Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/ABpARDYWZArYvzeAcZrXSO_c3tU.roa
File: ABpARDYWZArYvzeAcZrXSO_c3tU.roa (raw, json)
Hash identifier: 0Ma7m6wC6jeWCVs6ntWPlHCG5KZpiOXXN7uoTSPFU5w=
Subject key identifier: 00:1A:40:44:36:16:64:0A:D8:BF:37:80:71:9A:D7:48:EF:DC:DE:D5
Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial: 018CC6B895F2DD24B925B7968F536E7063D3
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/ABpARDYWZArYvzeAcZrXSO_c3tU.roa
Signing time: Mon 01 Jan 2024 20:30:34 +0000
ROA not before: Mon 01 Jan 2024 20:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216011
IP address blocks: 94.125.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 18:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:95:f2:dd:24:b9:25:b7:96:8f:53:6e:70:63:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
Validity
Not Before: Jan 1 20:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=001a40443616640ad8bf3780719ad748efdcded5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5a:65:03:64:75:53:f3:4f:c7:36:dc:f4:7c:
a7:2c:15:bb:77:93:a3:5f:2b:f6:7c:47:9e:e0:99:
1d:a7:10:a0:f0:0a:ec:e5:0b:fa:ff:25:6d:f0:bb:
ba:51:0b:6d:e9:ef:80:f6:e4:ae:f6:7d:fa:1f:44:
aa:33:ef:9a:87:04:16:f6:fb:60:6c:57:08:94:ee:
ed:b0:a5:44:7a:b4:e5:6c:e6:1b:ed:00:33:e3:c3:
cc:ed:2b:b5:5d:98:19:68:c9:aa:9e:a5:c3:de:c3:
c7:55:b7:9a:37:59:0e:c4:14:e4:9f:88:6d:ca:96:
5e:37:2b:d5:cf:c4:c9:ae:e7:47:4c:58:cb:78:a5:
62:91:70:0a:00:d6:1e:92:12:08:89:f3:13:88:cb:
d2:6a:31:aa:68:c7:a2:8b:38:10:94:5f:36:6d:e7:
c6:76:08:4e:65:98:15:50:58:5e:a6:5a:f0:80:c0:
9f:5f:71:14:4c:e0:ce:dd:d7:8e:13:31:b8:f9:f5:
9f:d0:9c:4c:cb:25:f7:9d:13:17:06:f6:fa:e8:88:
e9:39:5a:02:26:20:83:bd:6d:91:25:29:fb:4f:7a:
f9:04:6b:6c:4f:28:e8:90:18:d8:5a:44:ae:0a:7c:
95:89:a4:fa:af:d1:3e:ab:46:eb:70:26:1d:40:4f:
4e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:1A:40:44:36:16:64:0A:D8:BF:37:80:71:9A:D7:48:EF:DC:DE:D5
X509v3 Authority Key Identifier:
keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/ABpARDYWZArYvzeAcZrXSO_c3tU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.125.12.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:76:63:99:4d:05:3b:2b:c5:6b:76:3b:26:3f:91:ce:de:28:
30:62:43:42:af:18:63:50:3c:e4:89:45:1b:84:5f:4c:9e:fc:
de:55:16:ad:c8:cb:8f:99:c3:7e:e3:17:fe:0d:26:c0:bc:63:
5a:c6:76:e2:3f:24:86:e3:25:0c:60:f6:75:9b:7a:63:6c:3d:
ee:85:25:6d:19:a8:cf:1e:44:7a:dd:8b:b5:c1:b9:b0:47:64:
02:5e:c1:d7:0d:6b:e3:32:02:a0:f8:a7:9d:38:bf:c8:ed:ba:
d7:3d:3e:6f:50:85:53:9d:ff:41:2f:ac:d1:21:fd:21:49:b7:
64:f7:53:71:f5:09:eb:40:f8:e2:ae:b5:9b:9c:0b:35:b1:c0:
f6:c9:90:b8:d3:80:51:0b:c1:88:08:ac:b4:8e:4a:65:88:1d:
b4:50:ce:d6:4b:18:8c:fa:4a:c7:d4:c4:ad:30:d9:2e:34:b2:
b0:ea:4b:65:7e:d6:3a:39:b1:91:bb:90:6f:35:da:d3:9f:79:
78:c9:13:0c:77:f1:26:38:2e:ba:88:f8:a9:b5:7c:38:05:3b:
0d:4f:32:e5:91:d2:71:c1:d3:83:f5:7a:3d:d5:96:69:45:fe:
92:aa:5e:17:eb:30:fc:90:76:0f:6e:99:31:f4:6c:c0:19:5d:
ed:c8:d3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:44:27 2024 by rpki-client on console-fra.rpki-client.org