Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/vdu2MKlWRT9bP1Gb8RXgm27FWco.roa
File: vdu2MKlWRT9bP1Gb8RXgm27FWco.roa (raw, json)
Hash identifier: ScvleIw3/IhzWJwwhAPvA474jRvAprcLs0mLjbWO1G4=
Subject key identifier: BD:DB:B6:30:A9:56:45:3F:5B:3F:51:9B:F1:15:E0:9B:6E:C5:59:CA
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019206B57929EBD92BFBB252B8E318BB1A91
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/vdu2MKlWRT9bP1Gb8RXgm27FWco.roa
Signing time: Wed 18 Sep 2024 19:56:49 +0000
ROA not before: Wed 18 Sep 2024 19:56:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206728
IP address blocks: 193.124.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:06:b5:79:29:eb:d9:2b:fb:b2:52:b8:e3:18:bb:1a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 18 19:56:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bddbb630a956453f5b3f519bf115e09b6ec559ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:dc:96:2e:61:5b:db:e5:8d:a7:f1:3e:ce:8e:
4a:ce:c3:e0:c9:47:e0:cb:8f:00:71:44:f3:3b:2f:
42:b4:69:a0:3f:db:90:8b:67:cd:c3:0c:71:ef:79:
df:4a:91:53:ca:cf:31:9a:d4:e4:2e:b1:15:63:43:
4b:20:49:92:30:8e:75:01:4a:b5:2d:e2:0e:5a:07:
02:63:84:55:5e:2e:f3:81:8a:e2:1c:d8:4c:55:f0:
34:ad:4c:2b:73:6a:d3:64:e7:13:e7:ed:54:ec:6f:
31:90:f9:dd:0b:f9:e2:50:a8:ad:9e:df:a8:48:f9:
ee:87:cb:43:d5:a0:af:e1:f9:44:7f:62:d1:e6:82:
3d:57:b5:c9:34:f6:39:52:31:d8:0b:95:ba:38:25:
bc:c0:d9:3a:48:b1:50:1c:00:0d:49:dc:39:c0:9e:
ac:24:fa:53:7e:0e:8e:01:ca:41:77:55:e9:26:1a:
44:d1:cc:39:55:5d:49:79:1b:6d:95:fb:11:3c:f1:
1b:10:13:7f:9e:60:fd:76:b9:4d:74:74:26:24:4d:
28:45:e7:0b:4a:ae:8f:ef:93:53:16:83:13:21:75:
c8:fd:3d:c1:01:30:c7:1d:92:e5:e1:e6:5f:29:55:
d1:fa:f7:54:37:bb:8f:44:7f:70:a5:57:cb:d8:60:
ac:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:DB:B6:30:A9:56:45:3F:5B:3F:51:9B:F1:15:E0:9B:6E:C5:59:CA
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/vdu2MKlWRT9bP1Gb8RXgm27FWco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.254.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:18:7f:76:fa:11:bd:91:bd:5e:69:0b:a3:41:6b:4a:29:cc:
d3:e1:dd:a6:b4:ff:81:1a:ea:3a:ad:da:8b:65:47:1c:a6:19:
69:70:b5:e8:de:0d:72:83:8a:fe:eb:42:d4:2e:4a:d4:18:3b:
07:8e:73:a8:08:df:92:db:b1:d6:5d:e8:65:f5:86:89:f3:a1:
ff:57:38:42:b3:48:41:2a:b3:27:82:1f:e6:66:fa:78:e8:9b:
8d:81:38:f0:1e:7b:ad:94:f0:4f:a3:0a:72:cd:27:dc:52:b9:
e3:70:32:63:d3:d0:67:c3:6e:72:12:4f:32:72:70:66:f7:22:
61:03:c2:58:28:e6:be:b7:66:46:a3:50:3d:9c:da:ce:50:4e:
f5:12:6c:b6:cf:81:eb:01:29:aa:75:d2:10:31:82:fc:2e:32:
61:f3:80:10:1e:13:b0:59:69:ad:97:3a:a7:8e:71:fa:8c:a9:
b2:69:e3:dd:f5:8d:6d:15:09:a3:e5:62:65:34:f2:38:99:0d:
18:38:bc:e8:72:80:58:04:4e:c5:8c:2c:0b:10:41:9a:38:41:
eb:14:d3:46:d6:04:5e:ff:23:39:8f:d8:d3:55:ee:d8:99:c4:
21:07:bc:b2:22:1a:46:58:39:6f:c6:4e:61:26:89:d8:71:7f:
18:41:dc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:14:52 2024 by rpki-client on console-ams.rpki-client.org