Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/vXcPHpKakZYE_mnlxPymmvpUm8I.roa
File: vXcPHpKakZYE_mnlxPymmvpUm8I.roa (raw, json)
Hash identifier: LtfdxuNUsLIfuC7yXB8HTeEGnl6EUHgmSp47pwMg1rs=
Subject key identifier: BD:77:0F:1E:92:9A:91:96:04:FE:69:E5:C4:FC:A6:9A:FA:54:9B:C2
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 0192EDDBDB1B7EB7FBA72DE834B1D031003F
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/vXcPHpKakZYE_mnlxPymmvpUm8I.roa
Signing time: Sat 02 Nov 2024 17:11:01 +0000
ROA not before: Sat 02 Nov 2024 17:11:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50340
IP address blocks: 193.3.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 15:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ed:db:db:1b:7e:b7:fb:a7:2d:e8:34:b1:d0:31:00:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Nov 2 17:11:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd770f1e929a919604fe69e5c4fca69afa549bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:46:da:c1:10:91:29:95:b1:7d:07:34:23:8f:
3d:e3:1b:3b:d8:ab:08:a3:f5:35:68:8b:18:a2:f7:
4d:e7:c5:c2:8e:e9:83:ed:29:2d:b3:33:24:0b:28:
df:2b:93:5a:63:aa:00:75:68:59:01:3b:6e:cd:fa:
26:c8:b9:56:0d:f1:9a:5b:00:09:2c:54:bf:d7:75:
02:18:e7:38:43:ba:72:10:3d:21:de:b5:26:f0:a2:
72:e8:92:c5:21:ee:18:51:32:5f:1f:cb:0e:9d:ec:
40:9d:60:8b:73:5a:fa:8b:81:a8:4e:db:53:63:9f:
4b:ae:cf:f3:94:3a:dd:b8:c7:27:52:dd:49:66:6f:
a9:6b:ee:04:e9:46:5e:b4:63:98:8e:92:06:ae:e6:
6b:06:e3:02:ae:00:61:b1:2a:ae:28:d5:62:c9:97:
45:35:8d:c7:60:ec:b8:ac:82:24:c1:19:4f:16:0f:
14:6a:39:48:ad:4f:d9:0d:63:56:4f:70:d8:4c:2e:
b5:88:9d:94:df:90:1e:e0:44:70:d8:78:4d:6b:0f:
ed:d0:b5:b8:7e:e5:85:9f:11:99:7b:8d:96:41:9c:
70:e7:10:dc:5e:9c:a5:21:4b:8f:a2:1a:9f:e6:ae:
15:1b:d8:3b:6b:e0:e8:f0:d8:96:26:a3:91:27:a5:
fb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:77:0F:1E:92:9A:91:96:04:FE:69:E5:C4:FC:A6:9A:FA:54:9B:C2
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/vXcPHpKakZYE_mnlxPymmvpUm8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.19.0/24
Signature Algorithm: sha256WithRSAEncryption
40:c6:01:b4:71:96:ef:b1:da:34:12:9a:24:c6:56:ac:66:35:
be:8c:e4:da:8c:2a:b8:3e:43:35:5e:53:63:24:bd:87:a9:e8:
49:04:22:a4:21:64:94:1a:11:9a:e4:ca:8f:32:a2:4c:a5:86:
d5:c5:23:67:47:b3:94:e6:da:f4:46:4b:c8:c2:71:60:58:db:
1e:79:52:7f:69:05:1c:e8:da:7e:7e:47:2d:00:a7:9a:62:91:
17:5f:7d:27:b7:53:5a:ef:57:f5:9a:2e:c5:37:32:22:c5:45:
32:51:fa:e1:e3:be:69:95:ea:2c:92:2a:d4:43:62:32:c9:f5:
35:af:a4:b3:1b:3e:78:0f:d7:87:e8:3f:ce:c4:4b:ae:24:2d:
fa:7c:00:5d:31:b4:ef:d9:93:05:56:4d:16:43:c3:f5:17:af:
11:c5:89:12:40:cc:7d:d0:92:11:91:4b:1e:f7:a5:68:c4:3c:
7a:5a:0b:76:6c:36:41:5b:79:2a:62:f9:59:79:6c:ec:7c:e7:
5d:80:6a:8d:a2:8b:34:f8:80:a9:9b:e0:62:55:01:94:8c:27:
ad:21:90:8c:90:ab:1d:82:bc:16:0d:ae:03:07:ef:44:15:f0:
c2:3b:e1:40:78:f6:b1:e8:58:77:46:71:4c:28:39:08:21:fc:
87:d5:f2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:27:20 2024 by rpki-client on console-fra.rpki-client.org