Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/vqAGmDT3pcFNXr2aONJzGeuw1GE.roa
File: vqAGmDT3pcFNXr2aONJzGeuw1GE.roa (raw, json)
Hash identifier: q/eKH05eJU6EnFfddg92QXEvR61YtNDXpqW6eynNiuw=
Subject key identifier: BE:A0:06:98:34:F7:A5:C1:4D:5E:BD:9A:38:D2:73:19:EB:B0:D4:61
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 018CC72747753060E4F7744405CB81B23436
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/vqAGmDT3pcFNXr2aONJzGeuw1GE.roa
Signing time: Mon 01 Jan 2024 22:31:29 +0000
ROA not before: Mon 01 Jan 2024 22:31:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62021
IP address blocks: 94.31.28.0/24 maxlen: 24
79.141.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:47:75:30:60:e4:f7:74:44:05:cb:81:b2:34:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Jan 1 22:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bea0069834f7a5c14d5ebd9a38d27319ebb0d461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ed:2c:6a:3d:75:78:28:99:0d:e3:eb:4a:dc:
0f:a1:0f:7a:34:fc:ac:09:33:09:fc:2c:63:df:64:
6d:a9:9a:bd:40:d6:46:b9:34:89:87:17:98:f2:58:
9a:51:05:e4:57:63:aa:0e:e1:8a:5c:3f:7a:53:15:
a2:04:08:55:06:1f:43:a8:2a:11:bb:95:be:a8:75:
ab:3c:1f:6f:da:a6:e2:17:75:b5:fe:76:0c:f2:4a:
0d:d3:92:6c:1e:d6:c9:78:07:7b:e3:8f:a4:9d:1d:
83:4b:40:a5:c4:e1:69:11:0b:5a:4e:df:80:f7:23:
78:c7:d9:ad:82:a4:79:8a:e8:6c:2a:3d:02:fb:fc:
85:c6:d5:94:aa:df:50:ae:7f:c5:d9:fa:3f:b7:f7:
02:fb:72:43:d3:da:11:e2:a3:f0:4b:33:b0:19:f2:
dd:24:33:33:27:01:e8:32:c9:b8:f6:09:7c:8e:31:
c7:6b:78:5f:ea:23:9e:11:e1:d5:23:31:93:81:e2:
f2:1c:1b:b5:62:b0:4e:cd:bc:b9:34:bd:3a:64:a6:
bf:03:a0:2b:f3:24:ff:b0:35:2c:39:82:ca:a5:10:
1b:6f:20:8a:ea:c5:88:73:71:d6:75:3b:75:79:19:
6d:3c:d0:95:aa:d4:9c:31:90:e0:39:88:31:7b:0b:
bf:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A0:06:98:34:F7:A5:C1:4D:5E:BD:9A:38:D2:73:19:EB:B0:D4:61
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/vqAGmDT3pcFNXr2aONJzGeuw1GE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.141.37.0/24
94.31.28.0/24
Signature Algorithm: sha256WithRSAEncryption
05:7f:5f:64:bf:91:cb:ac:6c:48:dc:aa:f2:27:11:b7:dd:4b:
d1:b4:48:e4:f0:03:1f:51:ae:6c:87:8b:0c:e7:82:ce:05:7b:
8b:82:ad:e3:d6:61:1d:b6:22:ea:cb:4e:5e:3a:b6:fb:b5:6f:
a8:cb:41:b9:e1:e7:7b:fd:b1:3d:66:92:01:61:63:89:98:3b:
a1:00:82:51:88:be:15:93:ad:ec:f6:1c:37:e1:f3:b0:c9:e4:
16:05:9e:01:76:7e:02:fa:45:e1:f8:b4:ea:81:cc:f6:12:d5:
a2:45:af:45:cb:12:79:bd:78:e4:9c:f1:2f:23:22:c9:f3:bb:
b5:d1:bd:0e:7a:50:13:3a:a1:ce:f7:b3:b0:81:56:0d:a8:0f:
63:ff:23:90:dc:23:f2:24:84:3a:a9:d7:df:14:dd:ad:25:4e:
f9:09:2d:b3:22:a2:3f:21:be:47:4a:d9:a5:12:97:69:07:b6:
cc:33:f7:36:66:11:b7:c4:4f:08:39:ab:0e:0a:50:5f:05:79:
e6:29:c1:68:c2:db:bb:6d:ed:d4:8b:78:35:85:c8:da:43:09:
91:f0:cd:77:12:b6:ad:f8:6f:ae:19:a1:13:07:dd:f0:01:6f:
1a:10:4f:96:84:8d:ae:80:0c:f3:7a:04:d5:8c:a5:45:21:22:
f8:28:3e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 13:48:18 2024 by rpki-client on console-fra.rpki-client.org