Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/vP271nqs3TdY1QBeRpPbKlakKj4.roa
File: vP271nqs3TdY1QBeRpPbKlakKj4.roa (raw, json)
Hash identifier: fSWAV/B4A9nsV8oVDrqA6fOrxwD9yWDXjEP1rLKvsDs=
Subject key identifier: BC:FD:BB:D6:7A:AC:DD:37:58:D5:00:5E:46:93:DB:2A:56:A4:2A:3E
Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Certificate serial: 018CC5DC850E6052E9C335C4591F05C8B2B3
Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/vP271nqs3TdY1QBeRpPbKlakKj4.roa
Signing time: Mon 01 Jan 2024 16:30:12 +0000
ROA not before: Mon 01 Jan 2024 16:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20454
IP address blocks: 176.111.218.0/24 maxlen: 24
147.189.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:85:0e:60:52:e9:c3:35:c4:59:1f:05:c8:b2:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Validity
Not Before: Jan 1 16:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bcfdbbd67aacdd3758d5005e4693db2a56a42a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7b:ca:b9:e3:85:8d:a7:17:ca:4f:95:2f:5c:
57:a3:76:2b:d6:3c:ca:b2:6e:63:07:f7:0f:72:fc:
d5:fc:b5:8e:42:cb:93:ff:7c:6b:bb:91:67:64:f1:
3e:84:18:6d:d7:c1:ac:4b:46:5b:a8:8a:8b:f7:2b:
4b:c4:b2:14:6d:7e:44:5b:e3:1b:52:6d:49:e8:97:
3f:05:7f:0e:e2:3f:d7:02:a2:38:1d:62:39:b4:26:
a7:46:b0:23:10:91:36:a2:e4:a9:6a:78:66:59:13:
8c:61:5b:1a:de:f9:b1:55:bf:38:7a:56:f7:ba:55:
ed:a6:81:84:8f:a6:34:99:9b:21:17:c4:7c:44:89:
7d:a2:fe:13:9f:c4:02:33:13:de:d1:31:31:fc:cd:
88:09:0d:50:d1:33:af:77:a2:1e:c4:ee:e2:b1:90:
b3:b8:23:72:9a:c0:b9:3f:28:9e:ad:0a:a6:eb:35:
2a:01:7d:27:5f:ba:13:27:2a:b7:de:30:a7:4b:5d:
79:b8:ac:d1:60:2a:a3:bd:00:99:d3:0b:12:80:0f:
5c:21:3f:87:bb:b3:8e:4c:b6:5d:8a:e7:13:4a:3e:
43:b9:3a:61:e6:cf:ef:69:bf:26:71:8d:40:0f:b2:
f3:48:de:e2:ea:48:24:fc:5b:9d:2b:be:f1:0a:4e:
4b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:FD:BB:D6:7A:AC:DD:37:58:D5:00:5E:46:93:DB:2A:56:A4:2A:3E
X509v3 Authority Key Identifier:
keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/vP271nqs3TdY1QBeRpPbKlakKj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.129.0/24
176.111.218.0/24
Signature Algorithm: sha256WithRSAEncryption
76:10:31:0e:72:5b:e9:79:58:59:33:60:4e:00:90:f2:40:bd:
db:65:25:29:35:41:9b:0a:71:4f:46:bc:7f:a9:93:9e:cb:23:
6e:34:67:f5:1f:a7:3e:f2:05:fe:21:5a:d7:fd:aa:54:55:89:
d4:c7:1c:30:10:d4:b6:3a:08:6b:3a:76:ba:5b:0f:a6:e8:97:
df:7b:43:7f:fb:55:3f:e4:02:36:4e:10:c1:5a:c9:da:01:c5:
a9:cf:25:6c:4c:0e:bd:f6:fa:a5:b3:46:cc:7c:c3:59:21:d5:
47:89:bb:89:2e:f3:09:e2:24:e4:83:03:0b:08:a1:7a:32:96:
c2:9a:bb:93:88:36:c9:c4:37:77:81:68:70:30:c8:63:ba:24:
65:8a:e0:a5:ed:65:32:92:eb:f6:4e:61:4d:c5:0d:95:a1:54:
b7:dc:0e:08:39:ca:f6:2e:6b:13:fe:cb:70:dd:5f:23:9b:88:
fc:dc:85:ed:49:6e:70:41:19:48:50:1c:19:32:93:f1:62:d5:
15:28:3d:1b:44:4a:91:c8:b2:5e:e5:3e:15:22:29:d4:3b:3f:
41:0b:f2:f7:31:9a:ff:e7:92:89:3e:d8:a1:c2:cc:ed:ce:52:
a2:1a:0a:69:83:f4:17:63:9a:fd:77:ba:cb:93:9c:e2:84:fa:
94:40:e8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 07:49:26 2024 by rpki-client on console-fra.rpki-client.org