Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/vQ7cPQtltsy8XBsA9zzuO1VTd3c.roa
File: vQ7cPQtltsy8XBsA9zzuO1VTd3c.roa (raw, json)
Hash identifier: 9lr7wfHahrj8O9pMfsYJG4uJOb4QdikJ/5pcO9R8pt8=
Subject key identifier: BD:0E:DC:3D:0B:65:B6:CC:BC:5C:1B:00:F7:3C:EE:3B:55:53:77:77
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 0191F5AEA506DB9F9E2C9CA88469677A394B
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/vQ7cPQtltsy8XBsA9zzuO1VTd3c.roa
Signing time: Sun 15 Sep 2024 12:35:49 +0000
ROA not before: Sun 15 Sep 2024 12:35:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200239
IP address blocks: 185.121.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 15:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:f5:ae:a5:06:db:9f:9e:2c:9c:a8:84:69:67:7a:39:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Sep 15 12:35:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd0edc3d0b65b6ccbc5c1b00f73cee3b55537777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9d:7c:57:7e:3f:3e:08:af:da:0c:9c:d5:46:
79:fc:4a:07:f6:bc:df:07:0a:77:14:5d:a3:06:e0:
ca:0c:27:70:63:e5:89:b1:68:70:b6:ef:eb:76:86:
57:52:f3:28:cf:f4:25:93:9f:42:0e:0c:55:ad:0b:
6a:b4:09:40:66:a9:41:0b:7a:34:6f:f5:4a:a9:21:
86:a7:95:d7:a6:b1:9b:75:29:82:38:2e:99:ea:83:
3f:15:e8:e7:be:59:8e:54:e8:72:9d:ce:a2:bb:9f:
c3:b4:88:1f:08:bb:f6:a7:bd:a4:39:df:aa:ad:10:
60:8d:da:19:57:3b:5d:7d:a1:0f:51:56:90:65:e8:
79:fe:6c:e0:cf:fb:af:8a:3b:fb:07:62:f2:e6:50:
c5:ba:2b:4a:3d:59:71:80:08:de:aa:09:f1:50:e2:
34:f5:fc:64:60:98:32:fc:6c:9b:6c:7e:3b:25:c9:
98:de:a4:3d:e2:f7:12:a5:8d:35:df:31:f6:05:cd:
09:f6:2f:a9:45:64:7f:10:00:aa:6a:99:ec:be:d5:
12:de:b0:4d:ae:3a:fc:72:22:3c:b5:ac:ab:f3:81:
30:af:2f:69:1d:9a:98:74:cc:d2:34:30:4d:ee:86:
66:89:7c:ab:a0:30:60:1c:c0:b0:70:48:11:3d:5f:
02:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0E:DC:3D:0B:65:B6:CC:BC:5C:1B:00:F7:3C:EE:3B:55:53:77:77
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/vQ7cPQtltsy8XBsA9zzuO1VTd3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.132.0/24
Signature Algorithm: sha256WithRSAEncryption
73:48:15:ae:12:c1:81:48:15:ef:26:cb:24:bc:28:ca:29:7b:
1e:b4:fc:27:8b:8a:5e:28:8b:3a:6a:4a:10:48:52:8d:20:66:
ca:98:d1:df:a9:25:b3:2a:9c:3d:a2:3f:e6:ad:66:93:88:6e:
8a:14:39:4e:cc:66:2c:64:f0:01:ac:40:d0:24:7d:fc:30:b5:
b6:0d:ac:3f:8c:02:0d:34:e5:a7:69:55:1b:2a:48:93:3f:a1:
dd:f1:1d:1a:23:ef:a8:61:c1:1a:67:dc:b3:3f:51:41:f9:13:
d8:45:23:b3:bb:c6:e0:7d:81:87:b1:e2:06:f9:80:e4:6d:94:
fa:ae:4a:a8:2f:4d:b2:7d:01:98:5f:ee:d2:bf:c1:32:ff:a0:
dd:a7:de:61:39:dd:26:de:c1:67:99:e1:78:cb:a6:67:70:c6:
40:93:6b:0b:fb:ff:73:14:21:d7:4c:ad:8f:0e:ca:38:79:ee:
12:61:22:20:57:5e:42:f0:ea:42:1e:53:16:aa:0f:bf:6a:18:
78:79:16:93:aa:ef:be:30:4e:f5:b8:b0:42:bb:0e:37:06:27:
c7:e6:79:53:0a:f7:cf:78:8c:b9:e7:34:80:a3:ca:a4:1a:5b:
da:5b:22:ed:73:85:95:88:51:0e:da:2f:c2:40:41:33:cb:73:
72:5b:5e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:37:38 2024 by rpki-client on console-fra.rpki-client.org