Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e03bd4-fae6-4d9d-9ab3-0231ab9ee7c2/1/vxTPh7d6i8fof9bq9sfsH1ZTl78.roa
File: vxTPh7d6i8fof9bq9sfsH1ZTl78.roa (raw, json)
Hash identifier: 2/W9ppJjpSpLXWpCdFQIr3VP6SANHerfmZ4cR9ALbLI=
Subject key identifier: BF:14:CF:87:B7:7A:8B:C7:E8:7F:D6:EA:F6:C7:EC:1F:56:53:97:BF
Certificate issuer: /CN=eaab976ee39968b70271276f6d22e5b91c8e16e3
Certificate serial: 018E3E1BFBB8816A1830601C7C122275FA9E
Authority key identifier: EA:AB:97:6E:E3:99:68:B7:02:71:27:6F:6D:22:E5:B9:1C:8E:16:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6quXbuOZaLcCcSdvbSLluRyOFuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e03bd4-fae6-4d9d-9ab3-0231ab9ee7c2/1/vxTPh7d6i8fof9bq9sfsH1ZTl78.roa
Signing time: Thu 14 Mar 2024 17:56:44 +0000
ROA not before: Thu 14 Mar 2024 17:56:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43614
IP address blocks: 46.255.224.0/21 maxlen: 21
185.3.8.0/22 maxlen: 22
2a00:da80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e03bd4-fae6-4d9d-9ab3-0231ab9ee7c2/1/6quXbuOZaLcCcSdvbSLluRyOFuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/e03bd4-fae6-4d9d-9ab3-0231ab9ee7c2/1/6quXbuOZaLcCcSdvbSLluRyOFuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6quXbuOZaLcCcSdvbSLluRyOFuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3e:1b:fb:b8:81:6a:18:30:60:1c:7c:12:22:75:fa:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaab976ee39968b70271276f6d22e5b91c8e16e3
Validity
Not Before: Mar 14 17:56:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf14cf87b77a8bc7e87fd6eaf6c7ec1f565397bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:89:6d:7f:07:58:d8:7d:40:11:16:47:1b:90:
a9:21:62:a7:65:7f:34:65:d2:b0:ed:38:51:9f:9a:
fd:0b:ca:8b:c3:2d:1f:bd:ac:17:46:59:68:fa:22:
93:ec:7f:b9:b5:4a:84:ad:5f:93:a3:2e:ae:04:b8:
d3:60:51:72:bf:3d:84:1d:1a:b0:ee:ad:3d:0a:98:
eb:f3:48:ec:f2:9f:86:75:c0:5d:63:03:1c:da:8e:
77:6a:19:e3:99:e9:2f:af:ed:71:1a:53:ec:f0:6f:
ae:c7:2d:8b:13:8c:e7:a6:68:0d:b7:2a:4c:10:57:
c5:b5:6c:91:20:d6:ec:6d:20:ab:84:c2:3d:fa:76:
f5:91:75:09:30:b7:63:7f:c7:7d:5f:f8:0a:26:78:
0a:18:84:be:9b:64:77:2c:6b:9a:d2:15:2b:80:c2:
8b:6d:ab:8a:45:b5:7c:56:23:e5:0e:e8:1f:e2:f8:
a8:e6:42:80:fb:80:d3:d6:6e:0b:58:33:83:51:ea:
bc:a7:f2:e5:c8:6d:1e:f7:9d:8d:65:ba:c7:7d:91:
3e:fb:a9:a6:8c:84:80:4e:51:66:e3:73:23:fb:d9:
43:1c:18:c2:59:6b:90:41:c8:87:d3:79:1c:ae:43:
dd:f3:c0:71:e4:0b:b9:30:0b:41:ac:e2:83:80:05:
12:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:14:CF:87:B7:7A:8B:C7:E8:7F:D6:EA:F6:C7:EC:1F:56:53:97:BF
X509v3 Authority Key Identifier:
keyid:EA:AB:97:6E:E3:99:68:B7:02:71:27:6F:6D:22:E5:B9:1C:8E:16:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6quXbuOZaLcCcSdvbSLluRyOFuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e03bd4-fae6-4d9d-9ab3-0231ab9ee7c2/1/vxTPh7d6i8fof9bq9sfsH1ZTl78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e03bd4-fae6-4d9d-9ab3-0231ab9ee7c2/1/6quXbuOZaLcCcSdvbSLluRyOFuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.224.0/21
185.3.8.0/22
IPv6:
2a00:da80::/32
Signature Algorithm: sha256WithRSAEncryption
1d:54:5c:8f:e6:9e:42:70:20:07:92:d6:63:74:69:09:5e:f8:
0b:f8:31:cd:85:8d:75:55:28:be:cf:f0:83:04:7e:ee:28:ec:
6c:81:d8:bf:da:4a:5f:d5:83:ee:a9:3c:36:74:5d:37:f5:49:
9f:7a:28:5d:34:d9:fe:67:fb:f0:89:6d:59:9f:c4:e6:d5:b5:
f5:52:7b:39:91:28:80:6b:6c:1f:99:9c:d5:80:3d:fe:0e:74:
cc:d6:67:3f:9e:48:e9:6e:2f:79:e9:09:22:85:81:9f:20:44:
a8:dd:92:a3:52:22:57:49:bd:91:ab:97:ba:1a:89:8d:b4:07:
c3:0a:41:7a:5f:89:9a:a7:ff:c8:41:46:0a:c0:a9:c0:53:23:
2c:90:ea:9b:20:00:84:54:02:5c:fe:21:c6:42:d4:b8:63:1c:
4d:e1:6d:29:89:0d:c4:99:5e:5e:75:2a:d0:f3:53:e2:96:9d:
83:76:de:cb:e6:40:24:55:f9:94:43:3e:f8:72:f2:10:fc:bc:
be:3b:69:8e:eb:39:08:97:e5:d3:da:de:e1:28:54:3b:e0:d7:
42:2f:3f:dc:68:c5:8c:02:83:06:82:a8:07:b6:47:5d:74:a0:
13:6f:93:4d:25:2d:2a:b2:8e:09:9b:a7:d8:3f:66:de:c7:db:
67:3e:22:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:03:22 2024 by rpki-client on console-fra.rpki-client.org