Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/vNcLSfjePXl3R6GpxfUkzjhlCUQ.roa
File: vNcLSfjePXl3R6GpxfUkzjhlCUQ.roa (raw, json)
Hash identifier: iI+w/RiaSGduazQDuOg4IY+3D7w26ZU7HplJc2OwJIY=
Subject key identifier: BC:D7:0B:49:F8:DE:3D:79:77:47:A1:A9:C5:F5:24:CE:38:65:09:44
Certificate issuer: /CN=1e0436dd698eba3eab5a92db1d64f2f314ed3116
Certificate serial: 018CC64B825361DB4D5D0E62B3240F30CE6B
Authority key identifier: 1E:04:36:DD:69:8E:BA:3E:AB:5A:92:DB:1D:64:F2:F3:14:ED:31:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/vNcLSfjePXl3R6GpxfUkzjhlCUQ.roa
Signing time: Mon 01 Jan 2024 18:31:26 +0000
ROA not before: Mon 01 Jan 2024 18:31:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12843
IP address blocks: 193.164.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 16:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:82:53:61:db:4d:5d:0e:62:b3:24:0f:30:ce:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e0436dd698eba3eab5a92db1d64f2f314ed3116
Validity
Not Before: Jan 1 18:31:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bcd70b49f8de3d797747a1a9c5f524ce38650944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2b:0d:78:73:7c:f8:13:f9:5c:32:ad:df:e7:
92:47:c3:6d:f1:bb:c5:c3:c2:10:08:a9:c7:64:7e:
90:fe:1b:eb:d6:8a:e7:80:e3:d0:d9:a7:d7:b4:67:
78:62:96:57:1f:63:43:8b:45:1d:a0:3f:cc:c1:b8:
5e:ee:df:74:25:a7:b1:28:09:30:88:db:6f:cb:8e:
f6:af:78:bb:d1:ec:57:02:17:73:05:30:e9:a1:5b:
4e:82:3a:c6:fd:ec:17:6b:a0:4a:de:4c:5b:b6:c2:
8b:e9:48:a2:16:40:6e:31:37:12:54:2c:b1:a1:8c:
69:da:39:45:0f:04:e6:da:b2:30:dd:51:7c:5d:15:
9c:b3:6a:b8:f6:ea:c1:84:6c:ee:46:a1:46:1f:e6:
54:53:b7:59:4a:6f:38:48:c1:af:b6:b9:e5:97:05:
9b:49:96:04:5e:76:4d:ec:c9:92:1b:ee:9e:08:56:
76:c0:05:12:99:9d:9f:ce:cc:d9:9f:cf:a2:47:41:
e4:e1:bc:31:30:37:f4:de:2e:b1:b9:40:74:d6:6b:
01:9a:0c:ff:60:01:2f:2b:5f:90:95:f3:f5:b4:59:
1a:2e:88:a7:ca:31:7e:00:36:c0:7b:55:f8:7f:94:
cb:4c:90:1a:06:d1:e9:df:27:3d:1c:ae:4b:97:62:
a2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D7:0B:49:F8:DE:3D:79:77:47:A1:A9:C5:F5:24:CE:38:65:09:44
X509v3 Authority Key Identifier:
keyid:1E:04:36:DD:69:8E:BA:3E:AB:5A:92:DB:1D:64:F2:F3:14:ED:31:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/vNcLSfjePXl3R6GpxfUkzjhlCUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.154.0/24
Signature Algorithm: sha256WithRSAEncryption
10:5a:4d:37:09:3c:f3:65:08:4e:6a:9f:a0:cb:75:a8:f1:81:
5e:ea:08:64:c1:f5:06:d9:f2:5a:19:7a:d2:0d:fe:52:d6:00:
e3:2c:14:ef:3a:4d:0a:de:d9:92:8d:7e:ed:cb:75:5a:8d:9e:
75:6c:eb:fc:67:f8:e2:f4:bc:7e:b9:db:9e:6f:10:da:14:17:
17:6f:a2:a0:1c:b9:a0:d2:4e:c2:0d:89:b1:b2:e6:11:4b:0f:
ee:7f:b8:5c:39:ca:33:6a:60:66:2c:5a:63:5b:ec:80:43:84:
a7:3d:5a:d9:a3:7a:d5:ee:0c:cc:3d:30:92:90:42:a1:05:14:
a4:a1:18:3a:de:01:2e:f9:92:bf:5e:9d:ff:84:9f:6b:a0:ca:
2d:5d:e2:a8:e6:27:11:62:52:8b:7b:21:a7:85:d9:12:72:10:
16:81:73:1e:d1:e4:57:96:08:77:e1:86:88:d7:e6:c5:6d:ea:
c2:e5:1f:6b:35:a4:e3:5f:07:c7:e8:54:c5:93:c4:4a:a6:71:
00:be:58:29:32:2e:cf:1f:c0:4e:b1:ca:7a:16:9d:b5:66:40:
7b:2a:5c:bd:b0:35:d1:d1:ed:2f:ea:de:b6:dc:de:32:9f:2d:
98:1c:3d:cd:a5:ef:28:0d:04:07:62:0a:40:c3:c1:b7:d7:de:
66:eb:65:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:09:26 2024 by rpki-client on console-ams.rpki-client.org