Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/Vzu9LGhrwScWPRXVowbWLFMZNQg.roa
File: Vzu9LGhrwScWPRXVowbWLFMZNQg.roa (raw, json)
Hash identifier: W4EXSzL9KXSVpRMdwESQIOOlVWWbP9qBkbILyjRV/KY=
Subject key identifier: 57:3B:BD:2C:68:6B:C1:27:16:3D:15:D5:A3:06:D6:2C:53:19:35:08
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 018CC86F542ECF693F74222D5E50055E8ACD
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/Vzu9LGhrwScWPRXVowbWLFMZNQg.roa
Signing time: Tue 02 Jan 2024 04:29:48 +0000
ROA not before: Tue 02 Jan 2024 04:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201671
IP address blocks: 193.37.71.0/24 maxlen: 24
80.66.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:54:2e:cf:69:3f:74:22:2d:5e:50:05:5e:8a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Jan 2 04:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=573bbd2c686bc127163d15d5a306d62c53193508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cb:5e:8f:5e:79:eb:da:b1:34:47:84:ca:22:
e9:86:d7:d2:71:c1:86:7e:f1:42:28:f6:09:d2:c3:
72:e3:6e:d0:5a:06:e5:53:c1:27:e4:55:d1:af:8a:
1c:69:c9:69:76:de:6d:e5:bd:f1:0c:84:b8:de:0d:
c6:86:b0:13:55:42:fe:ce:2a:39:dc:47:a2:b5:ee:
e7:14:39:61:7c:2b:75:b4:41:0c:bb:e0:d4:e0:7b:
8f:f7:6b:50:19:4a:42:63:2a:d2:58:9d:6c:1d:4c:
05:8e:1e:ed:18:e8:33:14:39:06:b3:cd:1a:a3:58:
0a:2f:7e:7e:be:01:25:72:65:79:16:e0:c6:03:f1:
b3:9f:7a:b3:43:9e:b2:17:ab:ba:b6:75:8e:d5:44:
6a:57:24:55:d2:50:43:3a:b6:2a:63:47:f0:b2:fa:
47:00:8c:b1:2f:97:b8:9f:ea:fe:3d:c0:08:b5:de:
98:d9:f8:7e:9e:6c:17:17:75:62:0e:8d:4e:c9:04:
f7:ce:6d:2a:1e:31:11:3a:c8:2e:ab:15:0c:c0:fb:
c2:29:78:0c:a3:01:89:2c:16:1b:49:19:84:df:e6:
67:46:b6:6e:d1:3f:ed:3b:a2:08:95:d7:5f:ca:ee:
ef:8d:05:09:4e:e0:d8:5c:cd:ad:01:22:60:a0:8e:
1c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3B:BD:2C:68:6B:C1:27:16:3D:15:D5:A3:06:D6:2C:53:19:35:08
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/Vzu9LGhrwScWPRXVowbWLFMZNQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.87.0/24
193.37.71.0/24
Signature Algorithm: sha256WithRSAEncryption
53:24:63:17:73:6a:3a:3e:ef:38:47:36:bb:65:dd:01:85:52:
08:51:c1:65:26:b5:0f:8f:a4:a5:6f:47:e4:cf:af:fa:56:94:
00:e6:08:a1:27:8f:bb:d7:18:36:10:ee:4d:a0:39:c2:e7:ea:
d8:2c:75:b8:0f:39:95:c0:15:7a:90:d4:98:03:df:2d:a8:14:
8d:70:81:a2:0c:8f:d3:06:c6:ca:9e:3d:94:e2:b7:dd:07:89:
77:8c:7a:98:d5:db:d2:35:ea:51:3e:9d:f9:0d:0e:ac:99:d4:
bb:89:dc:89:39:3d:2b:28:2e:89:28:07:87:ff:48:93:5a:00:
c8:fe:a6:72:b9:23:63:02:b5:b9:c8:10:61:e7:9e:8a:52:9e:
13:25:6c:a2:9e:f6:f7:9c:0b:62:8d:90:c6:2c:dd:d4:08:2f:
2f:c4:ca:8a:a0:ee:bf:7d:1a:0b:e2:b4:12:49:4e:63:94:54:
8a:71:15:a1:a4:1f:cd:69:9c:0d:f0:ac:42:1e:62:a7:c6:c1:
df:62:90:33:6c:bc:5b:c8:22:7e:71:38:97:d1:6f:cf:08:d1:
f2:ad:21:c6:34:54:4e:7c:00:75:a2:5f:7a:60:c8:6f:24:71:
d3:c4:5a:74:6c:0c:cc:59:ad:a8:5e:f2:cf:7e:8e:0b:6a:0e:
ce:0a:e8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 18:01:32 2024 by rpki-client on console-fra.rpki-client.org