Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/vLG-4Nf7GabB5D9UT-NuvsqorKA.roa
File: vLG-4Nf7GabB5D9UT-NuvsqorKA.roa (raw, json)
Hash identifier: JIAUvOWOlak1ze9YLhNvbiszWKLyQhCDHyLh+6yY+/Y=
Subject key identifier: BC:B1:BE:E0:D7:FB:19:A6:C1:E4:3F:54:4F:E3:6E:BE:CA:A8:AC:A0
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01942748528373CE556C0C71F47F2C17DA07
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/vLG-4Nf7GabB5D9UT-NuvsqorKA.roa
Signing time: Thu 02 Jan 2025 13:50:38 +0000
ROA not before: Thu 02 Jan 2025 13:50:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39658
IP address blocks: 193.180.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:52:83:73:ce:55:6c:0c:71:f4:7f:2c:17:da:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bcb1bee0d7fb19a6c1e43f544fe36ebecaa8aca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:38:22:d3:92:98:49:7a:29:34:91:b0:0e:f1:
34:92:f3:69:61:df:5f:6d:57:d4:fc:69:76:3c:3c:
01:9c:80:b7:06:7b:ae:d5:06:0b:f3:34:5b:8a:3d:
16:d9:79:ce:75:d8:f0:ed:dc:a1:78:fc:62:75:e5:
2b:88:6a:97:29:c4:04:61:22:4c:6e:3a:b2:71:ca:
67:be:b7:af:ad:11:c2:a6:4d:f0:c0:3d:17:fd:78:
5f:2f:17:c7:79:a4:94:0b:96:ae:73:53:ce:59:56:
09:54:dc:79:06:5d:99:48:ab:f4:25:55:0f:a6:65:
00:a6:93:9f:33:4c:15:44:18:4f:7d:6f:91:37:c0:
2f:1b:74:89:9b:50:00:3b:ca:cc:95:5d:5f:8e:09:
7b:76:f9:c3:42:a4:0b:8e:03:65:36:ee:0f:60:7e:
08:30:4a:0d:0e:80:1e:dd:d2:19:20:00:13:03:5a:
91:83:fd:bb:3f:b7:0e:ae:8d:fc:0c:55:50:c8:44:
08:a1:14:9b:4c:96:e1:0e:5e:96:e1:6c:c4:38:ec:
2f:51:fa:d1:21:bd:15:af:bc:05:af:aa:d6:a2:df:
c9:a5:b5:66:17:10:0a:98:ee:b3:38:18:76:cc:79:
ab:7d:59:1b:35:87:9c:3c:34:a1:ed:2e:e7:e4:f1:
57:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B1:BE:E0:D7:FB:19:A6:C1:E4:3F:54:4F:E3:6E:BE:CA:A8:AC:A0
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/vLG-4Nf7GabB5D9UT-NuvsqorKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.180.124.0/24
Signature Algorithm: sha256WithRSAEncryption
50:65:98:1e:85:09:d5:f8:8a:a7:01:97:e0:38:73:60:86:47:
68:b8:01:e9:7d:b4:64:98:a5:bc:12:5e:fa:61:12:af:a5:6c:
e8:c6:df:ac:6b:4a:cc:09:93:41:e3:bd:d6:dd:6b:c6:0f:3c:
11:6c:19:51:89:b7:30:4c:00:74:f7:42:58:7a:49:ea:6b:fa:
d5:91:75:2d:7b:7c:64:8e:88:b7:8e:67:a2:cc:a6:b6:33:33:
3e:e3:2e:bd:34:ba:69:b2:3a:83:c8:e6:c9:a7:f8:db:f2:3f:
93:e9:c1:0f:35:54:40:7e:ef:dd:74:d3:cd:6d:27:f7:ca:32:
16:c1:56:5d:f9:b1:b4:e4:84:51:84:f6:89:55:66:1c:a9:66:
cf:0b:3b:32:83:6b:f6:c9:62:3e:86:c4:40:a3:dc:d4:b8:bf:
4f:65:4d:c7:14:8e:e3:af:24:4e:93:f0:e4:21:63:9b:49:35:
38:da:ea:f4:79:b0:c3:20:54:81:2e:b0:65:5d:71:8c:5a:d7:
13:7a:70:9b:d1:3a:6b:90:de:c4:66:c7:ba:02:e2:25:5a:29:
e0:9a:a7:d6:a6:b1:e1:53:20:a8:95:88:08:c6:02:51:9e:68:
db:45:66:bd:a4:2f:fe:bc:ac:3c:19:c7:c0:01:19:97:16:dc:
67:6b:a9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:32 2025 by rpki-client