Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/vLMYji4t9lMqbWBxvsrmUytVq40.roa
File: vLMYji4t9lMqbWBxvsrmUytVq40.roa (raw, json)
Hash identifier: 2Z/TWi4AlTlTW8SMW+vMMwbg4aW9xsbGpwKcNzOTZWU=
Subject key identifier: BC:B3:18:8E:2E:2D:F6:53:2A:6D:60:71:BE:CA:E6:53:2B:55:AB:8D
Certificate issuer: /CN=bbf4e1fdb424a9120223b3a75c6ccc31b6f6224a
Certificate serial: 018EF659D3F34CFC73AAEA74888111444399
Authority key identifier: BB:F4:E1:FD:B4:24:A9:12:02:23:B3:A7:5C:6C:CC:31:B6:F6:22:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/vLMYji4t9lMqbWBxvsrmUytVq40.roa
Signing time: Fri 19 Apr 2024 12:34:25 +0000
ROA not before: Fri 19 Apr 2024 12:34:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41917
IP address blocks: 193.176.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f6:59:d3:f3:4c:fc:73:aa:ea:74:88:81:11:44:43:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf4e1fdb424a9120223b3a75c6ccc31b6f6224a
Validity
Not Before: Apr 19 12:34:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bcb3188e2e2df6532a6d6071becae6532b55ab8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:98:d5:3c:ad:d7:64:f2:62:77:b4:da:4d:e9:
a7:90:c9:5b:dc:29:4e:3e:c6:f3:3c:d0:c8:ed:44:
36:b0:ff:f3:dc:2f:96:33:bc:53:84:d3:3a:3e:a0:
2e:69:95:ea:69:03:b9:a2:5a:5e:86:d3:3a:e4:37:
09:28:90:6f:d0:b4:6e:b4:57:17:86:7f:13:60:e9:
3e:58:73:ea:7a:84:40:8f:ab:e1:5f:c0:55:7d:82:
40:56:ff:99:93:29:82:0c:6e:a8:b5:cb:d8:11:60:
7c:c4:07:7e:4b:d8:53:9d:31:ac:76:41:76:b2:2d:
df:fa:7b:7e:80:37:01:97:ff:73:91:66:20:b0:b4:
0d:47:72:8e:8c:dc:59:29:35:df:81:a2:fc:c1:73:
73:f8:ed:a5:40:9b:95:da:66:29:90:cc:01:4f:a0:
85:c0:71:41:aa:5f:f1:10:15:38:97:4b:df:6e:db:
01:e2:9f:a9:9d:42:61:f9:37:96:ce:b6:17:34:f6:
77:87:a9:91:30:ea:a8:9e:dd:b3:e0:45:a4:6b:ea:
8a:9e:b0:75:fa:d9:b4:f7:e4:af:3d:90:97:c4:95:
73:e7:49:b1:38:6b:6c:a1:a0:e4:a9:87:a4:ba:e0:
e1:05:a6:fb:b2:1d:79:52:ea:68:37:2b:5e:64:df:
59:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B3:18:8E:2E:2D:F6:53:2A:6D:60:71:BE:CA:E6:53:2B:55:AB:8D
X509v3 Authority Key Identifier:
keyid:BB:F4:E1:FD:B4:24:A9:12:02:23:B3:A7:5C:6C:CC:31:B6:F6:22:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/vLMYji4t9lMqbWBxvsrmUytVq40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.2.0/24
Signature Algorithm: sha256WithRSAEncryption
90:a7:4a:f5:9b:b4:ed:2d:80:ea:a7:80:19:32:53:63:18:ee:
7b:3d:d1:d5:6e:f9:7e:a9:76:5a:37:5c:7f:f9:de:c2:9c:52:
11:56:2d:71:78:b9:4b:85:ff:54:1b:3a:ca:10:82:3a:c5:46:
de:a0:b7:36:70:e9:89:c1:75:8c:be:6f:a7:72:e6:fc:1c:47:
b2:6e:fe:e8:fa:93:25:7b:14:27:a6:24:de:af:2d:e8:ae:64:
a5:f0:ed:23:f4:d5:7d:ad:67:02:f6:4a:52:c4:02:fc:10:8f:
26:64:4e:07:48:c8:ab:bf:a1:5d:28:f5:e9:4a:3b:e7:93:81:
65:a3:0b:26:23:48:5f:0a:ab:46:5e:21:0d:4d:ae:89:b7:6f:
a9:53:d6:cd:9c:ee:51:27:20:f8:a0:4a:7c:5e:8e:1a:af:7e:
b4:5b:b6:f9:cf:76:68:1c:d0:f9:56:60:fe:8d:08:1c:70:d8:
cd:84:1a:4c:a5:38:e8:da:ef:37:32:aa:38:3b:a0:52:02:e7:
cc:e5:30:68:9c:f0:21:73:05:31:b0:92:88:d3:01:84:e7:ad:
48:c6:8a:1c:6f:94:0b:bf:af:ac:6c:bd:c2:81:b8:8b:73:70:
1c:bd:fd:93:1d:94:79:48:2a:22:41:15:5d:92:d5:d6:28:56:
ce:34:5c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 21:06:04 2024 by rpki-client on console-fra.rpki-client.org