Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/DeWQi8fGOQPLD_Z6GSrdd1R6whA.roa
File: DeWQi8fGOQPLD_Z6GSrdd1R6whA.roa (raw, json)
Hash identifier: 1FmwOrKKTAWGNC4TPj466Fc/1lw0A/rt+iYe0l3R6r4=
Subject key identifier: 0D:E5:90:8B:C7:C6:39:03:CB:0F:F6:7A:19:2A:DD:77:54:7A:C2:10
Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial: 018CC6B8949D7C173E436F270A75E5F8DDB6
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/DeWQi8fGOQPLD_Z6GSrdd1R6whA.roa
Signing time: Mon 01 Jan 2024 20:30:34 +0000
ROA not before: Mon 01 Jan 2024 20:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209096
IP address blocks: 80.249.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 18:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:94:9d:7c:17:3e:43:6f:27:0a:75:e5:f8:dd:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
Validity
Not Before: Jan 1 20:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0de5908bc7c63903cb0ff67a192add77547ac210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:06:3c:87:2e:c3:69:85:e9:d0:55:df:78:ef:
52:2d:ee:3e:34:91:30:37:3d:eb:1c:ed:ab:6e:c1:
b9:d1:31:41:ab:1f:9b:46:90:78:b1:ed:24:a1:44:
e1:b7:90:f8:09:75:fd:88:ac:af:e5:6a:69:34:a3:
e5:73:1d:c6:c9:a2:c2:e5:37:9c:a4:db:43:01:e8:
ba:43:9a:97:ae:59:59:47:06:64:05:c2:c6:b7:30:
59:19:ea:1c:16:9e:91:2a:65:ea:ed:8a:bc:63:45:
78:37:9e:c0:8e:f8:86:c0:14:12:a3:4f:52:b7:58:
4e:40:11:1c:d0:13:06:2c:63:d8:e7:bc:59:a6:59:
31:0d:4f:ea:87:6c:c4:29:ec:11:dc:23:13:10:1d:
c2:29:27:bf:8e:61:96:35:c2:e1:a5:c5:57:04:cd:
40:87:72:0d:68:71:a1:5b:f0:4e:1f:17:02:fa:6c:
d5:24:73:98:b2:b6:8a:b0:32:6b:d5:15:d5:03:3c:
e3:d3:8e:75:c6:bc:b1:67:f6:04:8e:ca:0e:66:0c:
8e:1a:5a:03:57:5b:b7:74:71:05:3c:00:12:56:bf:
34:56:4d:a2:cc:9d:25:98:c5:99:7b:e0:45:9e:83:
f7:3a:3b:1a:16:a6:69:a8:86:b6:b4:fe:7f:cf:cb:
6e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E5:90:8B:C7:C6:39:03:CB:0F:F6:7A:19:2A:DD:77:54:7A:C2:10
X509v3 Authority Key Identifier:
keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/DeWQi8fGOQPLD_Z6GSrdd1R6whA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.249.189.0/24
Signature Algorithm: sha256WithRSAEncryption
87:5f:7d:22:ca:32:c5:ea:d7:70:a7:6b:ff:e0:31:92:b2:fa:
75:98:20:ea:59:e4:97:3e:03:b3:fc:f9:2e:4b:bd:34:33:f4:
40:82:72:53:2e:77:93:17:7f:d1:51:2d:6c:57:c6:74:5a:3f:
38:71:28:24:b4:52:17:0c:2d:de:da:ce:cd:dc:e8:fc:64:9d:
61:07:81:2c:94:2c:ee:9a:fc:60:dc:bf:60:36:27:55:f9:9c:
78:02:56:2e:cb:04:c7:bf:a8:91:2c:87:a4:e7:92:21:58:20:
18:4c:6b:55:9a:93:61:c2:79:9d:9c:fd:b8:3d:4f:0e:66:f6:
d8:2c:cb:65:8f:c8:f7:b8:4f:db:6c:d1:02:5b:16:52:84:ae:
cd:f9:ba:a0:23:1f:be:93:11:4e:b3:32:08:ab:80:4e:84:17:
6c:9e:74:e3:6c:03:43:d2:62:5f:ff:2b:0b:ed:36:c3:f3:33:
c4:f1:6b:dd:b9:08:90:30:e7:df:19:60:db:d5:8e:05:9c:56:
fe:71:17:c6:d9:3d:57:01:95:64:b8:7d:19:e0:3c:93:0f:c9:
27:ca:ff:23:b8:5f:7d:2a:c7:46:ff:06:ef:fb:f1:5e:a0:aa:
d7:b9:9e:7e:5b:83:30:8e:8e:05:c1:1c:c5:2c:2e:4e:34:fc:
96:fa:bf:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:44:27 2024 by rpki-client on console-fra.rpki-client.org