Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/vpGrjFL9r64RUYjfkCUUeeqJa2Q.roa
File: vpGrjFL9r64RUYjfkCUUeeqJa2Q.roa (raw, json)
Hash identifier: 1pjMJ3hrfqX2cagkiCQl4f5PntKz20Xmrd9SmPJFpX8=
Subject key identifier: BE:91:AB:8C:52:FD:AF:AE:11:51:88:DF:90:25:14:79:EA:89:6B:64
Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448
Certificate serial: 018CC49306EDE8EBBC63FD0016BE85EA43FC
Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/vpGrjFL9r64RUYjfkCUUeeqJa2Q.roa
Signing time: Mon 01 Jan 2024 10:30:18 +0000
ROA not before: Mon 01 Jan 2024 10:30:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2199
IP address blocks: 194.199.12.0/24 maxlen: 24
195.83.190.0/24 maxlen: 24
194.57.170.0/24 maxlen: 24
194.254.97.0/24 maxlen: 24
195.83.255.0/24 maxlen: 24
195.83.254.0/24 maxlen: 24
193.54.136.0/24 maxlen: 24
194.199.98.0/24 maxlen: 24
194.199.97.0/24 maxlen: 24
194.199.95.0/24 maxlen: 24
195.83.214.0/24 maxlen: 24
194.199.74.0/24 maxlen: 24
2001:661:2000::/35 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:06:ed:e8:eb:bc:63:fd:00:16:be:85:ea:43:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448
Validity
Not Before: Jan 1 10:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be91ab8c52fdafae115188df90251479ea896b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1a:ed:1e:f9:11:02:91:4b:ad:e0:1e:19:15:
70:9f:73:90:f3:a8:0f:18:d4:81:45:5c:69:82:fd:
0a:3a:ea:31:a0:a2:1c:a1:09:4d:4e:d8:e8:4e:ca:
29:f1:5c:da:e5:df:36:75:0d:1b:2c:7c:c8:09:da:
0a:9b:1a:79:f4:53:3e:86:14:b4:9a:a3:fd:1a:87:
dc:9a:dd:7a:bf:7e:77:21:3f:1f:3c:5e:d9:65:d4:
84:b0:c6:d9:21:95:f1:a7:1a:96:f4:43:a6:ff:a1:
bb:9f:a9:25:fd:74:f7:36:a3:63:15:4f:30:88:9b:
e7:c5:b6:4d:44:03:ff:ae:4c:56:ce:b9:c2:ff:17:
b4:b6:4c:4c:10:36:3a:a1:9c:e3:9c:be:ea:dd:93:
20:16:8a:51:57:3e:35:8a:65:cb:a9:b7:48:9b:1a:
cd:bd:51:25:a7:c8:c9:62:d1:29:b6:c3:96:81:48:
6a:ad:f0:b5:6a:9c:80:da:7f:86:bc:32:36:a6:76:
7c:bf:03:1d:9b:18:30:8e:38:c0:f7:8b:6f:79:e2:
37:12:aa:f8:e9:d8:83:82:b3:dc:2c:c3:1d:c1:1a:
9b:41:1b:fe:38:10:6a:35:4f:48:77:f5:b1:f2:08:
a6:21:19:bc:d8:f4:f6:f5:23:b3:75:6b:58:90:c0:
8d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:91:AB:8C:52:FD:AF:AE:11:51:88:DF:90:25:14:79:EA:89:6B:64
X509v3 Authority Key Identifier:
keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/vpGrjFL9r64RUYjfkCUUeeqJa2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.54.136.0/24
194.57.170.0/24
194.199.12.0/24
194.199.74.0/24
194.199.95.0/24
194.199.97.0-194.199.98.255
194.254.97.0/24
195.83.190.0/24
195.83.214.0/24
195.83.254.0/23
IPv6:
2001:661:2000::/35
Signature Algorithm: sha256WithRSAEncryption
43:b5:57:f1:78:a4:ef:f3:c0:ed:ce:32:a4:5d:3b:7c:d1:c2:
7a:79:6f:7e:53:56:cd:44:8c:e3:f1:53:1f:1c:13:ca:52:ac:
28:97:1c:ff:20:ff:45:92:35:a8:16:c6:7a:88:17:15:12:e0:
80:42:5b:a7:b6:c8:8b:6b:ef:46:1b:16:80:de:be:64:d1:84:
9d:8b:02:17:14:e0:85:00:99:fa:cc:b2:35:e2:82:f5:ac:e3:
0f:b0:f3:8a:b5:15:5e:61:a9:e8:f9:85:a7:30:33:2b:53:52:
c2:a4:ac:ab:8a:67:be:8e:2f:3f:3a:e6:88:9d:4c:78:85:91:
15:a1:e4:b1:91:91:36:4f:07:05:08:ea:35:55:5b:fd:26:1a:
3f:43:a2:87:5a:e9:dc:05:80:f4:5f:82:6c:f0:0e:e9:0d:55:
da:3a:16:b6:2b:71:73:19:5a:d1:f3:e0:df:e8:d9:c8:eb:e9:
32:93:76:94:94:3c:90:dc:53:50:d5:84:71:de:6f:d0:cd:50:
cc:12:e7:ca:e0:2e:bf:ed:7e:f2:58:de:44:db:54:da:0e:c2:
b9:bc:f7:c6:97:f6:f6:a9:75:86:94:9e:a9:5a:55:f3:17:47:
39:32:60:73:24:d2:e1:9f:51:6d:28:bc:c7:c1:a0:cc:0a:c6:
16:e5:f9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:20:55 2024 by rpki-client on console-fra.rpki-client.org