Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/VGgYHLDz44vBVDEX2hq_7MYlBhQ.roa
File: VGgYHLDz44vBVDEX2hq_7MYlBhQ.roa (raw, json)
Hash identifier: jJ1jXPFW/wPpNt2wlD7nUEhaIRIRUXpAXcsSlL8njLo=
Subject key identifier: 54:68:18:1C:B0:F3:E3:8B:C1:54:31:17:DA:1A:BF:EC:C6:25:06:14
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019427B6EE4DAFCA4B2DAAA9E6A5A8F59EAA
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/VGgYHLDz44vBVDEX2hq_7MYlBhQ.roa
Signing time: Thu 02 Jan 2025 15:51:27 +0000
ROA not before: Thu 02 Jan 2025 15:51:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 267507
IP address blocks: 109.176.16.0/24 maxlen: 24
212.38.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:ee:4d:af:ca:4b:2d:aa:a9:e6:a5:a8:f5:9e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 2 15:51:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5468181cb0f3e38bc1543117da1abfecc6250614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3c:af:2c:fa:ff:b2:2f:70:43:1b:47:2f:9a:
23:9c:3c:c1:79:47:70:48:49:90:c0:7e:73:eb:a6:
c7:82:31:22:c0:dc:16:be:7c:2a:54:60:c5:f4:e5:
04:a8:3f:ae:51:4c:eb:2c:63:c7:91:ed:38:e5:44:
f5:cb:f9:4e:8e:36:9d:a4:f4:e9:73:86:59:d1:c4:
40:db:66:5d:27:92:dd:7c:0f:32:04:84:99:7d:f9:
ac:2b:1a:aa:c0:c9:88:9a:1a:49:a0:33:f1:7d:c5:
c3:b6:a8:a6:da:5b:2f:7b:55:fc:c5:5b:fe:6b:ae:
e7:71:12:6d:db:9b:1c:44:bb:c1:3f:e2:1e:ed:37:
20:50:94:7c:b8:d1:3d:f8:9e:c7:d9:0d:1e:ce:8a:
e4:5f:ce:ac:b8:bd:39:f8:aa:6c:77:08:fe:71:8c:
dc:88:31:23:62:66:b4:f4:af:d1:bd:6f:84:b0:c9:
bd:7c:d0:37:b0:61:4b:70:f0:13:57:3c:7e:87:75:
b7:ab:42:11:8a:2a:14:92:7f:b5:52:8f:57:35:3b:
46:23:e8:12:8f:c8:76:57:3b:e0:fa:fd:c5:a8:4a:
ca:a5:6b:bf:92:2e:75:e3:58:7e:df:4a:79:38:2f:
3e:ef:e9:b7:b0:97:7b:e4:ae:85:36:06:2d:40:82:
7f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:68:18:1C:B0:F3:E3:8B:C1:54:31:17:DA:1A:BF:EC:C6:25:06:14
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/VGgYHLDz44vBVDEX2hq_7MYlBhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.16.0/24
212.38.84.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:96:f6:a6:fd:3f:ef:66:b5:1a:06:66:6a:cf:24:79:b9:47:
b9:61:11:75:21:5d:c8:4b:1c:4d:25:3f:78:72:15:73:df:75:
7d:69:06:f6:ab:1b:86:9a:57:1a:c4:94:e1:11:1b:2f:b4:39:
63:55:1b:bd:3c:40:e5:58:f2:cf:4c:61:2c:1b:95:3e:97:24:
b9:e6:44:73:62:10:c6:a3:dd:9f:db:27:cc:c5:8d:16:30:2d:
cf:02:5f:e7:5c:e8:aa:eb:65:59:6c:a7:98:b4:5a:28:c4:c3:
98:9b:d8:e4:98:57:19:da:36:e0:dd:22:c2:09:6b:fe:92:93:
63:fc:2f:85:5a:84:3a:ef:c2:8c:ee:de:ad:35:3a:db:94:f2:
9d:ae:61:45:b0:fc:fc:0d:14:23:e1:7b:fa:1e:80:d2:6d:89:
6c:7c:9c:c8:5c:78:c0:6a:a6:e6:83:27:32:d4:55:a2:b1:1a:
17:6c:bf:ed:2c:c8:02:39:0c:66:f6:16:bb:bb:2e:49:22:79:
5a:c3:6c:d8:16:51:0a:d6:f1:f9:58:71:cb:a5:b5:79:3d:21:
d9:9f:26:90:a1:82:e1:23:cd:9b:68:f3:d7:94:0e:b8:9f:42:
13:4f:63:29:bd:7a:32:51:ec:cc:2d:34:73:a5:bf:26:a9:f7:
65:d7:19:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:39:05 2025 by rpki-client