Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/va7O1n37_9_tTuqSG2-KtZGZLtY.roa
File: va7O1n37_9_tTuqSG2-KtZGZLtY.roa (raw, json)
Hash identifier: OSHdgrrMwKrx/+fuoMGesw5jqxrOHPQepjhUei6H8bc=
Subject key identifier: BD:AE:CE:D6:7D:FB:FF:DF:ED:4E:EA:92:1B:6F:8A:B5:91:99:2E:D6
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018CC8DF7C7BFF0B4C6A3D63A00EBC509C55
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/va7O1n37_9_tTuqSG2-KtZGZLtY.roa
Signing time: Tue 02 Jan 2024 06:32:18 +0000
ROA not before: Tue 02 Jan 2024 06:32:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47585
IP address blocks: 78.135.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:7c:7b:ff:0b:4c:6a:3d:63:a0:0e:bc:50:9c:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 06:32:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bdaeced67dfbffdfed4eea921b6f8ab591992ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:be:b2:0e:66:39:a4:20:f0:37:85:ac:b3:63:
b9:de:9d:9c:9b:2a:6a:a4:e6:cb:ab:2d:05:1e:a5:
f0:92:0f:86:a5:65:df:2e:94:8f:6d:88:55:04:24:
18:49:08:8b:cf:0e:8c:09:d6:69:e9:8c:98:69:64:
14:80:88:6d:9b:2d:af:95:ad:7a:be:3b:b0:9e:95:
f9:bc:77:20:96:b1:19:f9:a9:71:da:4e:8c:c5:35:
0a:3e:bd:96:0a:87:ce:37:47:d7:02:ea:d6:bd:e6:
dd:4d:a5:37:7f:0e:26:71:4b:b3:93:d2:ff:32:e0:
72:79:ff:9e:02:11:df:04:0c:68:a5:36:40:9d:c8:
fe:34:61:26:ff:6c:24:ed:85:92:57:99:fb:3e:ba:
d3:5d:7e:d5:5b:54:37:72:ae:74:8e:3f:96:b6:44:
30:0e:ed:a8:33:4c:2f:60:e6:69:f5:cc:ab:1e:83:
63:60:ce:be:6a:ed:cd:47:ec:41:dd:81:b2:a5:6d:
82:ba:ac:22:72:54:0d:c9:7d:be:40:9d:2a:e5:49:
d3:e6:c8:0c:ed:74:53:3c:e7:c8:ac:c1:74:64:27:
43:5a:d3:25:84:51:d0:17:ec:c0:3a:d4:fd:3b:ca:
a3:e9:d8:ab:5c:60:dd:24:11:5f:fd:7c:5f:ef:2e:
d0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:AE:CE:D6:7D:FB:FF:DF:ED:4E:EA:92:1B:6F:8A:B5:91:99:2E:D6
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/va7O1n37_9_tTuqSG2-KtZGZLtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.111.0/24
Signature Algorithm: sha256WithRSAEncryption
33:94:28:fe:de:23:8e:65:46:24:a6:86:50:99:c6:6d:86:58:
1e:32:97:98:22:7a:95:c8:02:fe:ef:85:53:ac:21:ce:04:e4:
cb:15:a8:2d:9b:cc:b0:a7:3b:8f:d1:04:2e:ec:fb:23:ee:bf:
ee:6c:79:1e:51:2c:0d:8a:3c:80:31:6a:be:b2:8d:66:ce:c6:
f4:f8:a9:f8:33:d6:4f:57:9e:6c:39:94:89:77:3b:2e:b9:27:
8b:b7:e2:c7:3b:d0:26:51:af:19:80:c8:67:2d:ce:6b:c7:fe:
74:b1:e0:df:6c:58:9a:a7:f9:ad:51:b4:ab:61:88:4b:4f:f8:
40:5e:68:49:55:22:59:be:9a:36:d1:aa:93:eb:b1:77:55:86:
5f:47:0b:15:e9:50:01:01:6c:91:74:d7:c8:6c:79:b4:53:13:
dd:21:b7:46:c4:a2:0e:7a:e5:36:8c:84:40:c2:8f:e1:df:77:
32:8a:58:08:a7:ca:34:be:29:3b:ba:da:94:10:6d:a3:b8:3a:
07:a9:6a:bf:65:c0:e6:8c:7c:9a:15:ad:4a:35:6b:e4:82:4e:
dc:40:9a:27:b3:39:6b:17:78:0e:ad:11:ab:27:cc:fa:8f:d9:
fd:43:22:40:4f:a2:e4:9e:3f:90:1d:59:45:2f:e3:a8:bb:10:
46:85:7b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:51:58 2024 by rpki-client on console-fra.rpki-client.org