Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/vKYZDWfo7NtPz58RkJPTFJ0gUfE.roa
File: vKYZDWfo7NtPz58RkJPTFJ0gUfE.roa (raw, json)
Hash identifier: G0euUY/laBNM+h9Asd6akl+LCwYhJTBn27vItPxh7Rk=
Subject key identifier: BC:A6:19:0D:67:E8:EC:DB:4F:CF:9F:11:90:93:D3:14:9D:20:51:F1
Certificate issuer: /CN=b990c85cfa0ced5283634997e7a4aa8ce7836db6
Certificate serial: 018CC794FE3CC951F03BE7135D1ABEDC8C03
Authority key identifier: B9:90:C8:5C:FA:0C:ED:52:83:63:49:97:E7:A4:AA:8C:E7:83:6D:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZDIXPoM7VKDY0mX56SqjOeDbbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/vKYZDWfo7NtPz58RkJPTFJ0gUfE.roa
Signing time: Tue 02 Jan 2024 00:31:19 +0000
ROA not before: Tue 02 Jan 2024 00:31:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44302
IP address blocks: 92.61.112.0/20 maxlen: 20
92.61.118.0/24 maxlen: 24
217.27.208.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZDIXPoM7VKDY0mX56SqjOeDbbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:fe:3c:c9:51:f0:3b:e7:13:5d:1a:be:dc:8c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b990c85cfa0ced5283634997e7a4aa8ce7836db6
Validity
Not Before: Jan 2 00:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bca6190d67e8ecdb4fcf9f119093d3149d2051f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b5:44:6c:93:32:ac:4a:d7:07:bb:c0:97:da:
06:2e:43:9e:c4:50:1a:16:9b:17:65:f7:ce:49:18:
44:e5:1f:7f:eb:e2:12:39:32:f8:76:23:f1:44:c1:
23:2b:a1:b4:8a:85:74:a3:0a:4a:36:b0:58:71:e1:
1b:f0:d0:2d:a2:d6:f4:96:f1:d3:56:8d:d1:2d:3d:
8a:1b:c8:22:ab:b1:ae:b7:e0:47:9d:1f:fe:f8:5d:
fc:04:d3:5a:8d:fc:49:c9:6c:b5:c4:42:8f:12:c7:
23:90:cf:2d:0e:94:f9:ab:30:f8:dd:b6:99:37:0d:
d9:bd:1d:5d:a6:9f:b6:1b:d7:be:61:65:ba:73:3d:
3c:33:77:f8:64:5c:d3:ff:77:55:7d:c2:cf:d2:2e:
5b:a5:25:0a:0b:86:da:ed:1a:ed:eb:b8:c4:03:e9:
05:1d:d9:f8:94:1d:0c:bb:13:90:00:20:36:6c:54:
57:55:0e:cf:9b:e0:0a:57:b8:06:1d:6a:97:aa:16:
49:d6:54:3c:3a:5d:61:fd:c1:09:96:c8:6b:e9:38:
b7:8d:d9:7d:d2:ea:ce:00:94:49:1a:be:ff:0b:e7:
58:5c:74:cd:ef:2a:19:6f:f2:24:2d:10:ad:36:61:
02:e7:80:0f:fe:29:f5:79:ba:13:52:c2:5c:bf:30:
af:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A6:19:0D:67:E8:EC:DB:4F:CF:9F:11:90:93:D3:14:9D:20:51:F1
X509v3 Authority Key Identifier:
keyid:B9:90:C8:5C:FA:0C:ED:52:83:63:49:97:E7:A4:AA:8C:E7:83:6D:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZDIXPoM7VKDY0mX56SqjOeDbbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/vKYZDWfo7NtPz58RkJPTFJ0gUfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.112.0/20
217.27.208.0/20
Signature Algorithm: sha256WithRSAEncryption
38:5f:ef:0f:5f:dc:9d:f5:da:43:55:c5:a9:36:3d:a1:52:bb:
a7:f0:bc:45:d0:10:70:38:64:a3:c4:6e:25:4a:57:c2:28:eb:
4d:af:cb:11:ab:98:1f:92:dd:05:ba:ec:00:79:0b:5e:98:09:
ab:50:52:0f:f4:1a:91:83:50:54:6c:75:22:c1:b9:00:13:83:
4e:eb:68:f6:70:47:79:14:24:90:e5:0b:e7:65:c5:cb:7f:af:
07:bd:90:c1:d2:63:d7:8f:d6:40:e6:bb:09:5d:2b:1d:75:5a:
46:f5:9a:24:d3:72:b2:51:b2:92:96:4a:95:ac:d6:6f:0a:41:
36:03:a9:da:7c:05:84:a1:8f:73:08:37:ad:e1:ee:3f:01:16:
74:8a:e9:36:36:02:bb:78:b7:ce:25:75:1d:0b:e6:b6:49:66:
ce:46:e2:78:67:34:b8:83:39:5d:c8:de:2b:70:87:2b:ba:38:
55:73:6a:36:3d:c4:bb:af:ef:30:ab:9d:07:d2:28:dc:92:86:
e7:7c:25:80:39:e0:75:1d:4e:19:15:65:9f:b8:e0:55:3c:ff:
0d:ff:ba:85:03:86:05:96:45:5e:17:32:8c:bb:a8:6c:12:b7:
36:93:3b:56:56:0d:c3:4d:0a:69:f3:45:56:70:c0:78:51:23:
d6:96:8f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:30:45 2024 by rpki-client on console-fra.rpki-client.org