Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/VDa42oHGcHPBJc9o7T6GHhRSveA.roa
File: VDa42oHGcHPBJc9o7T6GHhRSveA.roa (raw, json)
Hash identifier: odedrCQf9Ksbw+d1gqW4TKC+htZIhLfzMCWweIqX+0E=
Subject key identifier: 54:36:B8:DA:81:C6:70:73:C1:25:CF:68:ED:3E:86:1E:14:52:BD:E0
Certificate issuer: /CN=cbe9fc725b0c3ef10373460f9bf59bce3ed50a34
Certificate serial: 0191C8F3BDA99EC0E767AFBB1D9B665277C9
Authority key identifier: CB:E9:FC:72:5B:0C:3E:F1:03:73:46:0F:9B:F5:9B:CE:3E:D5:0A:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/VDa42oHGcHPBJc9o7T6GHhRSveA.roa
Signing time: Fri 06 Sep 2024 20:08:22 +0000
ROA not before: Fri 06 Sep 2024 20:08:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59444
IP address blocks: 176.121.80.0/22 maxlen: 22
176.121.84.0/24 maxlen: 24
176.121.85.0/24 maxlen: 24
176.121.86.0/24 maxlen: 24
176.121.87.0/24 maxlen: 24
195.64.174.0/24 maxlen: 24
195.64.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 23:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c8:f3:bd:a9:9e:c0:e7:67:af:bb:1d:9b:66:52:77:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe9fc725b0c3ef10373460f9bf59bce3ed50a34
Validity
Not Before: Sep 6 20:08:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5436b8da81c67073c125cf68ed3e861e1452bde0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:69:4e:81:4e:58:04:3b:5f:29:4b:3a:ba:3d:
1f:88:59:80:b3:5a:23:2f:4e:e2:60:d8:be:42:65:
f0:eb:80:44:2d:43:22:a3:ca:c6:e1:c8:16:48:62:
d4:0e:1b:79:c1:5d:e2:b1:49:7f:74:3b:b0:17:57:
bf:d6:0a:a2:a9:40:88:61:a4:57:f5:3c:91:b3:83:
7f:1b:98:75:94:d9:56:f8:6f:f6:bc:7b:ac:94:ea:
95:53:d3:18:13:1a:12:b9:62:c8:ff:6c:39:0f:03:
48:22:5c:9d:dd:f2:db:d4:5d:01:55:21:50:8a:45:
c4:e0:89:76:30:95:35:c1:a8:37:90:e2:e8:f9:bf:
cc:e3:6f:56:23:6d:62:9b:a3:26:6c:24:78:dc:bb:
2c:21:ae:9b:b4:d7:31:14:78:a1:27:3a:63:9d:6e:
d2:5a:fa:f8:d7:b3:f4:f7:ed:cf:0d:77:4a:be:4b:
d7:3e:35:97:7e:99:24:ab:c9:7c:61:c2:05:eb:16:
1e:9e:89:ed:ce:f3:f1:14:36:26:c2:be:c7:9b:42:
83:95:39:57:5b:99:29:c3:d9:96:e3:cf:14:3c:89:
5e:81:74:33:c9:9b:0d:f4:20:87:4b:a1:a5:ef:4b:
c2:1f:20:30:82:9b:0b:72:47:70:c3:ad:21:93:7c:
ba:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:36:B8:DA:81:C6:70:73:C1:25:CF:68:ED:3E:86:1E:14:52:BD:E0
X509v3 Authority Key Identifier:
keyid:CB:E9:FC:72:5B:0C:3E:F1:03:73:46:0F:9B:F5:9B:CE:3E:D5:0A:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/VDa42oHGcHPBJc9o7T6GHhRSveA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.121.80.0/21
195.64.174.0/23
Signature Algorithm: sha256WithRSAEncryption
67:f3:9d:50:e6:ac:b8:7e:5d:28:ac:30:a0:3b:17:af:74:9d:
47:0e:29:22:9f:88:f6:4c:1e:5a:a5:33:d5:a4:00:eb:ed:9e:
32:f9:44:4f:20:81:91:6e:65:97:0f:fd:71:b9:7d:35:f3:fd:
05:ef:3b:3d:48:a1:a5:f1:df:1b:75:00:a6:4e:9e:c0:a1:1b:
bd:ad:d5:29:60:06:aa:55:c7:f2:cf:03:27:64:02:43:08:82:
26:dd:90:2a:6a:42:60:16:39:25:33:63:bd:de:4f:94:c9:52:
26:7f:76:69:1c:59:2b:12:fb:8d:23:0d:ac:61:ff:ee:f1:c5:
ab:3e:37:d3:57:39:0c:c3:46:b5:68:02:44:de:29:7d:65:fe:
b0:0b:f7:2e:c1:50:b9:e4:8d:1f:24:76:57:c9:ab:53:21:be:
5c:21:0d:88:79:59:7a:11:35:a6:a7:21:1b:f3:7e:aa:55:7f:
f3:10:9d:e1:f6:7c:a6:6a:b7:05:69:bf:01:71:1d:f1:e1:02:
19:02:7c:cb:23:b6:3c:b4:56:d5:84:9b:d3:99:d8:13:2e:32:
d9:8f:31:96:e1:2b:a6:4f:f5:be:b3:69:9c:8f:cd:c8:48:8a:
58:bc:fc:7e:8f:92:d6:c4:81:00:cc:62:d0:c6:8c:d6:95:9e:
72:f7:13:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 06:17:13 2024 by rpki-client on console-ams.rpki-client.org