Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/vPvA_2ULMyG-XhiEsN1sEievIRY.roa
File: vPvA_2ULMyG-XhiEsN1sEievIRY.roa (raw, json)
Hash identifier: 14qdR3FyjtVC9jeP6BPyNcKkTgVzPjozbXNhlZLiPb8=
Subject key identifier: BC:FB:C0:FF:65:0B:33:21:BE:5E:18:84:B0:DD:6C:12:27:AF:21:16
Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Certificate serial: 01929E32B849F602314E2B9D0D4DDFF29332
Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/vPvA_2ULMyG-XhiEsN1sEievIRY.roa
Signing time: Fri 18 Oct 2024 05:56:16 +0000
ROA not before: Fri 18 Oct 2024 05:56:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3170
IP address blocks: 45.14.112.0/24 maxlen: 24
45.95.184.0/24 maxlen: 24
147.189.141.0/24 maxlen: 24
193.8.173.0/24 maxlen: 24
2a0e:c80:1::/48 maxlen: 48
2a0e:c80:2::/48 maxlen: 48
2a0e:3840:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:9e:32:b8:49:f6:02:31:4e:2b:9d:0d:4d:df:f2:93:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Validity
Not Before: Oct 18 05:56:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bcfbc0ff650b3321be5e1884b0dd6c1227af2116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:22:82:6d:12:93:9e:18:51:b3:57:93:32:74:
6a:6c:67:84:72:51:95:86:b7:66:d8:84:a8:44:bd:
2a:29:21:49:09:93:01:dd:9c:96:b9:5b:dc:3a:63:
37:9c:b9:71:63:92:57:fa:ab:26:8b:9f:cd:84:58:
57:8a:40:89:71:c4:7e:a0:dd:a1:f1:65:a9:f3:9c:
20:b0:cc:e1:dc:fc:a0:c7:24:22:f0:92:2f:74:21:
24:6c:d4:44:cb:bf:2b:d6:3b:fe:ce:a4:4a:26:dc:
69:1a:71:e3:f7:e4:ab:63:b2:1b:4a:5f:cf:e7:15:
f2:81:4e:de:90:74:fd:35:12:03:1a:aa:a2:93:ce:
ce:01:c5:fa:78:b0:9d:db:ce:99:2e:4a:be:2a:3b:
4d:8e:74:1e:3b:56:a1:34:a4:bb:c3:22:9a:e6:0b:
a3:99:2d:38:2b:5a:0e:c3:8c:3a:22:8f:19:6d:aa:
53:26:93:30:7a:12:a3:0a:2e:1f:22:8d:43:84:53:
fe:df:7f:a6:bd:a8:0f:e7:cf:39:c1:7d:31:a1:86:
87:5e:88:1e:4d:f8:39:f0:05:e7:10:9a:ab:21:93:
0c:67:3d:b9:f8:5f:ff:e2:8d:9a:5e:64:60:3d:7d:
09:6f:ca:0f:b1:2b:85:1d:22:a6:92:1b:84:b2:cd:
4e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:FB:C0:FF:65:0B:33:21:BE:5E:18:84:B0:DD:6C:12:27:AF:21:16
X509v3 Authority Key Identifier:
keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/vPvA_2ULMyG-XhiEsN1sEievIRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.112.0/24
45.95.184.0/24
147.189.141.0/24
193.8.173.0/24
IPv6:
2a0e:c80:1::-2a0e:c80:2:ffff:ffff:ffff:ffff:ffff
2a0e:3840:1::/48
Signature Algorithm: sha256WithRSAEncryption
10:5c:22:7a:81:31:21:fe:df:16:d8:18:e2:ba:78:4e:d7:20:
9e:dd:d4:76:6f:ef:2b:f7:67:e0:bd:10:22:9c:73:dd:3c:b5:
73:76:e5:30:ef:f0:1c:bb:ab:35:c1:93:f5:a3:ad:c5:30:de:
92:81:c3:67:f5:6f:16:99:1f:7e:c6:5f:db:f7:aa:56:71:e4:
69:32:26:3c:2a:fa:1b:b9:11:c7:a3:bb:bb:f5:66:07:02:38:
62:4e:8d:b9:c8:66:37:30:e1:f7:24:e0:ca:86:05:09:50:f8:
49:52:92:e7:41:d7:86:56:a9:04:c2:71:7f:32:ff:52:02:a4:
13:fb:6d:4b:3c:e7:ef:ad:6b:b7:d6:5a:b3:97:c0:43:68:7f:
af:fe:2a:07:0e:c7:33:f1:25:69:e8:4a:58:70:16:e6:7a:49:
93:92:23:61:64:d2:0d:f8:ee:b1:21:19:3a:f3:42:98:fd:1c:
f7:4d:8d:c2:73:43:e1:49:ad:61:48:c0:e2:d4:21:d2:cf:dd:
fe:db:a8:60:64:8f:96:af:99:87:18:1b:e0:9f:58:f6:52:b1:
df:8e:6c:60:e8:0b:ac:54:6f:5c:59:a4:45:17:9b:a2:40:fc:
a4:cf:30:d6:8f:1d:aa:cf:3b:a8:57:00:c7:56:1c:1a:8b:4d:
62:c5:bf:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:52:04 2024 by rpki-client on console-ams.rpki-client.org