Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/vKKdy6TXZrstYqSpFqDeWz48RXQ.roa
File: vKKdy6TXZrstYqSpFqDeWz48RXQ.roa (raw, json)
Hash identifier: r61CwfkYhf8ZfYRsy1JFX8UlHHqM79V78jJq9oARuCc=
Subject key identifier: BC:A2:9D:CB:A4:D7:66:BB:2D:62:A4:A9:16:A0:DE:5B:3E:3C:45:74
Certificate issuer: /CN=80c7b3de96b91edc6e9c85d9d5a668419203b5f5
Certificate serial: 0192DE282B5905BC6B84D786D47AC3B5682F
Authority key identifier: 80:C7:B3:DE:96:B9:1E:DC:6E:9C:85:D9:D5:A6:68:41:92:03:B5:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gMez3pa5HtxunIXZ1aZoQZIDtfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/vKKdy6TXZrstYqSpFqDeWz48RXQ.roa
Signing time: Wed 30 Oct 2024 16:00:27 +0000
ROA not before: Wed 30 Oct 2024 16:00:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215419
IP address blocks: 195.200.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gMez3pa5HtxunIXZ1aZoQZIDtfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:de:28:2b:59:05:bc:6b:84:d7:86:d4:7a:c3:b5:68:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80c7b3de96b91edc6e9c85d9d5a668419203b5f5
Validity
Not Before: Oct 30 16:00:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bca29dcba4d766bb2d62a4a916a0de5b3e3c4574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:76:50:27:3c:4e:30:30:62:37:71:ce:d7:e1:
44:db:36:42:c8:d3:1a:4a:51:76:a5:af:34:32:9c:
58:3e:09:c0:51:9b:68:77:09:0b:56:97:11:00:93:
79:78:ac:80:9a:63:b7:eb:99:15:17:13:49:22:65:
13:3f:06:91:48:da:ff:8d:32:23:fb:c4:88:18:0b:
25:42:d9:d3:6f:47:74:7d:ef:6d:ae:c4:1d:42:19:
73:15:a1:d0:2b:1f:69:8e:93:44:33:af:01:70:8d:
e0:b3:73:d8:e0:ee:2b:9c:19:57:d5:9a:d8:d1:71:
08:c8:ef:5d:b8:11:28:4b:45:54:bf:66:08:61:be:
72:60:9f:e1:5a:26:83:65:53:9c:c8:19:9e:6c:db:
20:ac:09:4c:c3:c5:30:f1:a2:ce:97:ef:f3:12:e0:
73:7e:34:57:72:14:36:dd:f4:d0:6e:17:66:35:47:
28:36:5a:34:e4:a4:d9:31:52:23:5b:6b:94:24:0e:
37:70:73:85:ad:aa:14:66:83:f3:70:15:a6:f6:75:
83:fc:44:a1:e5:60:03:8f:60:12:02:0d:ec:95:21:
b2:10:2d:30:28:24:c6:c4:ad:23:4c:29:ce:09:b3:
51:ce:05:33:33:d8:de:86:9f:a5:92:9e:73:cf:44:
17:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A2:9D:CB:A4:D7:66:BB:2D:62:A4:A9:16:A0:DE:5B:3E:3C:45:74
X509v3 Authority Key Identifier:
keyid:80:C7:B3:DE:96:B9:1E:DC:6E:9C:85:D9:D5:A6:68:41:92:03:B5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gMez3pa5HtxunIXZ1aZoQZIDtfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/vKKdy6TXZrstYqSpFqDeWz48RXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.200.76.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:3e:b4:11:51:29:a8:9f:3f:be:79:47:8f:2c:44:e8:17:c0:
c8:97:7d:59:41:ea:1e:fd:da:a4:09:85:fe:d4:eb:71:d9:de:
28:6e:d4:2c:d5:a9:c9:2a:ce:a9:8e:68:20:a8:8a:d6:bc:e9:
e6:e9:d5:29:04:cb:bf:8b:c8:0a:8d:4f:21:61:f1:52:89:df:
42:00:00:bc:62:21:17:8d:75:11:5b:83:6e:19:7a:15:97:6c:
10:2a:72:0f:e0:07:6c:25:e9:7f:c3:d0:ad:62:1d:cc:a3:72:
40:f7:69:15:66:60:c1:37:20:4b:26:87:09:34:5e:81:3f:5f:
5c:0b:2d:2b:f6:24:83:bf:bb:ae:cb:94:36:1a:b8:6a:2b:34:
a4:00:b8:cf:49:3f:fa:1f:4d:42:2a:7a:43:fa:6a:80:83:62:
f6:0d:e6:51:d3:5c:15:31:98:97:89:94:d2:3b:fb:03:10:76:
f9:56:73:a1:27:f0:8f:99:28:e8:67:eb:27:54:84:c5:2d:5e:
eb:ea:45:7c:23:0f:c6:fc:b5:59:02:c1:e8:59:7d:f9:48:08:
d5:ff:22:8f:91:09:05:8f:67:15:20:9b:b5:1f:02:8a:ab:0f:
21:59:b5:7a:70:d9:3a:a2:91:9d:40:a4:2f:80:d4:71:e3:89:
da:71:1f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:27:41 2024 by rpki-client on console-ams.rpki-client.org