Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/bjncL9hKwd0kphuwCqwycSKBlyg.roa
File: bjncL9hKwd0kphuwCqwycSKBlyg.roa (raw, json)
Hash identifier: cwf933sFullHyR2a7qrDEJKehtwHXhyQsp0M5XlepaU=
Subject key identifier: 6E:39:DC:2F:D8:4A:C1:DD:24:A6:1B:B0:0A:AC:32:71:22:81:97:28
Certificate issuer: /CN=49c403d43b5f38fca2119cd1409a92763edefe71
Certificate serial: 01905E6F6B3DC8A723CB05DA6F6EECB91D94
Authority key identifier: 49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/bjncL9hKwd0kphuwCqwycSKBlyg.roa
Signing time: Fri 28 Jun 2024 10:41:18 +0000
ROA not before: Fri 28 Jun 2024 10:41:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 272401
IP address blocks: 176.57.203.0/24 maxlen: 24
176.57.204.0/24 maxlen: 24
176.57.205.0/24 maxlen: 24
176.57.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jul 2024 14:20:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5e:6f:6b:3d:c8:a7:23:cb:05:da:6f:6e:ec:b9:1d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49c403d43b5f38fca2119cd1409a92763edefe71
Validity
Not Before: Jun 28 10:41:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e39dc2fd84ac1dd24a61bb00aac327122819728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:92:10:c5:18:fa:a1:82:75:0b:49:74:c7:1e:
b0:e5:b4:ea:9b:f7:e5:18:5d:32:6f:d9:6e:1a:2a:
f9:78:3d:2a:44:be:52:53:f1:c0:0d:ef:b9:6c:7d:
c8:f0:f5:4a:ed:ad:7f:cf:68:4e:af:d1:b4:9e:02:
9d:0a:3c:3e:6c:f6:6b:d0:22:22:19:e2:3c:4c:4c:
8c:74:b9:3b:1c:2d:d8:ed:83:f1:f7:65:6a:22:fd:
75:71:a9:5f:e2:d0:d5:2a:43:1d:62:00:ce:b2:87:
45:3d:e2:b3:42:b6:bb:f9:16:7e:56:76:e6:a2:9f:
5f:6b:36:3f:1d:36:3c:b8:a5:b0:86:5b:89:7c:cd:
13:cb:3c:30:bc:f7:f2:47:41:fa:d0:0f:c6:45:90:
67:7d:1b:41:0f:eb:ed:1c:c3:df:81:54:39:33:64:
2d:b5:0d:84:0f:77:fb:79:97:8c:cd:c5:c2:71:57:
0c:9f:c5:e0:11:1d:31:01:fd:19:1c:7a:70:55:67:
01:1c:c0:6c:cd:6e:80:5e:d0:bd:af:44:78:a8:57:
3b:a7:92:47:e7:40:fb:cb:0e:9b:43:0a:ee:b9:8c:
3b:b5:dc:9b:55:45:67:c0:9c:fa:b6:25:69:8a:af:
55:1e:bd:cd:58:0f:bc:70:6c:71:d6:56:89:5b:ae:
b2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:39:DC:2F:D8:4A:C1:DD:24:A6:1B:B0:0A:AC:32:71:22:81:97:28
X509v3 Authority Key Identifier:
keyid:49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/bjncL9hKwd0kphuwCqwycSKBlyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.57.203.0-176.57.206.255
Signature Algorithm: sha256WithRSAEncryption
3f:99:e1:19:51:2b:bb:0f:4e:9e:48:59:96:0c:09:87:35:5b:
71:66:7f:3d:4b:11:8f:31:3e:4a:d9:4c:48:1c:f6:a3:de:be:
2e:59:12:f2:59:38:5a:6d:1a:c8:85:79:2a:80:77:77:a6:b3:
79:65:39:af:ca:24:e7:26:64:43:6b:f5:a1:87:00:b6:60:47:
bf:35:86:87:8d:2b:93:54:52:12:6d:d4:45:b0:d5:04:6b:23:
f6:b6:a4:1b:dc:aa:a0:bb:02:a7:99:9d:69:ee:6b:4e:8f:0e:
33:3e:43:3e:04:67:46:f2:88:f8:fe:b4:b8:02:94:db:5a:b1:
c6:2a:24:ef:72:aa:be:72:e1:b3:c3:06:3e:a0:9d:0b:56:ca:
fd:22:e3:b4:13:b2:89:b5:93:32:05:05:db:76:f1:71:8c:3d:
67:77:e4:dc:9b:01:5a:f8:88:c2:52:b6:29:7a:38:68:ca:11:
4b:f4:48:39:03:bf:af:38:34:a8:02:8e:f8:8d:59:fd:cd:55:
77:05:b2:db:f3:3b:42:e8:8c:1a:c9:77:92:8c:97:8c:6e:77:
2c:2f:eb:f2:35:3a:5d:3e:17:33:b9:65:0b:1d:3e:a8:68:93:
41:a8:60:32:08:e8:4c:dc:6d:b3:e5:46:6d:eb:c1:e3:54:95:
92:a9:8d:96
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZBeb2s9yKcjywXab27suR2UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5YzQwM2Q0M2I1ZjM4ZmNhMjExOWNkMTQwOWE5Mjc2M2Vk
ZWZlNzEwHhcNMjQwNjI4MTA0MTE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTM5ZGMyZmQ4NGFjMWRkMjRhNjFiYjAwYWFjMzI3MTIyODE5NzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppIQxRj6oYJ1C0l0xx6w5bTqm/fl
GF0yb9luGir5eD0qRL5SU/HADe+5bH3I8PVK7a1/z2hOr9G0ngKdCjw+bPZr0CIi
GeI8TEyMdLk7HC3Y7YPx92VqIv11calf4tDVKkMdYgDOsodFPeKzQra7+RZ+Vnbm
op9fazY/HTY8uKWwhluJfM0TyzwwvPfyR0H60A/GRZBnfRtBD+vtHMPfgVQ5M2Qt
tQ2ED3f7eZeMzcXCcVcMn8XgER0xAf0ZHHpwVWcBHMBszW6AXtC9r0R4qFc7p5JH
50D7yw6bQwruuYw7tdybVUVnwJz6tiVpiq9VHr3NWA+8cGxx1laJW66yvQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFG453C/YSsHdJKYbsAqsMnEigZcoMB8GA1UdIwQY
MBaAFEnEA9Q7Xzj8ohGc0UCaknY+3v5xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9hMmY4N2ItNDgxMS00ZmUxLWIxNWQt
Zjg4OWNhMTYxYzAxLzEvYmpuY0w5aEt3ZDBrcGh1d0Nxd3ljU0tCbHlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9hMmY4N2ItNDgxMS00ZmUxLWIxNWQtZjg4OWNhMTYxYzAx
LzEvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACwOcsD
BACwOc4wDQYJKoZIhvcNAQELBQADggEBAD+Z4RlRK7sPTp5IWZYMCYc1W3Fmfz1L
EY8xPkrZTEgc9qPevi5ZEvJZOFptGsiFeSqAd3ems3llOa/KJOcmZENr9aGHALZg
R781hoeNK5NUUhJt1EWw1QRrI/a2pBvcqqC7AqeZnWnua06PDjM+Qz4EZ0byiPj+
tLgClNtascYqJO9yqr5y4bPDBj6gnQtWyv0i47QTsom1kzIFBdt28XGMPWd35Nyb
AVr4iMJStil6OGjKEUv0SDkDv684NKgCjviNWf3NVXcFstvzO0LojBrJd5KMl4xu
dywv6/I1Ol0+FzO5ZQsdPqhok0GoYDII6EzcbbPlRm3rweNUlZKpjZY=
-----END CERTIFICATE-----
Generated at Tue Jul 2 23:17:25 2024 by rpki-client on console-fra.rpki-client.org