Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/1vvhi_zV2BeoSDv5lAAw8tDCW00.roa
File: 1vvhi_zV2BeoSDv5lAAw8tDCW00.roa (raw, json)
Hash identifier: ZEYZE9D1wcf5LHqOk9xTvrpEtIEEB+GZThy0bk0iO+4=
Subject key identifier: D6:FB:E1:8B:FC:D5:D8:17:A8:48:3B:F9:94:00:30:F2:D0:C2:5B:4D
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 019108C6B197E9109D7D750D8EC89F855685
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/1vvhi_zV2BeoSDv5lAAw8tDCW00.roa
Signing time: Wed 31 Jul 2024 12:32:04 +0000
ROA not before: Wed 31 Jul 2024 12:32:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216246
IP address blocks: 194.113.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:08:c6:b1:97:e9:10:9d:7d:75:0d:8e:c8:9f:85:56:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Jul 31 12:32:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6fbe18bfcd5d817a8483bf9940030f2d0c25b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:65:07:59:57:cc:9b:98:ba:02:f2:02:ee:e3:
76:41:22:95:02:27:31:d5:38:42:23:dd:72:5b:c0:
ad:10:6e:c5:4d:17:2e:58:01:ea:4b:84:d5:e9:e7:
51:d8:01:c7:30:25:9a:d1:3e:7c:d7:3d:91:91:c9:
9b:43:3e:f4:a0:07:7e:e8:fc:09:71:21:e4:eb:80:
7c:02:57:9a:3f:48:7f:6a:70:d7:39:42:3e:19:dd:
4f:3f:27:b0:c7:bb:f6:7b:a1:90:82:12:bb:f5:42:
37:12:0a:b5:be:91:44:fd:f7:4d:fe:22:d9:b6:e1:
ff:80:71:91:82:2e:6d:59:e1:db:9e:58:f3:87:01:
96:9c:fb:ee:cc:2a:fd:7c:e2:5e:34:dc:69:b7:81:
86:45:0a:99:92:d5:33:34:64:83:3b:06:a0:9a:5f:
06:37:39:b4:fe:ae:cf:47:58:75:75:67:f0:0a:e0:
53:a5:c4:eb:9e:cd:7b:c2:ea:d3:b8:cb:dd:78:ad:
2d:03:f7:9d:ef:69:c6:9c:3b:6e:fb:ca:bd:2d:c2:
3f:e8:7d:cb:7b:18:cc:d4:ca:f2:e0:5f:f3:d6:4a:
01:0b:19:42:aa:45:79:e7:87:6d:d1:cd:39:b7:b9:
0b:2a:87:38:b9:d3:1f:d0:6c:ae:1c:f3:b0:cd:de:
3e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:FB:E1:8B:FC:D5:D8:17:A8:48:3B:F9:94:00:30:F2:D0:C2:5B:4D
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/1vvhi_zV2BeoSDv5lAAw8tDCW00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.106.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:82:45:65:3e:f0:df:a7:53:5a:36:85:7d:27:f8:c5:bf:74:
6d:fc:b9:3c:4a:77:58:28:a6:20:8d:f2:4f:f8:4c:53:2b:bb:
62:d7:4d:ab:63:ba:b1:41:41:fa:ba:19:41:8d:d9:c0:c1:bc:
e2:3a:3d:f9:09:c2:6e:96:f1:cf:c3:69:55:97:80:44:35:b9:
63:6c:11:b7:fd:3d:ae:4a:ef:76:f9:73:a1:e6:a3:cb:b3:9b:
b8:22:3e:0f:ac:ca:ed:7c:84:3f:49:a0:a2:86:e1:bf:95:fe:
66:47:25:95:82:ce:a5:f6:6b:90:b7:8c:f2:e5:ea:59:43:98:
bb:dd:56:61:6e:6f:7c:bb:93:65:00:ef:58:f9:e7:4d:ff:5c:
95:17:97:cd:73:7f:d7:fd:d2:1b:f9:55:ee:dd:c7:7f:8f:1d:
18:06:59:f6:2c:b5:99:1d:d0:9e:b8:a9:35:9b:7d:46:5a:83:
8f:89:3b:6a:09:14:79:4c:20:5d:aa:60:98:23:66:87:28:e2:
72:fc:ec:4b:e8:31:79:76:76:5a:2b:e8:ad:e0:8d:a7:3b:02:
f2:df:48:8f:8e:c2:c9:ca:4f:c2:35:32:bb:88:d2:56:1c:b9:
bc:51:db:24:8a:ec:7b:5d:c0:7c:69:5f:af:ea:c8:37:0a:ab:
55:40:9d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:10:05 2024 by rpki-client on console-fra.rpki-client.org