Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/VyAV3vwo9T69GvBgwPjqd7o4RNY.roa
File: VyAV3vwo9T69GvBgwPjqd7o4RNY.roa (raw, json)
Hash identifier: MJTriY9rdNih3Q82LNVEkKUe1A1qAdzDNYqutEtIVL8=
Subject key identifier: 57:20:15:DE:FC:28:F5:3E:BD:1A:F0:60:C0:F8:EA:77:BA:38:44:D6
Certificate issuer: /CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9
Certificate serial: 018DFA1B491420BD899D841E213A03EEEFCD
Authority key identifier: DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/VyAV3vwo9T69GvBgwPjqd7o4RNY.roa
Signing time: Fri 01 Mar 2024 13:01:48 +0000
ROA not before: Fri 01 Mar 2024 13:01:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216031
IP address blocks: 194.49.111.0/24 maxlen: 24
194.49.115.0/24 maxlen: 24
194.49.116.0/24 maxlen: 24
194.50.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 18:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:fa:1b:49:14:20:bd:89:9d:84:1e:21:3a:03:ee:ef:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9
Validity
Not Before: Mar 1 13:01:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=572015defc28f53ebd1af060c0f8ea77ba3844d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bd:4a:9d:99:3d:ee:f4:69:f8:20:d7:8b:1a:
6e:a7:ee:a4:63:e7:fc:dd:28:2f:a5:fe:d4:29:79:
d4:eb:80:76:02:08:c8:b2:d1:33:9a:c2:46:1a:50:
2b:87:ad:db:99:a0:ab:09:15:a5:56:e7:40:89:5a:
74:c4:19:0d:43:9e:7e:62:59:89:d1:68:49:22:6c:
e0:ea:ee:9e:41:f1:f0:d6:79:94:20:50:ca:ad:7c:
8a:46:0a:c6:dc:47:d1:9a:25:9a:ae:3d:8d:3a:97:
62:2d:1b:01:4b:3e:41:49:78:d9:2a:9d:4d:23:45:
3e:7d:6f:a3:f2:44:ed:37:60:f1:8d:4e:a5:41:20:
57:0e:88:8f:64:13:95:df:10:74:23:16:58:b4:55:
fb:9b:99:12:6e:2f:3a:50:8c:3a:5e:46:48:bd:9c:
4c:ce:d0:db:72:09:4f:00:49:27:38:c5:a3:6a:30:
f7:0e:f1:38:99:27:30:9d:00:ec:e9:24:87:d8:0a:
a7:96:48:3f:10:7b:52:4e:f6:f7:02:23:5d:0a:a9:
d7:77:80:0d:a3:9d:a3:9d:86:79:7c:70:61:15:e9:
a2:02:50:53:3e:ac:38:6e:f9:be:e0:7b:eb:42:45:
b1:46:8a:a5:43:ba:9e:25:c5:73:56:71:a8:72:7f:
1d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:20:15:DE:FC:28:F5:3E:BD:1A:F0:60:C0:F8:EA:77:BA:38:44:D6
X509v3 Authority Key Identifier:
keyid:DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/VyAV3vwo9T69GvBgwPjqd7o4RNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.49.111.0/24
194.49.115.0-194.49.116.255
194.50.3.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:89:6a:4d:1b:0a:9b:c0:3b:f6:bb:bf:a2:10:da:0d:fb:2a:
37:b3:b5:ca:c4:14:82:16:97:8a:3f:ec:90:9a:45:aa:b7:ff:
17:1a:fd:13:d3:c0:5f:e3:0a:d9:b2:4b:89:13:6e:d1:6f:ff:
b9:de:61:fb:0b:61:eb:b0:48:e4:d5:c6:30:1f:84:50:07:7e:
ca:02:a4:09:75:5c:4d:cb:2b:7c:73:94:62:de:9b:a7:2e:4a:
7c:42:dc:59:f1:86:e7:ab:05:61:8d:96:35:0d:86:5b:b9:7d:
14:90:d0:ed:1e:5e:9d:6f:5c:82:15:ef:0f:17:82:39:8b:3b:
62:55:7f:ed:f1:22:93:4f:d8:f3:b1:bc:3d:3a:35:3f:dc:b8:
c3:4e:47:1e:1e:91:ae:8d:2b:97:9c:3c:03:ab:71:a3:e5:6a:
76:6f:1b:53:7c:b4:3b:c7:38:b0:42:67:e4:0e:d0:2a:bb:08:
71:a1:b8:1f:da:39:62:75:ca:2d:07:45:c0:27:c9:91:6c:c4:
b0:a0:72:8a:b9:a8:19:04:14:f1:da:d7:0c:83:35:f2:7e:ba:
cc:77:86:5b:60:f2:39:4a:a6:ff:55:5b:38:2b:19:9e:9f:a7:
9a:14:63:93:e0:2b:8f:da:d8:56:c4:15:64:8e:78:2e:42:48:
fb:31:4e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 23:51:22 2024 by rpki-client on console-fra.rpki-client.org