Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/vVAjcJEGWT_I6PUqtIixtPXpKXs.roa
File: vVAjcJEGWT_I6PUqtIixtPXpKXs.roa (raw, json)
Hash identifier: tDIeAq+c3jhUGxt5WbVuf7EvwOC812eQhK3HeHJnbY8=
Subject key identifier: BD:50:23:70:91:06:59:3F:C8:E8:F5:2A:B4:88:B1:B4:F5:E9:29:7B
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 01929A3FFA0E976C8626EF5340D7159199D4
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/vVAjcJEGWT_I6PUqtIixtPXpKXs.roa
Signing time: Thu 17 Oct 2024 11:32:16 +0000
ROA not before: Thu 17 Oct 2024 11:32:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215096
IP address blocks: 212.22.80.0/24 maxlen: 24
212.22.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:9a:3f:fa:0e:97:6c:86:26:ef:53:40:d7:15:91:99:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Oct 17 11:32:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd5023709106593fc8e8f52ab488b1b4f5e9297b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d7:63:a7:69:93:0a:9c:22:01:bd:91:a7:65:
17:96:42:a8:e0:47:6b:ce:48:40:65:b6:35:20:55:
f5:df:0b:94:06:6d:fb:c5:f7:72:03:55:70:f7:51:
b5:0f:f6:c5:44:64:40:14:33:23:ed:1a:df:d4:0f:
b3:bf:87:22:2b:8d:99:5b:ca:57:29:9e:0e:84:13:
02:18:dd:cd:76:7e:4e:4c:e8:58:fb:06:53:48:60:
f9:4c:e5:88:93:e7:bb:71:e8:73:78:3d:0d:f8:fd:
56:44:45:56:87:95:02:2b:04:f9:d4:ae:16:55:74:
1d:2b:c9:1c:07:3a:7a:8c:a4:c4:34:36:5f:26:87:
b4:e2:a4:dc:f8:0f:e7:13:c1:77:a1:f3:f3:87:bd:
c2:ff:06:f0:f9:fb:37:ae:06:a4:cb:f1:52:e9:e6:
a8:1f:c7:8c:f2:1a:a3:0c:f9:0a:0d:31:4d:86:cd:
c6:b1:fa:5f:24:ae:8f:75:18:aa:5f:4f:4b:f0:0b:
aa:09:29:12:84:7d:21:e3:1b:1b:72:e3:49:d6:74:
d5:68:4d:d2:c3:19:c4:61:62:17:78:b5:d1:1b:a2:
5e:b7:3d:01:79:13:2e:4d:8f:1b:5a:48:20:db:92:
31:33:66:e7:28:37:1f:81:96:19:b5:e2:23:e7:a9:
e6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:50:23:70:91:06:59:3F:C8:E8:F5:2A:B4:88:B1:B4:F5:E9:29:7B
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/vVAjcJEGWT_I6PUqtIixtPXpKXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.22.80.0/24
212.22.86.0/24
Signature Algorithm: sha256WithRSAEncryption
98:e7:47:92:f8:fa:aa:bf:ea:eb:f5:e7:54:f3:a4:ea:fb:18:
dc:97:28:01:7a:b9:cd:c7:cc:76:2a:7d:8a:65:62:7e:48:4a:
07:d5:c5:25:58:f7:90:ee:df:4e:f8:b4:81:44:21:d5:5b:28:
ea:cb:9d:41:33:e4:23:06:48:e8:c9:d2:42:31:8c:79:44:23:
39:ab:b5:0f:a3:c3:43:92:53:4a:98:fb:c0:4c:74:8b:3c:f2:
5f:74:f8:f8:f7:ad:5c:4b:81:23:da:60:fa:be:ff:4e:12:46:
76:0c:38:51:2a:4f:1b:6e:10:cb:b4:f7:f1:1c:48:ad:bf:5c:
ea:63:8e:b9:a4:4e:0b:22:d5:a1:6e:ee:f5:7b:5d:cd:89:c3:
d0:34:0e:b4:cd:5a:0b:69:8c:dd:1d:a1:cb:be:e2:c0:50:19:
ec:3d:59:40:81:da:dd:50:89:b9:89:77:00:cc:67:2f:50:83:
fe:c6:d1:b4:d5:e9:57:df:d0:03:13:75:d8:6b:de:3c:df:c2:
44:90:b9:b9:0c:f5:85:7e:74:4c:ff:35:43:17:59:46:2c:f2:
00:99:86:dc:9d:5a:bd:7f:cd:29:92:7b:bf:93:14:73:a7:49:
09:fd:62:e7:eb:7c:de:c8:8c:fe:bf:02:2f:af:4b:67:be:99:
5f:b7:ea:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:53:54 2024 by rpki-client on console-fra.rpki-client.org