signing time: Tue 02 Jan 2024 10:33:59 +0000
ROA not before: Tue 02 Jan 2024 10:33:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212103
IP address blocks: 194.115.182.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft
rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:bf:dc:d5:1a:d3:ef:bb:f3:9b:6f:46:b1:e5:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbffc9a9832667ac0d6d1e2406550533c3b55618
Validity
Not Before: Jan 2 10:33:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=059147759fa90407cbf0980db694da76a08523a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:30:ea:c7:c2:f9:85:cf:23:b6:14:87:fa:32:
f4:98:0d:a6:b8:44:96:20:fa:9b:e4:25:b4:6a:e8:
83:d6:c6:45:d3:fd:62:ad:82:8f:69:58:c6:23:b2:
9c:dc:7d:90:a9:84:e4:d6:63:ea:e8:0f:8b:41:1c:
c3:fe:90:2b:ff:24:5a:58:7f:33:22:39:1a:4d:f4:
52:c2:a6:40:d3:62:96:28:c2:82:98:49:8d:4f:65:
34:77:42:b8:2c:ab:ba:12:00:b2:fc:fa:4b:74:2d:
ae:dd:12:3a:f8:ee:a7:56:67:97:4f:2c:bd:f3:82:
95:7a:cc:12:2f:d2:d3:03:90:2a:f0:3a:cb:45:e0:
32:08:5f:14:88:b6:de:78:a9:f7:8b:0d:8f:ac:ed:
d5:3f:43:b5:56:e0:88:45:58:25:de:ae:19:32:0f:
51:8e:e1:12:77:42:8a:62:70:d9:df:7d:82:df:47:
32:1e:fe:d7:3c:d0:81:a6:42:43:4e:4f:53:ea:3b:
79:53:fd:e6:b3:b3:fa:fe:34:1f:2a:3f:6c:c4:0d:
f7:90:a9:f7:28:e7:08:10:f3:24:9e:6d:51:1f:73:
e5:99:33:f5:1f:14:b6:b3:73:23:91:8a:2b:0b:b8:
a9:ef:02:c4:c5:17:7f:1f:99:77:63:73:de:21:8e:
b8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:91:47:75:9F:A9:04:07:CB:F0:98:0D:B6:94:DA:76:A0:85:23:A6
X509v3 Authority Key Identifier:
keyid:BB:FF:C9:A9:83:26:67:AC:0D:6D:1E:24:06:55:05:33:C3:B5:56:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/BZFHdZ-pBAfL8JgNtpTadqCFI6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.115.182.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:00:1c:5c:36:58:ad:2c:4d:da:7f:a4:b4:3e:fa:e7:a1:27:
61:bb:20:8c:40:7f:d7:d8:d4:a9:8e:06:59:58:b5:40:cf:17:
d4:ca:08:41:40:8c:80:60:ed:5d:51:65:4f:38:b8:46:23:24:
64:c7:d6:43:ff:83:6d:76:04:6c:a6:a8:a1:bd:70:e3:3a:0f:
0d:f4:60:66:06:1b:e2:91:45:3a:a5:ff:b5:c0:b3:df:a1:d6:
b9:3e:8e:be:6c:e6:0f:1a:5d:d7:2a:05:06:59:18:f8:13:cf:
99:59:be:67:2c:68:e5:2c:fc:1f:2d:ab:36:f4:ea:63:95:a5:
64:42:4f:05:50:46:5b:70:ef:b3:4f:2c:1a:00:e0:32:e4:63:
d7:72:52:c4:11:85:e8:27:7b:33:c3:b4:e3:2f:df:d7:16:d7:
df:ac:79:03:c8:50:82:4e:77:fb:28:12:1c:7d:9e:59:4a:09:
15:fa:0f:62:d2:a2:2b:62:fa:30:01:07:1d:75:45:d5:c9:6f:
6f:ba:95:5f:d7:6b:ab:21:d2:97:32:46:e3:b1:46:3b:36:21:
ea:56:08:83:23:40:b7:6e:b6:39:81:7d:70:8d:49:89:5d:ce:
3d:77:f6:5f:c4:96:ba:0b:d1:50:dc:1a:52:81:29:30:d2:62:
85:e1:3e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:55:42 2024 by rpki-client on console-fra.rpki-client.org