Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/vGf0UYy5bKQj3Nl6y87oL9yRkns.roa
File: vGf0UYy5bKQj3Nl6y87oL9yRkns.roa (raw, json)
Hash identifier: iBeO8xlOTaY1XXa4tB+cqCQsOfPJhVJJijeMZVvQ3+U=
Subject key identifier: BC:67:F4:51:8C:B9:6C:A4:23:DC:D9:7A:CB:CE:E8:2F:DC:91:92:7B
Certificate issuer: /CN=540f4a1b92338b49ca63021219059ce570ff5964
Certificate serial: 01902B88F58FD660B124B6F52142548334C1
Authority key identifier: 54:0F:4A:1B:92:33:8B:49:CA:63:02:12:19:05:9C:E5:70:FF:59:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/vGf0UYy5bKQj3Nl6y87oL9yRkns.roa
Signing time: Tue 18 Jun 2024 13:28:34 +0000
ROA not before: Tue 18 Jun 2024 13:28:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5089
IP address blocks: 195.211.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 19:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2b:88:f5:8f:d6:60:b1:24:b6:f5:21:42:54:83:34:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540f4a1b92338b49ca63021219059ce570ff5964
Validity
Not Before: Jun 18 13:28:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc67f4518cb96ca423dcd97acbcee82fdc91927b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:af:25:97:35:63:37:ce:bb:da:01:fd:7f:d7:
13:ce:4b:98:76:57:73:4d:99:85:e5:87:81:4b:d4:
a6:25:c7:83:e5:27:cf:eb:fa:27:4e:47:c5:42:25:
29:3b:ed:87:1e:20:c7:2e:41:56:8d:1d:a9:04:ef:
d5:42:d5:f3:79:3d:1c:18:b5:8b:f7:aa:88:69:86:
4f:0b:9e:8c:27:07:0c:b9:63:b6:0a:8f:92:a0:c2:
d4:9d:3e:1f:89:3d:0d:08:01:af:53:5f:b1:76:b7:
a2:e2:b7:60:5b:80:b7:23:86:8d:d5:91:92:44:3c:
3e:c3:ee:5b:d1:8c:89:33:c8:ae:93:05:ce:43:4a:
44:9d:ff:70:ee:0e:57:f5:7e:27:c6:18:f6:c0:7b:
77:3c:44:37:70:ae:e2:78:af:d1:3c:77:67:43:68:
fc:a6:99:7e:57:cf:d0:f8:5d:18:d8:dc:61:cd:44:
a6:89:cd:02:1c:c3:10:f9:e1:d6:5a:7c:e8:ca:d0:
77:55:18:d1:13:9a:97:b4:cf:aa:cb:41:0e:3e:4e:
f8:5f:a9:10:f3:1d:94:88:04:ca:4d:cd:a5:22:a4:
da:3c:d2:e6:c3:d8:47:43:45:bd:f0:d8:bb:63:c2:
fa:86:3d:10:00:f7:4b:c9:b9:4c:d0:ac:96:78:53:
e9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:67:F4:51:8C:B9:6C:A4:23:DC:D9:7A:CB:CE:E8:2F:DC:91:92:7B
X509v3 Authority Key Identifier:
keyid:54:0F:4A:1B:92:33:8B:49:CA:63:02:12:19:05:9C:E5:70:FF:59:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/vGf0UYy5bKQj3Nl6y87oL9yRkns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.211.92.0/24
Signature Algorithm: sha256WithRSAEncryption
58:33:f6:77:28:00:ec:52:0a:32:26:ca:4b:92:ed:71:cf:77:
72:7e:74:7f:b0:bd:ff:02:54:c9:c6:44:ec:29:d3:68:00:fe:
51:ee:34:c0:6a:79:52:8c:d7:0d:a5:0e:82:47:d4:7e:f7:b5:
7a:38:af:db:a1:8e:94:fa:09:84:74:7a:39:d5:09:02:92:96:
2b:41:6e:a3:f5:42:8b:a8:98:7f:e9:57:c1:15:46:ee:c9:d1:
0f:d3:6d:e0:f3:6c:98:39:cb:30:4f:97:9d:8f:6d:88:63:8e:
49:6b:0b:fb:4c:78:21:68:b7:bc:ff:97:1d:0b:a6:1c:16:7a:
80:fd:c0:25:00:0c:80:23:c9:70:59:46:f7:08:8c:8d:e3:72:
0b:a3:73:6d:ec:24:44:68:2c:7c:e9:bd:02:01:42:6b:84:92:
b9:f7:69:89:fa:b7:ee:b7:7e:04:b8:57:f0:93:16:5a:ea:7f:
2d:8d:d0:8c:11:c2:cf:30:06:cd:13:9d:87:7a:ad:e9:43:b1:
bb:1b:20:63:78:fa:28:c6:34:1f:64:68:ef:ec:6e:51:e3:83:
ba:84:a4:ec:86:9e:cb:64:75:ad:49:19:c1:34:45:e4:2e:80:
e2:00:92:16:96:5b:ac:ec:0e:66:04:8c:83:ad:b6:9a:26:eb:
aa:94:3b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:28:47 2024 by rpki-client on console-ams.rpki-client.org