Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/VJdml4En6wXg6aLh_Wvnv8qDguE.roa
File: VJdml4En6wXg6aLh_Wvnv8qDguE.roa (raw, json)
Hash identifier: yg7+AwIMPfMAF8z9ZsFdi3y+4OSdBDbg5TD0LZD1w3c=
Subject key identifier: 54:97:66:97:81:27:EB:05:E0:E9:A2:E1:FD:6B:E7:BF:CA:83:82:E1
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 0192BEC383525FF19F5A44CF6702BA3244CA
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/VJdml4En6wXg6aLh_Wvnv8qDguE.roa
Signing time: Thu 24 Oct 2024 13:42:16 +0000
ROA not before: Thu 24 Oct 2024 13:42:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60544
IP address blocks: 62.76.205.0/24 maxlen: 32
194.226.244.0/23 maxlen: 32
195.209.149.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:be:c3:83:52:5f:f1:9f:5a:44:cf:67:02:ba:32:44:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Oct 24 13:42:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=549766978127eb05e0e9a2e1fd6be7bfca8382e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:47:e4:d4:7f:61:7e:4d:0e:0e:55:ca:35:89:
8a:33:b6:cd:24:89:90:54:d5:4f:53:6f:b9:03:ad:
13:b7:eb:b1:64:e2:86:69:d4:68:be:55:93:6f:8a:
9f:21:57:ca:f7:40:3f:cb:cf:73:56:39:7b:46:74:
61:d9:87:95:85:26:2b:72:82:2c:b8:8f:1a:a4:06:
41:d5:33:1a:fd:23:e5:61:36:b1:c1:69:77:45:5b:
3a:3b:58:58:44:b0:09:cc:df:45:20:cd:12:17:3d:
c7:1e:6f:49:3f:03:18:87:0f:fe:06:d8:2e:31:3a:
67:d2:13:e9:f6:af:69:5c:a3:8e:9e:09:f4:f9:54:
d3:90:aa:ca:22:eb:5e:97:3a:99:71:7b:14:2a:04:
a4:89:ce:6b:3f:d8:95:e5:90:4c:4e:fa:92:72:70:
d1:7f:ce:87:cf:1c:f0:ec:e1:00:18:65:23:12:57:
1f:39:cf:7a:58:1f:0f:a7:1b:64:00:73:79:29:81:
5f:38:34:e7:69:f7:27:15:d4:e9:b3:76:6b:05:d4:
8b:f4:88:0a:e2:1e:1f:8c:df:2a:f5:e4:b3:8f:13:
b0:6b:35:38:63:7e:80:33:d9:ea:12:da:84:e4:6e:
8b:4c:f9:34:05:8f:81:18:f0:e7:96:ad:e4:bb:78:
33:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:97:66:97:81:27:EB:05:E0:E9:A2:E1:FD:6B:E7:BF:CA:83:82:E1
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/VJdml4En6wXg6aLh_Wvnv8qDguE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.205.0/24
194.226.244.0/23
195.209.149.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:be:a7:0b:6c:b0:4c:1f:f4:89:07:46:78:0b:43:99:cb:9f:
2e:c6:b8:01:c0:a4:27:32:8b:97:20:0b:dd:4e:43:54:05:64:
93:45:6d:cd:e9:d0:33:1e:56:0b:3d:cb:28:d3:33:6f:15:92:
ad:78:c7:62:e7:7b:04:36:74:20:e0:71:2b:47:d2:ed:b3:dd:
ba:39:b2:7c:7c:27:54:0d:8c:de:04:33:52:90:ed:7b:25:fa:
81:76:93:4c:67:85:39:c9:5a:f5:68:c5:6c:64:40:01:d6:25:
02:d8:b6:60:53:ce:d0:43:02:ee:01:5b:53:ad:73:7b:c8:68:
72:73:30:13:b5:40:17:51:e5:be:63:ee:1c:3d:a0:91:b2:a6:
0a:62:2e:1b:85:66:39:cd:6f:6f:dc:17:8e:64:9c:a5:eb:75:
2c:f2:6c:bd:85:d1:58:08:60:fd:50:71:bb:aa:16:d0:ba:a1:
f2:92:2f:de:8c:eb:bd:b9:b0:34:37:32:c8:16:99:04:bb:7c:
cc:13:3d:1c:b4:ea:37:92:9b:74:ab:4f:72:1f:4a:11:2c:b0:
4b:32:fa:cd:7a:fa:ef:9e:5a:38:97:4b:cc:53:20:e9:7a:a2:
00:bd:e7:9d:bf:d2:8a:c9:ed:7b:16:91:ed:5e:d7:4b:de:c0:
14:58:6f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:38:50 2024 by rpki-client on console-ams.rpki-client.org