Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/vyZbn-94Xh9ViY4RQLvSgTX_QrE.roa
File: vyZbn-94Xh9ViY4RQLvSgTX_QrE.roa (raw, json)
Hash identifier: WTHLOliHIPVhKvHzgtzgZ4chtHsGjorpdefB2f3ujY4=
Subject key identifier: BF:26:5B:9F:EF:78:5E:1F:55:89:8E:11:40:BB:D2:81:35:FF:42:B1
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 019001AA4D0BA500A73D1A9B4A318C463D37
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/vyZbn-94Xh9ViY4RQLvSgTX_QrE.roa
Signing time: Mon 10 Jun 2024 10:20:56 +0000
ROA not before: Mon 10 Jun 2024 10:20:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216202
IP address blocks: 213.109.98.0/24 maxlen: 24
213.109.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:01:aa:4d:0b:a5:00:a7:3d:1a:9b:4a:31:8c:46:3d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jun 10 10:20:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf265b9fef785e1f55898e1140bbd28135ff42b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f2:1a:f6:d5:b6:94:b9:b3:84:52:f7:6e:29:
ef:4e:38:2f:84:30:be:b5:41:80:97:a5:f7:6a:41:
08:b1:95:4d:23:89:f0:2a:58:12:99:22:29:41:d9:
0c:ac:50:c5:d5:17:2a:de:7d:ef:5b:ef:db:3b:12:
04:3c:7c:91:a0:b6:7d:22:32:a7:38:a9:26:ec:5b:
6c:09:89:7d:2e:c7:ce:a2:cd:ba:88:a5:41:8e:f0:
47:f6:ed:7a:df:a8:bf:9f:7c:d2:62:62:b1:8d:97:
56:20:97:3d:01:98:8f:25:0b:25:76:06:9f:ad:79:
85:6e:11:3d:c0:8e:f3:fe:e4:89:bc:a4:4c:4e:66:
82:63:1f:c8:c4:ce:74:5a:00:d9:7f:f5:51:eb:b3:
d6:35:8f:c9:97:6e:a9:3f:3e:18:81:eb:f2:e2:02:
3b:58:fd:6d:61:5b:0e:eb:b8:9e:1d:78:44:54:d3:
dd:c6:d3:c4:d2:18:5a:4a:62:b7:f3:04:6c:ef:b1:
2e:f1:c3:b7:e8:25:e8:d8:23:a4:8d:fd:44:e0:aa:
8b:13:16:34:4a:89:c5:49:ba:82:2b:d6:65:1d:49:
ae:3f:59:16:a1:ee:c1:83:a6:0e:42:a5:3a:d6:c9:
3a:ff:42:9e:f1:f7:46:96:53:3c:1d:15:55:33:dd:
7c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:26:5B:9F:EF:78:5E:1F:55:89:8E:11:40:BB:D2:81:35:FF:42:B1
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/vyZbn-94Xh9ViY4RQLvSgTX_QrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.98.0/23
Signature Algorithm: sha256WithRSAEncryption
04:c9:04:e6:72:23:3a:e4:9e:2c:04:8e:08:d8:b4:27:cd:85:
e0:4a:b1:8b:6f:98:f3:26:3b:bd:c0:0b:96:51:ba:ee:a3:e8:
33:19:b0:1d:8d:4a:78:ec:c8:8f:9c:52:75:5c:af:be:af:ed:
05:9a:bc:a2:64:8b:18:a4:cc:82:0a:72:ca:b7:9d:80:f4:a4:
14:49:a0:1f:b6:28:76:24:25:2e:94:03:f1:3c:fb:c5:ef:26:
72:f4:56:c8:d4:ae:ca:85:08:16:a2:61:f4:b1:97:8a:ba:e5:
7c:24:b4:85:9a:90:f2:2f:43:95:aa:7d:bc:11:18:97:b5:cc:
73:a5:94:78:ac:5e:5e:7f:07:f3:00:04:f8:9d:74:52:e0:3c:
ad:63:5c:c3:48:91:87:fa:d9:66:ca:2a:25:9f:06:fc:71:09:
b9:7d:31:96:ec:ba:1a:7f:a8:62:13:4d:8b:2b:3e:15:d0:23:
6f:6c:4b:ac:40:86:4f:2b:eb:05:48:d4:7f:ad:8a:9e:0e:77:
48:e5:fe:79:e7:3e:05:d0:81:75:18:d6:b8:3b:1f:ea:fa:48:
b2:c8:a1:4f:18:9c:9c:29:19:4a:cb:8e:6b:b0:71:a2:4e:6d:
9c:bd:26:71:8b:69:a2:4b:d8:00:27:bb:ae:dd:31:27:19:3e:
8a:b9:37:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:45:30 2024 by rpki-client on console-fra.rpki-client.org