Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/vKxtgXNEWl3HfAsosrkeKIGsi24.roa
File: vKxtgXNEWl3HfAsosrkeKIGsi24.roa (raw, json)
Hash identifier: N1XLSdK6QlfIW/kg6yzMjy7EcDXODsx5+qRMfeDlJDE=
Subject key identifier: BC:AC:6D:81:73:44:5A:5D:C7:7C:0B:28:B2:B9:1E:28:81:AC:8B:6E
Certificate issuer: /CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75
Certificate serial: 018CC500A3435931654FD7333D26B0B8E4E3
Authority key identifier: A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/vKxtgXNEWl3HfAsosrkeKIGsi24.roa
Signing time: Mon 01 Jan 2024 12:30:02 +0000
ROA not before: Mon 01 Jan 2024 12:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206583
IP address blocks: 185.80.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:a3:43:59:31:65:4f:d7:33:3d:26:b0:b8:e4:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75
Validity
Not Before: Jan 1 12:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bcac6d8173445a5dc77c0b28b2b91e2881ac8b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ad:fe:dc:28:d4:6a:21:c6:ff:e7:54:4a:84:
87:4b:86:cd:b9:6d:76:8e:a3:2b:c1:d1:15:db:46:
ba:e8:6f:2c:c4:db:9f:5c:cb:45:a9:30:3a:1b:a6:
fb:0c:24:c9:d1:de:87:5c:6e:fb:65:12:da:eb:26:
13:c6:44:5f:c3:b9:bd:14:af:a9:1e:a7:28:61:b6:
27:55:c2:5c:8d:1e:72:c5:42:9d:f2:5e:70:65:8e:
e9:8b:58:bc:77:65:48:c9:c9:8c:76:5a:ed:96:42:
dd:fb:11:2d:7c:d7:c1:65:37:8b:4c:82:52:fa:71:
af:b5:77:53:9c:22:d8:7c:ac:27:94:87:22:d8:8a:
4b:54:9f:2d:f2:99:ac:ea:8b:25:02:ab:90:25:1c:
33:71:7a:1c:19:60:3c:15:d2:07:61:9f:84:56:37:
45:eb:d9:cb:1b:ef:c3:aa:d0:b0:78:ee:2a:2a:f7:
6b:6e:5e:92:93:b0:7c:bb:8d:88:2f:a2:49:a9:87:
92:09:8d:69:68:fb:56:8b:46:03:23:21:20:f9:0f:
13:4d:0b:85:ca:0e:06:4a:d3:5e:76:fc:f4:80:b5:
64:43:1d:43:40:32:3e:40:33:a1:0f:c3:7e:a9:8b:
30:36:55:1a:a5:bd:73:15:6b:44:a0:de:8d:df:64:
73:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:AC:6D:81:73:44:5A:5D:C7:7C:0B:28:B2:B9:1E:28:81:AC:8B:6E
X509v3 Authority Key Identifier:
keyid:A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/vKxtgXNEWl3HfAsosrkeKIGsi24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.147.0/24
Signature Algorithm: sha256WithRSAEncryption
02:ba:b5:77:a9:c1:49:f7:b2:da:35:10:dc:a9:02:69:84:ba:
dc:8c:d3:40:78:da:b5:d4:01:98:6e:37:3c:07:59:52:97:01:
5f:09:59:e6:04:4f:13:83:22:3e:fd:51:a8:3f:a0:0b:b8:7f:
0b:26:c0:7f:17:f3:cc:85:0a:11:62:b3:ee:90:51:03:ba:8e:
d6:8b:55:1f:79:fb:21:d2:18:a5:a1:ad:1e:90:45:4b:9a:ee:
d8:57:6f:01:80:6d:59:ba:3d:f9:ab:4c:3b:6e:c1:76:db:a3:
8a:64:92:9a:8c:8f:ea:ac:6d:3e:b1:9f:c7:3f:d0:fb:bb:c7:
92:dc:10:d1:e4:51:6f:76:f2:93:96:9e:60:74:fa:49:1c:b2:
bd:d6:f0:2c:95:08:b1:43:bc:e1:57:f6:1d:ec:3b:1c:70:75:
aa:c8:6c:93:f1:de:e2:f2:0c:43:66:dc:90:3e:7b:0f:96:0b:
0f:08:0b:f3:e1:35:3e:36:13:c2:b3:00:33:17:62:1e:26:f2:
00:05:d1:f7:fa:02:33:47:b2:ab:10:00:9a:ee:d6:45:39:a6:
a7:ca:c6:59:ee:7a:4d:95:15:05:39:99:d7:bd:dc:29:cb:28:
4b:c6:c6:cc:eb:01:f7:8d:0d:e1:8f:41:4b:a4:92:a5:f8:c0:
ee:8f:c6:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 08:32:48 2024 by rpki-client on console-ams.rpki-client.org