Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/vCt4vNO0Z4aN3rgLt9kw8LTL698.roa
File: vCt4vNO0Z4aN3rgLt9kw8LTL698.roa (raw, json)
Hash identifier: uJ64vJF9ptthm6iaIIgXLm5W/39+mvPVBpM4X5g3k0U=
Subject key identifier: BC:2B:78:BC:D3:B4:67:86:8D:DE:B8:0B:B7:D9:30:F0:B4:CB:EB:DF
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 0192DD3353DA4365C8712E9D6A2431BD6091
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/vCt4vNO0Z4aN3rgLt9kw8LTL698.roa
Signing time: Wed 30 Oct 2024 11:33:01 +0000
ROA not before: Wed 30 Oct 2024 11:33:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35278
IP address blocks: 109.205.58.0/24 maxlen: 24
193.222.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:dd:33:53:da:43:65:c8:71:2e:9d:6a:24:31:bd:60:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Oct 30 11:33:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc2b78bcd3b467868ddeb80bb7d930f0b4cbebdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:54:10:22:89:76:f8:be:a7:b6:05:13:3b:d0:
76:1b:cd:c2:b6:a8:8a:01:7b:8e:b2:91:95:89:39:
50:21:eb:91:09:34:b3:95:12:19:18:a6:c2:c8:90:
45:20:fb:87:85:90:60:94:64:02:d6:83:0f:36:cc:
14:ee:27:99:e1:86:ea:cd:1e:c3:ab:b7:a5:40:67:
72:c9:3a:cf:8a:90:c2:a1:ef:31:a1:40:0e:19:a6:
ec:da:32:39:85:07:7f:a9:d4:dd:af:6f:63:91:fa:
39:8b:c1:8f:77:f4:00:ac:91:58:3e:fe:38:6c:02:
a7:b0:39:a8:ee:2e:b1:7d:69:76:1c:84:c8:4c:b3:
48:6b:6e:53:77:d1:5d:84:b8:d6:e4:b2:14:a8:c0:
af:8b:a2:4c:9f:83:ca:74:d4:4d:5f:67:3e:81:dc:
a0:c6:f1:9d:b3:c8:11:56:d9:73:65:b4:5e:60:f2:
f5:ce:46:8f:07:6d:7a:dc:29:7a:9e:ce:63:32:ff:
05:65:a3:16:6a:ed:d4:12:cb:f4:87:f4:ad:41:73:
92:47:ce:d3:30:44:12:f7:70:d9:42:f8:f4:1d:b2:
e9:f0:95:a3:50:6a:6e:90:59:70:53:98:3d:3a:e6:
ce:97:61:e8:9c:b2:54:18:3b:ed:6f:19:56:ce:ba:
fa:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:2B:78:BC:D3:B4:67:86:8D:DE:B8:0B:B7:D9:30:F0:B4:CB:EB:DF
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/vCt4vNO0Z4aN3rgLt9kw8LTL698.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.58.0/24
193.222.62.0/24
Signature Algorithm: sha256WithRSAEncryption
35:d8:f0:61:ee:12:d0:f0:45:f1:19:3a:1d:f2:e3:b6:5d:02:
1a:a5:3e:1a:64:f1:66:3f:b7:bb:17:1a:2b:aa:db:9f:04:8f:
9b:8e:a7:cf:e1:60:7d:a9:be:3e:01:8c:2a:86:a3:f8:6b:6a:
3b:a9:a6:6d:58:b4:6d:6a:d0:7d:15:35:93:84:d8:dd:7f:b8:
e8:d4:5e:ed:64:c3:76:6b:70:fe:12:d7:24:f1:63:8f:47:a6:
38:a9:ce:25:76:2b:c3:69:00:3e:e0:f1:53:1d:88:55:b8:6d:
ad:32:7e:f9:db:3a:ae:65:51:bd:2b:2e:ef:47:a1:36:fd:57:
c0:a0:b6:59:f9:ca:82:59:1a:41:91:01:e4:55:98:0b:c1:a0:
7c:79:e7:34:08:76:2e:2b:7e:e8:f4:e4:73:78:1b:8e:a1:2e:
a8:59:a4:2c:53:3d:58:65:96:3f:fa:f2:5f:16:9b:76:41:15:
75:2e:77:c9:0a:58:5e:a0:e1:b3:19:3f:bb:66:e7:5e:a1:17:
70:0b:13:5f:be:1a:88:21:6a:6a:83:3c:7a:81:d8:73:f8:b4:
04:2f:bb:53:09:00:7a:ab:07:d2:2f:77:b3:61:3f:63:63:8b:
e3:85:51:df:46:16:58:6e:ce:19:9e:4f:2c:e1:f7:89:b4:e5:
f0:2d:ef:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:26:03 2024 by rpki-client on console-ams.rpki-client.org