Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/vqt_vGzsCiIqZREWS7mATU5TP2c.roa
File: vqt_vGzsCiIqZREWS7mATU5TP2c.roa (raw, json)
Hash identifier: VRagk4nDCARezVg/uu8L37a0KMsJPidD3YtFovT7S+I=
Subject key identifier: BE:AB:7F:BC:6C:EC:0A:22:2A:65:11:16:4B:B9:80:4D:4E:53:3F:67
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018CC64AF04B273A172BC6D2EBB65CDB67D2
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/vqt_vGzsCiIqZREWS7mATU5TP2c.roa
Signing time: Mon 01 Jan 2024 18:30:49 +0000
ROA not before: Mon 01 Jan 2024 18:30:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60657
IP address blocks: 80.96.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:f0:4b:27:3a:17:2b:c6:d2:eb:b6:5c:db:67:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 18:30:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=beab7fbc6cec0a222a6511164bb9804d4e533f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1d:61:87:13:f2:12:eb:45:a3:62:38:08:07:
2c:b9:78:43:67:56:8c:69:9d:6d:36:17:25:0d:47:
10:24:8e:98:35:e2:ab:37:4e:9a:52:ca:b5:dc:d1:
02:85:ed:9a:45:4c:53:b8:29:30:af:80:fd:55:38:
fc:af:85:55:2c:ed:6a:f9:04:6c:94:84:6e:74:d0:
76:df:61:83:e9:f4:71:6b:b9:24:b4:51:21:51:49:
95:aa:9e:86:6f:83:fc:91:95:b6:a3:cd:75:23:34:
79:66:ab:5e:fe:18:87:12:78:60:cb:22:8b:67:a3:
35:b2:21:7b:50:fe:bb:0d:3f:8b:24:f7:5a:ef:2d:
b8:0b:a9:3b:c8:38:f0:51:d5:53:8d:9d:87:f2:51:
41:3b:b3:c8:88:6b:11:d0:c3:49:65:4b:72:62:34:
91:8e:e7:ea:ea:e3:a0:e0:42:4e:5d:b2:13:0d:cb:
32:cc:b5:85:38:14:b6:84:b0:43:a0:79:a1:22:6a:
26:83:2e:08:de:e5:2e:98:02:13:1c:eb:53:c5:08:
88:97:23:f0:43:e1:d5:86:d9:4a:6f:0f:ce:b5:1d:
f2:a9:59:0b:02:0e:dd:b9:8e:a8:c8:32:34:37:55:
3c:3c:2a:59:34:20:a9:4f:94:0c:5b:44:e6:5b:b9:
a7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:AB:7F:BC:6C:EC:0A:22:2A:65:11:16:4B:B9:80:4D:4E:53:3F:67
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/vqt_vGzsCiIqZREWS7mATU5TP2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.46.0/24
Signature Algorithm: sha256WithRSAEncryption
90:55:d5:3e:b9:98:80:83:34:66:6d:66:1a:36:70:14:b5:25:
db:d6:d6:5d:bb:03:7c:e6:11:db:02:d5:73:c4:01:7f:b8:34:
f6:3c:9c:53:a8:64:62:b9:7f:b3:e6:39:95:cb:bf:64:26:0c:
7a:58:c4:58:35:a2:bd:a9:97:30:9a:7e:d9:c6:96:1a:d7:47:
2d:22:e4:a5:f0:b9:f5:87:c4:47:10:7f:8d:4f:05:00:f2:4e:
0f:46:7e:8c:84:a8:25:74:3d:b6:0b:b2:bd:e2:14:eb:aa:ea:
8f:15:2f:4a:b0:fb:f5:8f:f0:00:bc:85:a4:9b:18:60:37:e4:
6e:93:c0:2f:5d:88:01:49:eb:ed:f3:34:21:e4:9f:f0:84:df:
f8:60:fa:37:6a:3f:c0:c9:c0:eb:94:eb:01:9e:d9:41:b6:05:
13:34:78:7c:d2:aa:8a:80:e0:98:a6:97:4c:69:14:2e:c4:2c:
75:02:c2:ff:32:8e:2e:4b:a4:5b:85:d8:c2:1c:91:80:79:50:
de:ec:d5:04:e2:c2:96:8e:e5:df:24:ae:a2:1b:06:98:f2:07:
be:24:9d:c6:29:8d:e1:e7:7e:db:04:ab:0e:c3:7e:68:f7:d3:
86:54:3f:10:3b:3f:3a:17:22:ae:8d:a2:42:dd:9a:92:8e:34:
8c:dd:0e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:28:50 2024 by rpki-client on console-fra.rpki-client.org