Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/VzaVCsyMuRgy4F2ugghmqRRWZbc.roa
File: VzaVCsyMuRgy4F2ugghmqRRWZbc.roa (raw, json)
Hash identifier: 1WawRllGhbcuGwy6CvgJGjf73FOoYs3ZtOxXGiemN14=
Subject key identifier: 57:36:95:0A:CC:8C:B9:18:32:E0:5D:AE:82:08:66:A9:14:56:65:B7
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01905E40BA7A5083BD02CC5C8763E1413788
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/VzaVCsyMuRgy4F2ugghmqRRWZbc.roa
Signing time: Fri 28 Jun 2024 09:50:18 +0000
ROA not before: Fri 28 Jun 2024 09:50:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214612
IP address blocks: 80.242.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5e:40:ba:7a:50:83:bd:02:cc:5c:87:63:e1:41:37:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jun 28 09:50:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5736950acc8cb91832e05dae820866a9145665b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d6:1c:3c:eb:8a:07:8f:68:a2:df:35:e3:27:
f5:4a:f3:e8:f6:4b:7f:d7:60:1c:81:83:e2:23:42:
e1:55:ad:f7:b3:08:64:95:44:73:d4:73:42:1b:50:
80:90:93:8b:8d:ca:02:d2:a6:be:36:77:24:20:52:
27:d9:52:22:6e:41:c2:ec:1a:16:cf:b3:5d:f3:20:
88:f5:ae:ee:2f:f6:07:76:56:17:36:dc:d6:50:09:
a7:1c:90:1e:1f:ab:19:8b:31:72:f0:79:a9:dc:0f:
d9:93:94:87:34:c5:0e:86:2b:a7:f9:ad:50:cf:65:
ac:a1:97:61:e6:f1:21:03:6e:28:d5:57:51:d7:db:
db:54:4c:e5:e1:31:3c:db:0c:34:e7:2d:e3:b2:51:
63:9e:c8:92:af:40:79:d2:74:9e:95:32:9e:d4:ef:
29:1b:91:03:d2:2b:0a:79:9a:9e:a5:04:ad:e3:9e:
7f:d4:49:b9:c5:56:06:2d:60:d5:01:4e:74:56:b4:
9a:0d:de:6a:0c:d0:2c:ca:15:2f:1f:51:c9:f5:9f:
55:c9:0a:d7:0a:92:3e:0d:6e:c6:96:a1:3f:42:12:
cc:fd:8b:30:24:54:34:c7:5b:dd:4a:7b:a0:6e:5b:
8c:23:93:c7:43:91:1b:fd:75:35:55:01:e6:ff:d8:
c0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:36:95:0A:CC:8C:B9:18:32:E0:5D:AE:82:08:66:A9:14:56:65:B7
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/VzaVCsyMuRgy4F2ugghmqRRWZbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.242.54.0/24
Signature Algorithm: sha256WithRSAEncryption
87:00:9e:13:cd:33:cc:44:3a:53:fc:7f:16:a0:32:b9:87:b4:
ae:89:cc:5d:cb:cf:e5:53:02:31:9f:42:b6:91:ec:6b:41:f8:
22:a8:50:d1:4d:09:cc:20:83:29:c4:68:28:cf:b4:f7:ca:95:
0a:17:13:f8:82:d8:c1:a3:2d:29:b3:d1:0c:82:01:8a:d2:11:
60:a8:fd:86:87:e1:82:f9:9b:fe:05:d4:94:f2:0a:87:e6:ac:
5c:51:33:f3:fb:90:9f:07:ad:05:31:24:54:38:1b:94:14:38:
58:0a:f8:e4:60:14:ff:57:9f:0b:4a:44:f1:50:1e:13:8d:b0:
c6:2a:67:ec:87:49:be:93:47:81:57:78:32:7a:09:7f:71:72:
03:80:32:d9:f7:f3:58:bf:f6:af:fe:16:ca:e4:dc:c4:83:c5:
f8:3a:9e:74:db:ba:ab:db:25:55:20:b8:5d:19:9e:04:0e:9e:
a2:34:bc:f7:36:b9:00:80:f1:ec:0c:63:1b:70:af:05:4d:b8:
bc:66:e3:cb:3a:5e:47:d5:79:62:5c:60:7c:8a:96:e0:3a:68:
7f:ac:a2:44:76:2f:00:f5:e9:c3:d0:f0:ea:93:1b:4a:ea:6b:
7d:3e:d7:33:27:e1:3c:a0:9f:06:d9:69:1a:c9:f7:ca:4d:ec:
7a:11:ac:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:26:03 2024 by rpki-client on console-ams.rpki-client.org