Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/vcBquy2J242HTlg6_tSi-GsvnKY.roa
File: vcBquy2J242HTlg6_tSi-GsvnKY.roa (raw, json)
Hash identifier: 9WjCuBSoyS40lO5CQI26FtO+0HnlipjjZq45krO9qsw=
Subject key identifier: BD:C0:6A:BB:2D:89:DB:8D:87:4E:58:3A:FE:D4:A2:F8:6B:2F:9C:A6
Certificate issuer: /CN=0032534e8d560d73553c632bba10344a7c816614
Certificate serial: 018CC79501745C888E419A4F00A25FE804E7
Authority key identifier: 00:32:53:4E:8D:56:0D:73:55:3C:63:2B:BA:10:34:4A:7C:81:66:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ADJTTo1WDXNVPGMruhA0SnyBZhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/vcBquy2J242HTlg6_tSi-GsvnKY.roa
Signing time: Tue 02 Jan 2024 00:31:20 +0000
ROA not before: Tue 02 Jan 2024 00:31:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1820
IP address blocks: 91.202.108.0/22 maxlen: 32
194.246.99.0/24 maxlen: 32
193.110.100.0/23 maxlen: 32
194.28.196.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ADJTTo1WDXNVPGMruhA0SnyBZhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:01:74:5c:88:8e:41:9a:4f:00:a2:5f:e8:04:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0032534e8d560d73553c632bba10344a7c816614
Validity
Not Before: Jan 2 00:31:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bdc06abb2d89db8d874e583afed4a2f86b2f9ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ac:01:02:22:27:b9:dc:11:5c:80:24:d9:9f:
c2:27:15:36:2f:fc:7c:fe:16:2c:23:f2:a2:67:9c:
2b:b5:78:fe:ee:ab:b0:3d:9a:42:4a:c7:ec:7e:72:
d5:e9:40:e3:0e:9c:98:3c:37:44:a3:82:ca:c1:ab:
32:3d:1a:bc:2c:eb:ab:bb:ef:e7:3d:06:a5:a3:6c:
4b:2d:8a:8a:75:fc:a0:dd:03:07:f1:e6:a5:3c:59:
0b:8a:af:25:ee:db:69:c8:89:06:d3:2d:55:8f:9a:
e9:88:c3:9c:81:38:d9:89:f5:ee:ff:3d:ea:d4:07:
e1:70:9e:d9:13:07:09:5b:74:27:9c:8b:73:04:e6:
37:ef:49:a9:a6:41:03:2e:2c:ab:5f:0b:63:d7:71:
a9:f3:d6:a7:6a:8c:8e:51:2f:c6:01:7c:56:72:33:
19:dc:50:c1:4b:f3:d6:d9:3a:e6:50:de:b6:87:6e:
03:80:02:45:09:6a:49:0b:eb:49:bb:4a:a6:1d:f7:
75:d9:e4:93:72:d0:bf:c4:f8:ae:80:bd:b2:3e:7d:
07:19:2a:e1:42:16:e6:8e:8c:46:49:e8:0f:cb:85:
47:60:80:19:fe:b5:bd:6a:7d:2c:a2:2a:a6:d1:19:
1a:14:b9:42:15:30:1a:9f:6e:44:e9:b9:cb:7c:0f:
16:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C0:6A:BB:2D:89:DB:8D:87:4E:58:3A:FE:D4:A2:F8:6B:2F:9C:A6
X509v3 Authority Key Identifier:
keyid:00:32:53:4E:8D:56:0D:73:55:3C:63:2B:BA:10:34:4A:7C:81:66:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADJTTo1WDXNVPGMruhA0SnyBZhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/vcBquy2J242HTlg6_tSi-GsvnKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.108.0/22
193.110.100.0/23
194.28.196.0/22
194.246.99.0/24
Signature Algorithm: sha256WithRSAEncryption
41:3b:d7:94:6f:21:41:57:26:f3:e4:91:bd:5d:05:73:62:c5:
c9:da:8b:87:57:1e:03:b0:bc:37:ad:d9:8e:fb:89:cd:d8:41:
10:ef:b5:12:8d:b4:21:66:ab:11:ca:9c:63:74:26:e2:a9:5a:
d6:02:d9:91:ef:a4:19:23:cc:bd:37:91:90:60:11:13:e9:d0:
8d:f5:9b:ea:0d:b1:78:64:b4:de:d2:88:cb:57:26:51:bc:fd:
0a:c0:b0:08:07:ce:2a:65:07:27:e5:8c:8c:4d:37:dc:2f:fe:
54:2d:d2:62:ac:0b:c9:cd:8d:75:6a:b9:57:a4:d2:bb:3b:92:
41:87:04:fb:7b:a4:69:3d:4b:bc:39:8e:77:a9:24:de:09:02:
ae:30:3f:bd:0d:18:18:8f:fd:65:d4:b0:36:dd:9e:c2:d4:3c:
44:33:97:d1:8c:9f:0f:ab:cb:f5:21:28:5c:ca:e0:ee:b8:e9:
b5:ea:6c:bc:02:65:8a:f0:03:08:8c:52:ba:43:11:ea:a9:fb:
9e:e7:5b:da:d7:6c:2a:5d:17:2b:c3:20:db:5e:32:56:1a:8a:
a0:7b:ea:ef:3c:03:03:e6:9a:5b:50:fb:3e:71:f8:87:51:08:
35:74:f1:a4:ad:8b:08:82:d7:ff:48:18:92:8c:8c:fd:ae:89:
d4:34:58:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 16:22:35 2024 by rpki-client on console-fra.rpki-client.org