Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/vRSxuOq93VCNb2JJcSH1g9WIADM.roa
File: vRSxuOq93VCNb2JJcSH1g9WIADM.roa (raw, json)
Hash identifier: i/HFS6Hhrcp/wnnM+3QnNmz2BTAbI0wk01TZaM02L6Y=
Subject key identifier: BD:14:B1:B8:EA:BD:DD:50:8D:6F:62:49:71:21:F5:83:D5:88:00:33
Certificate issuer: /CN=84abf0c981701aba97e4fcd0bed4e4cdb8692047
Certificate serial: 018CC94DE548D74F8DEBD6DDB1025570D811
Authority key identifier: 84:AB:F0:C9:81:70:1A:BA:97:E4:FC:D0:BE:D4:E4:CD:B8:69:20:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/vRSxuOq93VCNb2JJcSH1g9WIADM.roa
Signing time: Tue 02 Jan 2024 08:32:54 +0000
ROA not before: Tue 02 Jan 2024 08:32:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12130
IP address blocks: 109.71.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 11:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:e5:48:d7:4f:8d:eb:d6:dd:b1:02:55:70:d8:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84abf0c981701aba97e4fcd0bed4e4cdb8692047
Validity
Not Before: Jan 2 08:32:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd14b1b8eabddd508d6f62497121f583d5880033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:37:89:f1:9c:9f:a6:c2:12:4e:5b:25:71:d2:
4e:3b:97:fa:81:48:c4:24:6d:95:14:7e:23:a1:13:
76:be:77:b8:85:16:07:d5:c3:4e:cc:da:51:fc:75:
17:1a:78:3a:78:28:c7:00:8a:78:a2:cc:de:e7:a8:
73:76:cc:0d:be:97:6e:44:f9:0c:00:10:5e:ef:03:
a9:c6:85:7c:ab:56:04:89:13:a4:78:a2:80:11:65:
45:e9:6e:76:43:d0:62:b5:0a:3e:37:63:d0:6a:1f:
b8:6a:a9:0e:dd:3f:a4:01:fd:a5:9f:23:61:2b:eb:
77:0b:3c:11:f1:9b:76:cf:34:d2:3a:00:22:95:38:
d5:7d:d6:a7:e7:fd:e1:fa:5e:5a:f2:e0:7a:0d:43:
ca:aa:2c:8b:b2:ab:7f:72:b5:5a:fa:fa:cb:c6:e9:
86:3b:48:2c:8d:70:a8:a5:93:ca:14:5a:7f:c9:93:
3b:3a:41:fb:71:25:03:18:71:ed:df:43:c7:cd:ba:
38:b4:b7:8f:87:00:10:36:dc:c1:f5:a8:82:ec:9c:
d0:23:57:16:87:43:71:ae:60:f4:cb:b9:3a:83:11:
1b:af:3a:3e:41:1d:14:a8:04:cc:40:5f:3a:aa:38:
22:f4:f6:ef:9d:95:0f:17:25:d9:60:6f:5e:8c:16:
cc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:14:B1:B8:EA:BD:DD:50:8D:6F:62:49:71:21:F5:83:D5:88:00:33
X509v3 Authority Key Identifier:
keyid:84:AB:F0:C9:81:70:1A:BA:97:E4:FC:D0:BE:D4:E4:CD:B8:69:20:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/vRSxuOq93VCNb2JJcSH1g9WIADM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.71.152.0/22
Signature Algorithm: sha256WithRSAEncryption
80:b9:db:22:24:5c:6e:cf:05:f1:e6:eb:de:3b:7b:a1:cc:20:
a9:25:31:59:23:5a:78:c5:b0:f4:5a:28:8c:65:af:eb:84:b0:
91:44:93:5e:cd:18:7f:78:57:42:ca:87:39:8e:92:79:30:8b:
fc:84:88:64:39:74:c6:95:c8:f2:f8:50:2a:09:5a:eb:1b:49:
21:07:b5:cc:82:fb:09:c6:69:ae:61:42:5f:ee:e7:4e:03:1a:
8c:f0:cc:c8:a7:45:45:c9:93:70:00:0c:96:77:95:ca:32:07:
d1:2b:ae:75:e0:8e:1c:50:5c:08:45:7a:00:87:db:2b:9b:e3:
10:a4:89:f6:59:88:76:74:e1:9a:ca:8a:dd:55:4d:fd:8c:f2:
a1:fd:cb:47:de:e5:c9:22:48:54:f5:22:24:84:30:fb:68:b5:
d6:16:b5:3e:b5:2a:4d:db:ea:0e:07:b5:45:85:ff:09:78:36:
7c:ee:92:d1:0c:df:9c:43:5b:ba:bf:bb:f2:81:e6:7a:5f:70:
cc:ee:ed:f7:a4:43:b4:09:22:fd:0e:7c:8c:bc:ff:21:06:02:
8c:46:f6:a2:28:eb:ac:a0:5b:ea:83:0c:00:81:4a:24:6d:07:
b6:19:d2:56:73:d1:3c:61:99:12:cc:3d:b7:bd:14:19:58:9f:
00:09:f2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:55:13 2024 by rpki-client on console-ams.rpki-client.org