Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/veveTPZ0lvE313IInLmkTOC1Acs.roa
File: veveTPZ0lvE313IInLmkTOC1Acs.roa (raw, json)
Hash identifier: SwWjCwp4JxCUqDhL1o0Fe/zVdnqbrAjYtGqroiZUDMA=
Subject key identifier: BD:EB:DE:4C:F6:74:96:F1:37:D7:72:08:9C:B9:A4:4C:E0:B5:01:CB
Certificate issuer: /CN=63d92b8256159894d2b9b25f4d85986c172723c3
Certificate serial: 018CC50155CEA82236848DF82FCB3D79832A
Authority key identifier: 63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/veveTPZ0lvE313IInLmkTOC1Acs.roa
Signing time: Mon 01 Jan 2024 12:30:48 +0000
ROA not before: Mon 01 Jan 2024 12:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 81.20.40.0/24 maxlen: 24
81.20.41.0/24 maxlen: 24
2a00:1fd0:ae00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:55:ce:a8:22:36:84:8d:f8:2f:cb:3d:79:83:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63d92b8256159894d2b9b25f4d85986c172723c3
Validity
Not Before: Jan 1 12:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bdebde4cf67496f137d772089cb9a44ce0b501cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c8:7b:40:0c:e4:4f:ee:1c:10:de:a3:e5:91:
2a:9d:b6:1d:7e:2c:d3:22:ff:c0:30:93:e1:b7:8a:
89:b9:03:53:c1:c9:66:a5:b6:27:3c:75:e8:b5:72:
1e:45:b0:99:c1:e0:66:8f:c5:43:70:11:27:cb:59:
a0:cc:63:bd:fe:b4:5f:d8:a0:a1:b7:d8:1a:f3:c9:
d8:53:d0:e2:e5:a7:9c:6f:cb:3b:3a:9b:de:a0:b7:
19:1d:1b:ae:c8:b0:69:43:98:cd:52:16:cb:dd:4a:
69:10:7e:9f:35:92:8d:a8:00:22:a1:99:3a:02:3f:
1c:2a:e9:a3:1e:ef:f7:63:fb:18:07:c1:1f:bf:f6:
cb:4d:a5:8e:46:29:97:7c:09:16:e6:62:d7:a0:e9:
b1:12:c8:b8:13:42:ff:11:db:e7:b8:a1:6c:2f:98:
15:9e:6a:e6:68:c7:92:d4:ca:69:e9:b3:43:bf:49:
a8:8d:02:1a:90:52:23:0a:d0:ac:41:3f:af:54:75:
a6:95:27:33:60:10:46:8c:ca:00:0d:4a:1c:fb:95:
f3:e8:e9:2d:4d:a4:12:bb:b1:00:c5:65:a2:86:f5:
40:3c:0e:c7:69:00:0f:ab:2b:76:2a:6b:49:c2:02:
aa:d8:b4:81:a5:b3:35:04:1b:91:91:77:ea:06:f1:
48:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:EB:DE:4C:F6:74:96:F1:37:D7:72:08:9C:B9:A4:4C:E0:B5:01:CB
X509v3 Authority Key Identifier:
keyid:63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/veveTPZ0lvE313IInLmkTOC1Acs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.20.40.0/23
IPv6:
2a00:1fd0:ae00::/40
Signature Algorithm: sha256WithRSAEncryption
39:25:27:59:61:7e:35:88:49:41:47:31:bd:ae:d1:92:47:45:
ff:96:d8:5e:64:0d:ec:fe:91:3f:9a:ec:f9:25:d5:c3:7e:73:
1a:e0:c8:8d:c6:42:cf:6f:87:33:53:b6:5a:1a:3e:4e:e0:1d:
24:bd:c2:6c:d5:c2:27:75:71:f9:93:8f:bf:f3:14:57:5e:69:
93:8f:41:85:57:94:09:a6:97:7b:6d:a3:7f:fc:2c:6c:d2:31:
bc:03:06:f1:f6:65:66:80:9d:fb:eb:a4:49:5f:c3:91:85:ec:
57:b9:5b:1a:c2:99:2f:58:58:d8:43:f7:1c:3d:04:61:30:57:
42:cc:ef:d3:ff:88:8c:8d:aa:0c:db:58:3e:63:5a:03:56:a3:
ac:02:87:55:ae:e7:5e:b8:b2:3f:1f:1e:5e:d3:db:46:8e:e7:
1c:c8:bd:8a:ad:9d:f9:fe:08:c6:83:e2:20:79:ab:e7:e7:58:
98:d5:86:61:f9:b2:45:2f:5e:73:db:aa:2b:b8:bd:a6:4c:81:
ab:ff:bc:0a:52:99:33:94:df:93:e0:84:24:22:29:50:3a:f0:
63:b3:bb:dc:15:a1:28:41:fe:ad:30:0c:d7:30:57:12:e0:54:
6a:51:50:7c:32:f3:f2:09:5d:9c:2c:42:0b:c5:10:02:9c:75:
54:6e:78:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 06:18:01 2024 by rpki-client on console-fra.rpki-client.org