Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/vz1pYR_0e-pa8wC5MM78GgPFb5Y.roa
File: vz1pYR_0e-pa8wC5MM78GgPFb5Y.roa (raw, json)
Hash identifier: oLSMAWDQLCP/6shI230RgoAnkqXYjpnxKwg+I8ojCa4=
Subject key identifier: BF:3D:69:61:1F:F4:7B:EA:5A:F3:00:B9:30:CE:FC:1A:03:C5:6F:96
Certificate issuer: /CN=0a2d71c0d145ef27804710927b943c67e50ae7ab
Certificate serial: 018CC80144B811A50A1ED879FD3F614EC8AE
Authority key identifier: 0A:2D:71:C0:D1:45:EF:27:80:47:10:92:7B:94:3C:67:E5:0A:E7:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/vz1pYR_0e-pa8wC5MM78GgPFb5Y.roa
Signing time: Tue 02 Jan 2024 02:29:35 +0000
ROA not before: Tue 02 Jan 2024 02:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57609
IP address blocks: 193.222.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:44:b8:11:a5:0a:1e:d8:79:fd:3f:61:4e:c8:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a2d71c0d145ef27804710927b943c67e50ae7ab
Validity
Not Before: Jan 2 02:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf3d69611ff47bea5af300b930cefc1a03c56f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:56:ca:8c:15:10:a8:04:d7:cb:3a:d0:8d:03:
16:75:88:33:07:82:9c:ee:50:95:da:8a:28:86:2a:
d1:e5:c2:06:52:e4:6d:6e:dd:f3:5f:19:93:42:88:
39:ba:ca:57:5a:a4:60:d1:e3:b0:32:d4:1c:61:e6:
67:02:f0:23:e2:37:c5:58:e8:a2:7f:25:ea:97:d4:
db:25:3c:b7:ea:7e:08:48:0a:54:57:16:f5:1a:b9:
99:d6:13:43:95:f3:6a:04:4c:bf:15:da:38:a5:61:
86:14:2a:97:5e:05:46:31:07:66:0b:b8:f2:36:90:
e9:43:a4:f5:42:84:0e:cc:1d:eb:37:c8:6d:70:52:
53:48:06:1e:63:44:5d:70:64:7d:b0:92:81:d9:b0:
2e:88:66:e6:9c:5d:7d:ad:43:0e:fa:da:a4:b5:90:
47:08:bf:30:4f:25:81:1b:a0:25:e3:1c:fc:b9:4b:
2e:4f:da:f6:4a:11:75:fa:dc:c0:77:eb:9c:92:82:
50:ab:15:c2:9a:be:ba:fd:e9:c7:e2:fb:43:c2:0c:
75:eb:64:cc:56:f1:6c:57:0f:54:39:97:b2:72:28:
7c:b0:2c:45:4b:6c:0a:4e:3e:b5:6e:d6:5e:d1:0b:
ad:c8:e1:4c:73:e4:5d:3b:6b:74:12:b9:90:e8:a1:
87:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:3D:69:61:1F:F4:7B:EA:5A:F3:00:B9:30:CE:FC:1A:03:C5:6F:96
X509v3 Authority Key Identifier:
keyid:0A:2D:71:C0:D1:45:EF:27:80:47:10:92:7B:94:3C:67:E5:0A:E7:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/vz1pYR_0e-pa8wC5MM78GgPFb5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.222.58.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:f1:df:43:d7:1e:87:25:1e:2e:8d:4a:1a:de:dd:7a:d3:ba:
4a:4b:4e:e8:a2:c0:06:a5:67:44:29:42:73:c4:3e:e6:3d:5e:
cd:c3:c5:6b:f1:65:ad:ac:06:4b:06:05:e8:ed:eb:f2:cf:9e:
08:ea:f6:33:a4:20:ed:79:9a:10:08:18:7d:99:b6:f9:5c:dd:
53:f5:6c:ae:0f:d6:dc:89:29:11:45:4f:12:3a:8a:28:1d:d8:
1e:e1:dc:2f:4d:20:5e:47:14:8f:03:82:22:85:bd:d0:72:36:
df:fc:8c:f1:1d:53:99:dc:57:ef:d4:9d:a5:64:72:79:92:1c:
b2:32:5f:a7:0e:08:7f:ab:7b:31:50:c4:e0:2a:ca:f6:f7:74:
33:92:27:e9:c9:38:78:76:e2:cd:c8:f5:fe:bf:cd:e0:90:6e:
90:44:18:5c:93:e4:1e:75:a2:f8:f1:75:f1:07:0e:25:e6:2d:
51:71:b9:8a:6c:22:ec:c6:6d:23:cb:83:9f:22:32:fc:0d:ec:
67:7b:4f:0f:82:02:9b:07:b3:e3:fe:60:6d:3f:c1:f0:d8:c3:
55:0b:76:38:cb:71:b6:c3:c0:6b:9f:94:8a:63:57:ce:e4:a5:
71:66:0f:ff:db:ec:66:c4:39:59:cd:d7:7a:25:cd:6f:8a:f0:
19:06:4a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:59:01 2024 by rpki-client on console-fra.rpki-client.org