Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/vB6_qiHzFxaV8GNDiNmEBkOUQw8.roa
File: vB6_qiHzFxaV8GNDiNmEBkOUQw8.roa (raw, json)
Hash identifier: 3qnpo2WCCMt+e+zOKMYjHm2vlqmtYNDxAIQqPE5sBrQ=
Subject key identifier: BC:1E:BF:AA:21:F3:17:16:95:F0:63:43:88:D9:84:06:43:94:43:0F
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 018CC6B7FC81D9C66448C2119424FE2FCCC6
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/vB6_qiHzFxaV8GNDiNmEBkOUQw8.roa
Signing time: Mon 01 Jan 2024 20:29:55 +0000
ROA not before: Mon 01 Jan 2024 20:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207645
IP address blocks: 193.219.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:fc:81:d9:c6:64:48:c2:11:94:24:fe:2f:cc:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Jan 1 20:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc1ebfaa21f3171695f0634388d984064394430f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e3:a5:d3:b2:c3:39:6a:41:54:d4:86:2a:b8:
36:41:32:21:21:d9:d6:d7:13:8c:2b:e8:af:66:29:
91:b0:4e:74:e4:48:e8:c9:d6:bf:ee:60:db:1e:10:
a7:1f:c8:5e:96:78:94:46:7a:2c:84:1d:9b:96:53:
3e:2d:aa:ab:78:e8:e1:fe:ff:46:a6:53:79:78:c3:
e1:d3:80:e4:87:df:08:3e:bc:4e:23:23:14:68:a7:
f2:b2:fb:37:8b:c2:b4:f0:ab:5d:45:11:c4:fb:65:
8f:90:2c:8f:e1:e9:4a:5b:74:69:95:b2:d3:c5:76:
3c:b0:ec:98:f6:d2:3f:ca:f2:4c:cb:e0:98:20:1c:
a3:3d:ee:55:1a:0e:cd:49:dd:fb:aa:41:1f:f9:82:
e5:15:4b:fd:b3:e7:1e:9c:74:4e:a8:ef:20:40:b4:
3b:e2:62:aa:b2:c0:a5:22:47:59:26:2c:5a:62:bc:
6d:3f:95:49:3a:cd:d9:33:57:a9:8c:a4:2f:96:11:
07:c5:40:43:03:30:72:38:79:5e:8e:29:e0:80:46:
41:66:df:8c:e7:8b:01:d5:9a:76:3c:2d:79:37:70:
77:f1:2e:42:d2:d2:09:de:af:52:71:b6:67:81:dc:
25:5f:37:43:3c:25:af:53:1a:1c:bf:2b:85:ba:02:
9c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1E:BF:AA:21:F3:17:16:95:F0:63:43:88:D9:84:06:43:94:43:0F
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/vB6_qiHzFxaV8GNDiNmEBkOUQw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.219.99.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:c3:fc:c9:bc:27:32:94:82:ad:d8:f0:d9:ee:af:14:18:3d:
38:ab:73:b3:93:d7:02:4e:0b:c8:93:9f:35:9d:ee:ad:e8:1d:
61:b2:9a:8a:af:a3:51:27:ad:08:b0:8d:dc:95:f8:ca:25:a7:
c3:f9:43:8a:e7:e5:e7:80:38:7a:1e:5b:da:89:68:67:bc:53:
20:27:1f:80:e2:31:3f:5e:2b:8c:99:59:88:81:fa:10:59:ea:
8f:86:c5:fd:18:b2:0d:06:c7:c9:44:d9:94:f3:c7:b8:9d:9b:
5a:07:a3:32:da:65:f7:f7:b3:fd:63:ca:ba:2c:59:05:a8:43:
77:3c:a4:04:06:7b:a1:23:45:83:30:cb:ad:c8:73:05:f0:e5:
4a:5e:3f:cf:b0:ac:f7:a8:69:12:14:ed:0f:ad:1d:fc:fe:cd:
08:fa:81:e1:35:ca:fd:5a:82:07:21:d7:a5:d2:04:a0:83:1b:
09:83:50:b2:74:fb:8d:7b:4d:33:4b:2d:7f:7e:ba:dc:37:32:
1f:3d:83:8b:60:c4:ba:98:3c:58:a4:78:32:82:a4:4f:e6:72:
69:87:b3:57:01:ff:45:bb:e8:cf:e1:98:c4:9b:b1:60:05:ed:
73:09:7e:c2:f0:0e:e1:b9:35:79:5b:a3:06:4c:b2:49:ba:59:
bd:8e:aa:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:29:30 2024 by rpki-client on console-fra.rpki-client.org