Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/bBOhd8vh1uK5NKggaQAsPcXpZyE.roa
File: bBOhd8vh1uK5NKggaQAsPcXpZyE.roa (raw, json)
Hash identifier: VlYbaH925Bo5+pGtNOOJiLZ0cnZf53QMBqaXS4RYhk0=
Subject key identifier: 6C:13:A1:77:CB:E1:D6:E2:B9:34:A8:20:69:00:2C:3D:C5:E9:67:21
Certificate issuer: /CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
Certificate serial: 018CC64A56FC10C960E04EC8F710EC438A11
Authority key identifier: B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/bBOhd8vh1uK5NKggaQAsPcXpZyE.roa
Signing time: Mon 01 Jan 2024 18:30:09 +0000
ROA not before: Mon 01 Jan 2024 18:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206160
IP address blocks: 185.141.253.0/24 maxlen: 24
2a07:2781:a4a3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:56:fc:10:c9:60:e0:4e:c8:f7:10:ec:43:8a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
Validity
Not Before: Jan 1 18:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c13a177cbe1d6e2b934a82069002c3dc5e96721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:02:f0:21:6c:e9:6d:ba:18:37:56:95:90:31:
9c:3b:8a:54:97:30:66:20:7c:21:eb:e8:ad:1c:74:
63:0d:a6:b9:96:41:ea:eb:31:d9:fd:d0:a8:97:60:
7b:06:7a:10:b7:8b:78:d7:5e:0d:be:aa:c4:2b:20:
13:27:56:9e:b1:44:59:b0:89:3b:8b:92:b9:2c:c5:
58:f6:84:87:78:2f:26:06:70:d3:0c:2c:b0:40:37:
4c:43:35:4d:bd:0f:07:a0:1c:0e:5b:98:8c:b0:07:
45:1f:8e:55:ce:e3:6e:45:a8:a9:39:2e:92:1e:32:
e6:a6:42:fd:7f:f4:e5:4d:69:b7:ed:f5:7a:bf:35:
02:ec:c1:73:9c:01:ec:a9:fd:73:5f:43:ba:e3:59:
c0:26:c5:15:0a:55:5b:96:53:c3:50:63:2c:80:f9:
b7:bc:97:f1:64:57:38:28:b4:44:5c:ce:1b:cc:5e:
e3:90:c8:e2:19:8d:4a:c4:88:dd:a2:0e:6a:16:2f:
8a:d7:d7:62:17:5c:aa:22:f4:05:b3:47:0e:69:7e:
46:2c:f6:48:8b:a4:55:ff:ba:8c:40:b2:2e:ee:a3:
15:92:f0:d1:d9:96:47:4d:96:65:5a:0c:27:f4:33:
73:b6:f9:23:4e:8c:0e:ef:7a:5c:ee:8c:26:f9:79:
6f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:13:A1:77:CB:E1:D6:E2:B9:34:A8:20:69:00:2C:3D:C5:E9:67:21
X509v3 Authority Key Identifier:
keyid:B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/bBOhd8vh1uK5NKggaQAsPcXpZyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.253.0/24
IPv6:
2a07:2781:a4a3::/48
Signature Algorithm: sha256WithRSAEncryption
ba:5b:48:f3:7e:20:4e:8e:85:7e:5d:1c:19:af:8d:bc:2b:00:
3f:a5:a8:09:72:32:76:85:e1:0b:5d:a7:ca:49:27:5f:7b:0f:
34:c3:88:35:51:38:a3:2d:97:30:0a:77:39:2f:b3:4f:d0:a0:
d2:b0:65:7c:e2:54:51:67:5a:86:69:08:43:d4:dc:91:b6:c7:
b7:ca:de:b4:d6:49:6b:3e:c7:32:9e:53:f6:b2:a2:c1:98:a5:
ea:09:1b:f8:08:b7:88:55:56:8a:1d:76:d7:a0:1a:08:8f:27:
bc:cc:f3:44:2f:49:f3:f8:78:f8:2e:97:f9:11:b8:d6:5f:56:
4f:dd:a7:85:03:36:b3:18:95:21:9b:20:ca:01:5a:7e:fc:86:
7e:b5:04:9f:6e:6a:c6:4a:60:33:9e:4c:7b:58:1c:e0:d7:bb:
fe:f1:04:65:b3:cf:b0:a4:55:24:1f:8e:8b:e2:ea:b0:8e:c7:
d4:5d:a0:77:be:1c:57:9f:a5:ad:f0:64:81:7b:4f:34:24:b2:
39:50:12:52:d2:fc:52:35:f4:fc:88:32:5f:29:6f:a0:52:54:
84:62:42:9f:9a:50:ed:e0:85:9f:a0:14:a8:5b:00:0f:0e:d6:
ef:4c:a0:1f:40:52:3d:02:1d:2a:4b:f6:1d:5a:66:c3:64:eb:
ba:29:3f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:58:11 2024 by rpki-client on console-ams.rpki-client.org