Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/vNHboa27h59jUjv-YT7Eg7PIyI0.roa
File: vNHboa27h59jUjv-YT7Eg7PIyI0.roa (raw, json)
Hash identifier: IeBJfiDpmZHkBTFJOWTIwSWDChzvMcm0riLgYkKOp8Y=
Subject key identifier: BC:D1:DB:A1:AD:BB:87:9F:63:52:3B:FE:61:3E:C4:83:B3:C8:C8:8D
Certificate issuer: /CN=a8c6f393350c77598c121acd3c92f7048576ef89
Certificate serial: 018CC3B714878ED494E7C0C60DC49145D022
Authority key identifier: A8:C6:F3:93:35:0C:77:59:8C:12:1A:CD:3C:92:F7:04:85:76:EF:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qMbzkzUMd1mMEhrNPJL3BIV274k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/vNHboa27h59jUjv-YT7Eg7PIyI0.roa
Signing time: Mon 01 Jan 2024 06:30:04 +0000
ROA not before: Mon 01 Jan 2024 06:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49561
IP address blocks: 193.169.126.0/23 maxlen: 23
91.222.152.0/22 maxlen: 22
91.231.160.0/24 maxlen: 24
91.235.224.0/22 maxlen: 22
31.134.112.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qMbzkzUMd1mMEhrNPJL3BIV274k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:14:87:8e:d4:94:e7:c0:c6:0d:c4:91:45:d0:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8c6f393350c77598c121acd3c92f7048576ef89
Validity
Not Before: Jan 1 06:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bcd1dba1adbb879f63523bfe613ec483b3c8c88d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:60:60:77:b0:8b:a0:1a:91:8f:8b:af:34:7c:
24:54:c1:7f:44:8e:21:3d:b7:91:3b:0e:e0:56:e8:
95:d9:39:b2:a3:08:a0:79:1c:a9:8c:b9:e5:ab:a9:
c0:56:0e:c7:13:3c:76:27:03:20:56:61:24:9f:f2:
b3:b5:e8:53:db:45:44:53:30:2e:ca:2d:c5:40:bb:
1e:e9:0d:32:e2:9e:a0:e6:db:22:95:50:57:b2:e3:
f3:6d:f7:f4:ae:be:3f:15:34:31:c9:48:2f:d3:9b:
59:af:88:8d:1d:91:32:c3:ee:5b:ec:40:f9:86:40:
e8:5c:ed:10:77:df:c1:9a:20:d6:92:6d:2e:d2:e5:
5b:48:fa:33:02:4a:cb:fe:e5:2b:22:8e:77:7d:8a:
65:50:52:a0:b9:25:0a:ce:81:c9:a1:ad:e6:fe:4c:
f5:42:be:be:16:8e:1a:55:23:7a:53:32:9a:34:a7:
98:21:62:59:14:15:fb:94:57:d9:1c:cc:d7:f9:cf:
0c:2e:c4:09:62:88:f0:1a:9f:f1:f2:59:4e:a1:c6:
b5:4c:e9:3c:4d:13:30:d9:25:c8:93:5d:b2:a8:2a:
1a:2b:50:b8:38:7f:aa:a2:d0:7c:37:e4:b6:f6:b0:
b5:ea:b6:4b:ea:a5:02:80:c2:7f:6b:80:bf:a2:f7:
78:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D1:DB:A1:AD:BB:87:9F:63:52:3B:FE:61:3E:C4:83:B3:C8:C8:8D
X509v3 Authority Key Identifier:
keyid:A8:C6:F3:93:35:0C:77:59:8C:12:1A:CD:3C:92:F7:04:85:76:EF:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qMbzkzUMd1mMEhrNPJL3BIV274k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/vNHboa27h59jUjv-YT7Eg7PIyI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.134.112.0/21
91.222.152.0/22
91.231.160.0/24
91.235.224.0/22
193.169.126.0/23
Signature Algorithm: sha256WithRSAEncryption
40:64:a4:c1:f9:d6:ab:71:46:b5:97:e8:84:71:b4:1f:24:48:
5e:8e:f2:e3:51:5e:04:42:54:b3:01:5a:af:99:3d:55:2f:ef:
5f:27:8a:3f:8e:3c:64:99:1c:aa:01:87:2d:1a:42:bd:72:c8:
4f:eb:d0:9b:8a:3f:a5:97:9d:73:6d:ae:a5:4d:04:4d:34:9e:
27:1e:b8:19:4a:25:e9:a7:71:f2:e9:6e:77:7c:33:5d:78:c9:
e0:07:95:39:de:bc:60:a5:f2:0d:0d:5b:a1:2e:e3:27:59:90:
fc:7c:c6:38:08:bd:01:dd:a6:e6:2c:6b:56:89:8f:53:df:68:
07:07:85:e1:dd:9b:43:f4:a1:3c:b5:52:15:45:18:73:f4:53:
86:2a:67:ce:42:ab:7f:97:3d:86:3b:39:bd:c1:c0:32:8c:88:
4f:77:e0:84:a0:89:75:9e:6d:88:d3:af:9a:bd:a3:ae:84:06:
ca:46:3c:53:fa:db:77:e0:21:ca:91:f0:62:c5:62:ae:5c:f2:
0f:23:bc:c4:4b:07:95:fd:f8:60:cf:78:77:6f:77:a5:94:e3:
90:e8:e8:f6:af:f4:f6:7d:9f:b9:df:2f:d0:b1:34:c0:88:3e:
62:b1:c8:7b:1b:53:72:3b:79:82:01:3f:07:d1:fb:da:e4:a7:
75:82:3a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:34:25 2024 by rpki-client on console-ams.rpki-client.org