Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/DayVRFh3CwZvXHH4l5fLy1c998Q.roa
File: DayVRFh3CwZvXHH4l5fLy1c998Q.roa (raw, json)
Hash identifier: U6C0w0H4glmiG6n4OvVDBbAPPdhMaC+VnHRa+5WANKA=
Subject key identifier: 0D:AC:95:44:58:77:0B:06:6F:5C:71:F8:97:97:CB:CB:57:3D:F7:C4
Certificate issuer: /CN=d99a47cdc89f46342f90b0da3c30d9ec5fd63238
Certificate serial: 018CC6B892ED0C60498D96CB3C8A31BF7A1C
Authority key identifier: D9:9A:47:CD:C8:9F:46:34:2F:90:B0:DA:3C:30:D9:EC:5F:D6:32:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/DayVRFh3CwZvXHH4l5fLy1c998Q.roa
Signing time: Mon 01 Jan 2024 20:30:34 +0000
ROA not before: Mon 01 Jan 2024 20:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21034
IP address blocks: 195.32.69.0/24 maxlen: 24
195.32.80.0/22 maxlen: 22
195.32.84.0/24 maxlen: 24
195.32.85.0/24 maxlen: 24
195.32.88.0/21 maxlen: 22
195.32.86.0/23 maxlen: 23
195.32.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:92:ed:0c:60:49:8d:96:cb:3c:8a:31:bf:7a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d99a47cdc89f46342f90b0da3c30d9ec5fd63238
Validity
Not Before: Jan 1 20:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0dac954458770b066f5c71f89797cbcb573df7c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:da:01:46:7d:83:57:21:64:d4:a6:ac:7a:0f:
a0:9f:2a:82:72:9e:70:93:0e:c4:02:99:90:40:d1:
07:0b:04:e7:1e:c2:03:bb:21:da:63:9d:72:fe:f5:
a5:fa:ed:5b:f7:46:67:e6:81:5b:01:59:18:45:a3:
e5:a0:b3:76:e9:0a:c3:b7:d0:ce:2e:c7:95:02:bf:
3e:4a:e9:53:d7:e7:0b:b6:21:74:65:68:d3:0a:ad:
fd:75:70:85:98:d1:38:d1:21:1a:e2:dc:5e:a6:43:
3f:55:c4:68:5e:cc:69:be:1b:5c:6e:c6:52:85:59:
c3:52:c3:41:da:9e:e7:e1:52:e7:e9:2f:19:e8:1a:
0c:e5:da:7c:9d:ff:5b:4e:1e:d4:1e:77:dd:38:b0:
2e:7f:0d:d5:f8:70:2d:16:f5:a7:46:f3:60:eb:1d:
73:43:e1:5b:06:c6:09:c6:8a:ad:41:b7:1f:78:10:
4c:ea:ae:b6:a4:e1:5d:83:eb:a6:0e:88:17:e8:26:
d3:14:c4:3c:98:8a:12:c2:ac:10:bb:05:2a:2a:2f:
cb:95:f4:98:b5:f3:01:b4:cb:18:cc:88:57:db:9a:
69:29:d1:e2:0a:69:e1:a5:06:ba:13:94:4b:68:1e:
c0:60:f2:c9:13:a1:45:af:18:d1:bd:75:4a:f5:99:
41:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:AC:95:44:58:77:0B:06:6F:5C:71:F8:97:97:CB:CB:57:3D:F7:C4
X509v3 Authority Key Identifier:
keyid:D9:9A:47:CD:C8:9F:46:34:2F:90:B0:DA:3C:30:D9:EC:5F:D6:32:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/DayVRFh3CwZvXHH4l5fLy1c998Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.32.69.0/24
195.32.80.0/20
Signature Algorithm: sha256WithRSAEncryption
80:33:60:1d:f0:d0:5b:a3:02:56:c0:84:2e:ab:6a:1c:91:7f:
2f:ba:e3:64:ca:11:bf:97:ca:7b:06:48:83:52:ef:5d:7b:7d:
8b:8b:b5:6e:02:13:c1:29:04:a6:38:e1:22:e5:df:91:c8:5f:
b8:13:c0:06:4f:fb:5b:70:d5:95:91:c2:6b:03:f9:ae:5b:c9:
d3:7f:35:e9:6d:65:1c:fa:cf:07:95:be:fa:4f:be:af:31:e0:
a6:98:96:b7:fb:f3:45:5a:5e:4d:ac:39:dc:68:55:70:9a:23:
e2:1c:e2:cc:55:7b:1d:eb:20:67:48:ad:76:c0:1f:1d:6a:04:
95:03:ac:4c:d0:a5:c8:5d:5f:f9:c8:24:a1:04:01:54:5a:ba:
50:6a:d2:8d:7e:3b:22:22:b1:a4:10:36:ba:4c:a4:ce:7f:32:
1b:2f:ef:94:73:55:c0:46:35:d5:a5:4f:f6:5d:12:64:9d:bb:
95:7a:d5:b9:5e:3e:13:d8:9d:70:80:02:f8:d4:04:f8:24:63:
13:21:fe:f8:46:af:07:49:c3:5c:43:98:8d:9f:31:0e:f6:9f:
fa:d0:4b:0b:e6:47:57:83:fe:bf:83:2f:01:b8:4d:8b:be:93:
37:54:73:c9:e1:19:37:44:c6:09:42:5d:b0:60:b7:fd:6b:34:
63:db:07:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:52:53 2024 by rpki-client on console-fra.rpki-client.org