Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/BnOzbxI0KeKTb1IMjY9bSb2WufQ.roa
File: BnOzbxI0KeKTb1IMjY9bSb2WufQ.roa (raw, json)
Hash identifier: aODEZUbCcEW3TaMr7yQO3/ti0AwIEbRsFYIlTcotQCM=
Subject key identifier: 06:73:B3:6F:12:34:29:E2:93:6F:52:0C:8D:8F:5B:49:BD:96:B9:F4
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018EE6932703D76453F55DEC685D28E5D5F6
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/BnOzbxI0KeKTb1IMjY9bSb2WufQ.roa
Signing time: Tue 16 Apr 2024 11:03:07 +0000
ROA not before: Tue 16 Apr 2024 11:03:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43132
IP address blocks: 62.183.80.0/21 maxlen: 21
85.172.174.0/23 maxlen: 23
85.173.96.0/19 maxlen: 19
178.34.208.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e6:93:27:03:d7:64:53:f5:5d:ec:68:5d:28:e5:d5:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Apr 16 11:03:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0673b36f123429e2936f520c8d8f5b49bd96b9f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a0:5c:eb:89:ba:57:72:f8:85:10:56:51:7d:
90:91:61:e4:dd:b9:95:8b:87:e8:c3:8d:53:13:b8:
62:4b:a1:c6:84:e6:43:3d:45:94:57:66:ed:43:55:
7d:ea:ba:df:f0:f9:05:6f:0a:02:f3:75:5d:2e:1c:
d8:59:69:ff:50:c9:cc:b0:f5:19:81:c9:2d:99:44:
4c:33:66:f3:a0:f3:2d:49:d4:9a:eb:4f:bd:1a:54:
1d:18:c8:f5:c6:10:fb:0a:1f:dc:38:9c:30:1c:0f:
ea:74:f2:d3:47:cd:2a:ec:f1:3a:8f:c2:d7:cd:95:
6f:5d:e3:49:1a:97:45:dc:78:7c:83:ad:fa:9b:1d:
fb:9d:84:e3:b7:13:29:c3:e4:49:6b:93:2d:d7:49:
3f:59:05:b3:33:35:e8:c6:0d:06:d6:41:f1:93:c6:
53:8c:ed:30:74:24:4b:49:a9:ad:46:86:4e:ba:26:
1c:ff:f0:f0:b4:07:d0:20:59:7b:36:fb:94:4d:fb:
b0:83:f6:ff:df:a1:ef:3b:c5:41:46:a0:a0:c1:fd:
a4:0d:1e:4c:29:4c:94:61:df:a9:7f:84:bc:30:14:
d6:07:c3:4b:71:b2:02:b7:f1:18:cf:b3:38:3d:26:
d7:5b:99:da:b5:d7:48:2a:63:f5:5b:9f:44:69:37:
02:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:73:B3:6F:12:34:29:E2:93:6F:52:0C:8D:8F:5B:49:BD:96:B9:F4
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/BnOzbxI0KeKTb1IMjY9bSb2WufQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.183.80.0/21
85.172.174.0/23
85.173.96.0/19
178.34.208.0/20
Signature Algorithm: sha256WithRSAEncryption
8a:3c:ba:e5:51:26:53:d7:4c:a7:bc:69:e5:80:a4:33:9e:5d:
0f:58:a1:28:eb:68:e2:4f:49:72:d9:f6:c9:42:b2:90:e8:5b:
66:b4:24:9a:3a:2f:c4:ba:82:10:b7:27:b2:3d:50:cc:a3:4e:
7e:8d:ac:bd:6e:91:59:90:5a:33:ca:1c:cc:86:e4:2c:59:53:
b0:33:98:58:19:0d:6b:0c:e9:e7:ec:ad:2f:90:e4:f2:51:8b:
42:a7:9a:16:a2:ba:16:b2:9b:07:f8:a1:31:5e:87:28:a4:dc:
48:3a:d9:a3:89:e9:99:32:77:39:76:c6:34:ec:33:8d:d5:c3:
7b:ac:1c:52:91:d4:8b:ed:d4:67:d5:4e:b4:e8:82:7d:22:67:
95:60:d4:3c:d4:9e:3e:22:84:85:5b:53:bc:31:bf:ae:4c:3a:
67:b5:e1:62:be:40:81:9e:cc:c7:36:cb:61:13:a0:a8:e8:e0:
49:82:6f:a0:ab:9a:ac:2f:ca:eb:d8:75:87:45:fa:63:85:1f:
6e:46:2f:2d:b7:c3:9f:70:4f:33:e2:9b:ca:52:66:61:57:5d:
63:7f:f0:8f:2d:bd:b1:4a:c6:64:ee:15:fd:85:b6:fa:7f:f1:
24:70:77:ae:da:36:b3:8a:a0:b6:8d:aa:d3:e5:eb:71:a9:4d:
5d:a3:f8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 14:08:53 2024 by rpki-client on console-ams.rpki-client.org