Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Bq2uwPIdej7-L4njZquayWa0cFo.roa
File: Bq2uwPIdej7-L4njZquayWa0cFo.roa (raw, json)
Hash identifier: NZFPjz5vRrwejKwKKE0osJXRqWDSH6EpwE393RyGPrM=
Subject key identifier: 06:AD:AE:C0:F2:1D:7A:3E:FE:2F:89:E3:66:AB:9A:C9:66:B4:70:5A
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018EE6BB6F33ED33E5D5125633806165C6EA
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Bq2uwPIdej7-L4njZquayWa0cFo.roa
Signing time: Tue 16 Apr 2024 11:47:07 +0000
ROA not before: Tue 16 Apr 2024 11:47:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12846
IP address blocks: 90.188.0.0/20 maxlen: 23
90.188.16.0/20 maxlen: 20
194.150.128.0/19 maxlen: 19
194.150.146.0/24 maxlen: 24
212.94.96.0/19 maxlen: 19
212.94.101.0/24 maxlen: 24
212.94.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 22:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e6:bb:6f:33:ed:33:e5:d5:12:56:33:80:61:65:c6:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Apr 16 11:47:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=06adaec0f21d7a3efe2f89e366ab9ac966b4705a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fe:55:2f:24:24:83:ec:1d:76:55:25:d7:97:
40:09:cf:67:39:0d:ca:45:b3:bd:93:b3:a3:a2:8d:
75:92:eb:18:06:05:e4:ea:47:9c:a3:fc:75:32:a8:
d6:f9:ed:3d:69:89:a6:0a:88:71:d2:69:db:d7:72:
ea:d0:2b:ae:b6:a8:0b:5d:a3:08:68:4b:57:72:24:
41:ac:10:65:f6:c3:5d:5e:46:fe:e7:b3:f6:93:8b:
b7:5f:26:8c:76:5f:6b:86:78:59:3b:8d:bb:f9:86:
1b:ea:3b:b9:0f:ad:40:c7:ee:34:39:32:1a:7b:55:
6d:c2:e0:08:44:c4:e1:e0:96:e8:f4:6a:a5:cc:1e:
bb:75:27:94:9b:b9:8c:97:16:5a:49:85:07:ad:f9:
1b:61:ea:d7:10:c4:51:cf:a4:40:c0:77:bd:fe:50:
e1:9d:3b:7f:23:86:bc:15:4b:63:71:e7:ef:a2:d4:
eb:64:d8:5d:bd:27:81:ee:82:c8:a1:b4:67:16:1f:
ee:d2:04:ac:02:a6:cf:e8:13:f6:82:ee:74:f6:59:
0c:e3:d6:86:91:58:66:44:86:b5:49:7b:a8:05:c5:
fd:19:1a:9f:ab:7e:0c:b7:54:70:bd:76:a7:cd:a7:
47:a9:2e:4e:ab:a6:7f:70:6d:16:e3:03:2c:40:bb:
cb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:AD:AE:C0:F2:1D:7A:3E:FE:2F:89:E3:66:AB:9A:C9:66:B4:70:5A
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Bq2uwPIdej7-L4njZquayWa0cFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.188.0.0/19
194.150.128.0/19
212.94.96.0/19
Signature Algorithm: sha256WithRSAEncryption
4b:43:2c:bf:6c:ef:6a:1e:79:0f:14:64:b9:48:2a:de:3b:96:
f3:79:09:78:4f:f2:62:14:32:a9:6d:40:d7:24:58:9a:64:30:
a6:56:bc:fc:26:9d:43:9b:f7:7d:0c:69:c4:50:b0:39:1b:31:
ce:dc:00:41:3e:5a:d5:e8:a7:21:ba:6b:d2:62:d7:da:82:59:
7a:f5:92:59:8a:89:b8:37:4c:51:c2:8c:a4:10:a4:ac:49:96:
02:e2:9b:89:b2:ab:85:5e:19:b1:ab:69:6e:27:f4:88:05:69:
4e:b0:dd:51:7c:cc:e9:93:3a:0f:4c:b5:4f:0f:a0:e0:24:be:
fd:e2:af:3b:93:0f:4e:6f:7e:ba:ce:bf:58:08:49:d7:dc:61:
20:8a:06:4b:6a:c5:99:6e:c7:70:82:09:d2:14:17:57:22:57:
5b:44:b2:16:94:ab:54:8e:d6:d4:e2:10:89:b2:ee:89:ee:62:
14:a3:1c:85:50:bb:51:8b:5d:57:43:90:40:6c:d0:56:1f:a1:
47:75:5d:12:b2:94:be:9d:9f:5f:22:62:2d:d5:df:db:46:09:
21:bc:86:7f:69:b0:53:7c:95:ee:1d:67:e2:48:9e:09:8c:3f:
e2:4d:18:73:b8:9c:0f:4f:0f:e9:dd:bf:f9:b1:d6:8c:c0:15:
13:a7:fb:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:08:51 2024 by rpki-client on console-fra.rpki-client.org