Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/vYnRd_zpnBknHQ2JQut_2lMh0IM.roa
File: vYnRd_zpnBknHQ2JQut_2lMh0IM.roa (raw, json)
Hash identifier: nGLd07beUpMWBKYQH/e5kPUVLC8KW3WbJa96rOSrkJ8=
Subject key identifier: BD:89:D1:77:FC:E9:9C:19:27:1D:0D:89:42:EB:7F:DA:53:21:D0:83
Certificate issuer: /CN=87992088e7655cb134020ca95b0e57d4e6daf40f
Certificate serial: 018CC8DECA9F2A3139F4288F35967C4BF9EC
Authority key identifier: 87:99:20:88:E7:65:5C:B1:34:02:0C:A9:5B:0E:57:D4:E6:DA:F4:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5kgiOdlXLE0AgypWw5X1Oba9A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/vYnRd_zpnBknHQ2JQut_2lMh0IM.roa
Signing time: Tue 02 Jan 2024 06:31:33 +0000
ROA not before: Tue 02 Jan 2024 06:31:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203201
IP address blocks: 185.146.128.0/22 maxlen: 22
2a07:50c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5kgiOdlXLE0AgypWw5X1Oba9A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:ca:9f:2a:31:39:f4:28:8f:35:96:7c:4b:f9:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87992088e7655cb134020ca95b0e57d4e6daf40f
Validity
Not Before: Jan 2 06:31:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd89d177fce99c19271d0d8942eb7fda5321d083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a9:42:1c:34:b5:37:30:52:ac:e9:df:08:9b:
4c:53:ba:88:8d:0c:45:67:af:a9:ec:26:96:ad:b5:
1c:19:2e:a1:82:39:89:b5:33:aa:c3:de:23:61:15:
ca:0d:29:4a:24:9d:a0:53:c8:b8:f3:04:67:ff:4b:
92:85:fd:8b:b3:4f:fa:5b:e1:03:f9:64:aa:9d:24:
25:9b:81:28:cb:8b:b7:c2:0f:28:17:c9:c0:ee:3e:
c1:b7:da:6a:89:1d:8d:f5:83:1f:80:78:5c:62:c5:
09:f4:f0:68:a8:6e:9e:ff:dd:a2:88:62:4a:81:ea:
78:2c:0b:2b:e3:92:c4:88:03:90:38:4e:f5:63:26:
96:65:f2:04:c5:74:80:64:cb:08:2b:6a:2b:49:69:
e2:90:95:26:a6:16:f1:5c:65:0d:fe:19:77:58:f1:
35:11:9d:8f:d9:13:cd:f5:7c:4a:29:cd:e0:98:15:
24:62:91:06:ed:8e:b1:28:94:cc:1d:f2:08:d8:70:
bb:32:36:23:09:40:10:38:6d:26:22:15:c6:1f:83:
44:7c:2b:48:9d:ee:36:2f:fd:d3:5f:30:11:ee:34:
68:57:63:05:c7:43:f5:64:39:91:aa:9b:db:11:ca:
49:7a:75:04:78:28:d0:ae:f5:74:a1:da:78:db:c3:
b5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:89:D1:77:FC:E9:9C:19:27:1D:0D:89:42:EB:7F:DA:53:21:D0:83
X509v3 Authority Key Identifier:
keyid:87:99:20:88:E7:65:5C:B1:34:02:0C:A9:5B:0E:57:D4:E6:DA:F4:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5kgiOdlXLE0AgypWw5X1Oba9A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/vYnRd_zpnBknHQ2JQut_2lMh0IM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.146.128.0/22
IPv6:
2a07:50c0::/29
Signature Algorithm: sha256WithRSAEncryption
96:2d:6d:64:78:1c:7c:33:57:4a:f4:a6:ee:81:8f:f8:af:43:
05:39:59:43:e4:c5:27:9f:c9:8f:c5:3b:ef:a0:1b:0f:4b:a1:
76:bd:73:54:2c:49:72:08:b7:f8:b2:aa:cc:55:e9:13:f2:64:
8d:5f:5a:ad:b3:18:12:61:02:26:e5:86:92:9f:2c:55:c5:1a:
a6:58:b7:f6:c1:31:ab:72:1b:fc:37:97:be:62:b6:6f:40:8c:
5b:e5:ae:c1:ea:f6:6f:1b:71:80:cf:29:eb:91:11:b2:32:3f:
32:d5:49:df:6b:15:11:86:03:89:56:a3:db:43:14:19:92:af:
93:f8:f5:12:9f:40:d3:e9:6a:5c:99:ba:e7:2d:66:72:7f:69:
5e:0c:e5:bb:99:b5:67:61:14:71:40:82:1e:ef:ed:a2:ba:1a:
c4:fa:b5:06:11:55:62:15:b9:f3:8b:49:f2:b9:f7:17:8b:4b:
2d:0f:5a:f4:de:33:fa:87:fb:2e:7d:c9:7f:d9:c9:e4:c2:f7:
61:a8:bf:9c:51:dd:54:fc:a5:73:44:2e:ca:09:98:53:42:d0:
ac:a4:bc:ab:c2:95:75:e6:64:4f:26:55:97:a3:87:24:33:ac:
ee:c6:4e:52:3d:41:b9:b6:1c:58:bd:1f:de:b8:e5:12:8f:ba:
2c:0c:68:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:16:50 2024 by rpki-client on console-fra.rpki-client.org