Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3n4HzsfTrTz5hF8hUKyCioGM_VM.roa
File: 3n4HzsfTrTz5hF8hUKyCioGM_VM.roa (raw, json)
Hash identifier: yMpFM6elE9d73cbu+yY2ZDJ/9WbRdkO0OgxB+HjwljQ=
Subject key identifier: DE:7E:07:CE:C7:D3:AD:3C:F9:84:5F:21:50:AC:82:8A:81:8C:FD:53
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0193A38946CAAB3C849BC8DC10AA09A29A9E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3n4HzsfTrTz5hF8hUKyCioGM_VM.roa
Signing time: Sat 07 Dec 2024 23:51:42 +0000
ROA not before: Sat 07 Dec 2024 23:51:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 26737
IP address blocks: 194.50.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Dec 2024 13:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a3:89:46:ca:ab:3c:84:9b:c8:dc:10:aa:09:a2:9a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Dec 7 23:51:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de7e07cec7d3ad3cf9845f2150ac828a818cfd53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b6:75:09:7f:77:b1:6b:e0:4f:81:6e:14:88:
cc:36:e5:57:c9:5d:75:83:7d:83:ab:9a:10:58:51:
5c:66:03:83:78:9d:12:bb:4d:6c:a9:af:10:e4:bf:
cd:11:99:3e:23:8c:6e:a7:f8:5c:ee:b3:18:94:be:
d9:ab:ec:0c:d6:c2:d1:eb:60:af:b4:1d:0e:aa:cf:
7a:e7:26:b9:1d:68:a8:08:41:9c:ef:38:99:ba:c3:
20:1f:2b:49:d1:00:b2:fd:57:2e:ea:5d:45:50:8c:
39:c9:c5:7b:42:e4:66:62:d6:53:cb:2b:60:54:56:
e4:53:7d:f5:74:e3:c0:28:6b:38:2b:3e:ba:2e:e0:
fe:e3:69:92:9a:ac:00:9b:08:91:04:57:cd:ec:a8:
94:63:d8:c8:76:9c:a1:f3:31:0e:41:28:10:90:5f:
2a:9e:46:23:64:3c:4b:0c:53:be:7b:5e:4e:4a:a6:
3f:44:2d:33:0c:59:9e:01:34:b2:26:6c:e9:25:61:
fd:f2:60:72:ef:40:81:ce:b4:46:7a:a5:d7:3a:7e:
c4:61:82:b4:bd:4e:0a:0a:d6:ec:d9:4c:ec:92:1f:
c6:12:ef:e6:60:00:a9:df:38:bc:df:74:f5:28:1a:
77:ec:a8:4d:b3:dc:d6:6d:27:40:03:7d:34:a8:ad:
51:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:7E:07:CE:C7:D3:AD:3C:F9:84:5F:21:50:AC:82:8A:81:8C:FD:53
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3n4HzsfTrTz5hF8hUKyCioGM_VM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.111.0/24
Signature Algorithm: sha256WithRSAEncryption
35:a1:6c:05:50:7a:1c:1d:f1:3d:f2:54:42:3e:91:c6:10:f1:
e1:79:ab:b1:86:60:78:ec:9d:82:29:95:1f:e5:4f:33:df:ec:
fd:40:24:84:90:09:78:32:f7:66:e2:03:a3:13:84:32:84:fe:
b6:42:23:19:33:e8:19:28:10:41:c3:be:a0:79:2b:80:32:71:
ab:37:04:5d:ee:68:61:f4:e3:fa:88:ba:a4:8d:b2:33:17:5b:
e2:c3:2b:7b:19:ce:a1:e3:8a:d2:16:7a:a6:ae:c1:fb:ef:b7:
38:e4:53:5b:d8:08:8e:a2:a7:4a:ce:b2:01:ed:35:2b:77:79:
8b:9b:de:66:f7:7e:4e:2d:9b:e1:22:a5:6d:70:05:b4:51:a5:
a9:9f:91:cf:92:70:32:8f:30:77:84:29:c5:d7:86:f7:ec:39:
b1:3c:b1:ca:2f:48:ce:64:18:d3:08:69:c3:c8:59:65:6a:8d:
9b:ce:45:e1:07:b1:41:2b:28:3f:49:52:e0:53:d1:e4:b3:e8:
74:92:44:38:ed:81:4b:a3:60:e3:21:cf:61:9b:31:a0:ce:9d:
52:76:ff:bf:d1:e0:35:5e:1f:32:35:68:0e:96:84:65:ca:74:
9d:46:85:54:90:38:b2:f0:46:3b:6b:4d:4f:13:53:af:ed:12:
56:ca:a4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 20:36:24 2024 by rpki-client on console-fra.rpki-client.org