Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/vefSvDCglQFU-_0r4meENFhHkZU.roa
File: vefSvDCglQFU-_0r4meENFhHkZU.roa (raw, json)
Hash identifier: v492wfqWknOdhrWSl+8JOzErYI/ucW60ExjDAMMafp8=
Subject key identifier: BD:E7:D2:BC:30:A0:95:01:54:FB:FD:2B:E2:67:84:34:58:47:91:95
Certificate issuer: /CN=2719412918a6627f99cce55c7aca139057b8574e
Certificate serial: 018CC3B6DE7AEEC4E18551F8F9612E1EF9B0
Authority key identifier: 27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/vefSvDCglQFU-_0r4meENFhHkZU.roa
Signing time: Mon 01 Jan 2024 06:29:50 +0000
ROA not before: Mon 01 Jan 2024 06:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400040
IP address blocks: 194.50.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.mft
rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 19:03:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:de:7a:ee:c4:e1:85:51:f8:f9:61:2e:1e:f9:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2719412918a6627f99cce55c7aca139057b8574e
Validity
Not Before: Jan 1 06:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bde7d2bc30a0950154fbfd2be267843458479195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f4:b9:e4:ec:c9:68:18:65:38:83:38:83:4b:
b0:2c:89:8b:35:d4:d2:00:ef:90:40:67:ca:9f:51:
c7:09:b0:7d:69:6a:57:08:1b:12:ca:84:14:74:64:
46:7f:eb:34:ba:f7:2f:f6:97:93:27:bb:2f:f7:0c:
26:32:11:a8:b5:a5:bc:06:61:1e:cb:04:56:eb:c9:
72:0a:18:c4:af:95:ce:eb:6d:95:6c:8b:ae:74:50:
fa:99:e1:e8:05:83:ba:d1:87:b2:d4:b2:b7:09:b1:
ee:99:7d:76:63:97:c1:4a:04:f8:a3:aa:c9:ab:4a:
c4:e7:49:e4:89:f9:eb:1c:f9:51:8d:d9:fb:8c:61:
82:f1:b0:cb:f9:6b:1b:34:8e:45:cd:99:1f:5b:ba:
a2:0e:00:23:46:62:52:e7:08:db:60:e4:44:68:86:
8a:c2:08:53:d2:da:c4:ad:04:1b:54:0e:ee:7d:85:
34:72:54:5d:05:0a:14:9f:a1:d4:44:84:61:bb:09:
9f:0a:94:05:b7:e7:65:cc:49:0d:8d:11:88:8e:18:
55:01:4e:cd:7a:70:2d:5c:6b:21:c0:f2:b8:8f:35:
09:46:f4:31:03:03:ce:11:51:26:06:0a:2e:57:e6:
17:d8:d5:01:84:3d:58:bc:98:43:04:e7:16:3f:d3:
6a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E7:D2:BC:30:A0:95:01:54:FB:FD:2B:E2:67:84:34:58:47:91:95
X509v3 Authority Key Identifier:
keyid:27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/vefSvDCglQFU-_0r4meENFhHkZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.4.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:9e:77:4f:5c:c1:a3:47:04:44:b3:54:59:7f:75:82:a7:15:
18:dd:30:ce:c3:f0:86:b0:2f:6e:22:d3:ca:80:da:a2:bb:d3:
79:55:81:43:1a:c6:55:93:60:a7:20:5b:6f:60:46:e1:c8:1e:
f7:a9:14:17:c9:40:0b:b9:5f:34:b7:87:a4:b9:c3:3f:ae:72:
df:34:0e:75:81:20:23:2b:fb:ad:ff:ed:45:36:9b:4f:cc:5a:
e5:cc:46:b7:a4:d6:19:ea:8a:28:e8:bb:ee:b8:93:83:9b:64:
66:f4:42:b9:d0:da:ab:c5:d5:38:27:d7:0f:07:54:78:0d:6e:
ba:22:cf:ba:7b:c2:06:bb:30:9c:0f:8c:d8:b9:f3:c8:1a:6b:
ff:ee:dc:fd:f9:56:e6:18:c3:7e:fe:36:ba:dc:6b:d7:f1:34:
58:d9:a7:f2:3a:f8:34:72:f4:60:34:03:1d:0a:bf:1c:ed:c5:
2c:33:0e:2a:8b:29:e1:7c:84:f3:0e:9f:9b:fe:6f:5a:d3:95:
e5:3f:eb:98:b9:e0:ec:75:60:cf:94:44:78:38:95:67:58:1e:
06:35:fe:b6:44:48:72:aa:d8:83:7f:5a:bd:d0:16:b8:a3:fa:
88:9f:30:7c:ed:76:ed:2d:3a:aa:2c:f3:31:87:e9:b5:c6:bd:
0f:ab:5a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 00:37:25 2024 by rpki-client on console-fra.rpki-client.org