Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/vPLaAx0ytLAxerT0rmwbzFdBa3U.roa
File: vPLaAx0ytLAxerT0rmwbzFdBa3U.roa (raw, json)
Hash identifier: XJGtaybc5stei7ra0PHrMoaOzR6KXyu52aVFViLTKvo=
Subject key identifier: BC:F2:DA:03:1D:32:B4:B0:31:7A:B4:F4:AE:6C:1B:CC:57:41:6B:75
Certificate issuer: /CN=3ed42a0487705606015e5a30da1e70f407e59e99
Certificate serial: 018CC6B7B32A74DD2336B8B6CF14631DD59A
Authority key identifier: 3E:D4:2A:04:87:70:56:06:01:5E:5A:30:DA:1E:70:F4:07:E5:9E:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PtQqBIdwVgYBXlow2h5w9Aflnpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/vPLaAx0ytLAxerT0rmwbzFdBa3U.roa
Signing time: Mon 01 Jan 2024 20:29:36 +0000
ROA not before: Mon 01 Jan 2024 20:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2848
IP address blocks: 93.180.0.0/18 maxlen: 18
188.44.32.0/19 maxlen: 19
89.249.160.0/20 maxlen: 20
2a00:f480::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PtQqBIdwVgYBXlow2h5w9Aflnpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 01:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:b3:2a:74:dd:23:36:b8:b6:cf:14:63:1d:d5:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ed42a0487705606015e5a30da1e70f407e59e99
Validity
Not Before: Jan 1 20:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bcf2da031d32b4b0317ab4f4ae6c1bcc57416b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ad:ac:f9:dd:26:70:48:f0:f4:ea:a9:95:04:
f5:db:5b:43:d9:1d:36:b4:15:1d:10:af:ea:ad:d5:
cf:c7:54:82:88:29:99:c9:36:b4:95:0c:4f:ad:24:
29:28:38:cb:f1:85:66:e9:00:e8:8f:28:91:b3:60:
19:44:6c:a2:cd:e5:2b:c5:21:53:fe:2d:50:c3:a7:
8d:ad:fc:62:5f:8d:64:ed:d4:f6:ed:c9:a7:43:1a:
f7:76:61:30:d0:ae:76:f2:61:8b:cb:14:a2:ea:23:
24:44:5a:31:76:6c:f8:6f:a8:c1:c9:4a:4d:66:50:
b0:61:81:5a:86:b2:dc:6a:f0:40:7d:e6:a0:5a:77:
e8:e0:a3:c5:b2:50:11:90:cb:b3:36:7b:6c:26:90:
55:ca:74:da:1a:2e:96:a7:10:9b:d8:e1:d5:40:dc:
fc:90:8d:af:ca:ee:42:f6:ad:ec:bc:88:22:a9:0c:
5b:b2:31:65:00:c3:d2:a6:22:16:e3:32:17:24:77:
3b:47:38:61:92:b8:b4:7e:4e:2d:b1:5c:69:23:24:
5c:a1:7c:82:38:d8:63:f1:e0:78:10:b6:a5:ce:7d:
28:1d:69:05:ec:05:8e:09:f9:bd:8d:db:fa:5b:ad:
d9:9e:96:30:4d:28:61:18:b5:eb:3e:d2:e5:8c:2f:
b4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F2:DA:03:1D:32:B4:B0:31:7A:B4:F4:AE:6C:1B:CC:57:41:6B:75
X509v3 Authority Key Identifier:
keyid:3E:D4:2A:04:87:70:56:06:01:5E:5A:30:DA:1E:70:F4:07:E5:9E:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PtQqBIdwVgYBXlow2h5w9Aflnpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/vPLaAx0ytLAxerT0rmwbzFdBa3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.160.0/20
93.180.0.0/18
188.44.32.0/19
IPv6:
2a00:f480::/32
Signature Algorithm: sha256WithRSAEncryption
94:35:db:4d:28:93:7e:47:cb:5a:20:35:70:d0:4b:79:42:c2:
c7:e7:5c:cd:40:09:8b:46:e7:cc:b7:f9:83:d0:ce:42:08:2b:
36:50:0e:88:a0:4d:89:85:b8:ad:ee:86:5b:b9:de:44:38:bf:
94:98:73:19:4c:ba:8c:6e:0d:13:85:f2:29:be:45:eb:6e:36:
da:49:56:b8:28:6e:f1:04:d1:c8:ec:c7:05:ed:bc:44:cd:e0:
8b:91:80:c3:af:e1:22:8f:48:34:fa:74:17:5c:9d:94:12:26:
77:d2:89:74:7f:a2:16:b4:51:3c:73:c3:e0:df:3d:e1:05:5d:
75:3b:01:b5:e7:32:af:09:c0:37:48:ae:dd:5f:f8:c3:5a:b1:
27:e2:27:87:57:c5:a1:6e:ac:9b:66:c3:ac:dd:d5:49:bd:00:
69:93:21:a6:19:ec:e5:e2:92:a4:65:05:bc:a3:cc:33:3f:f9:
ab:ef:fe:24:e5:4e:7e:66:38:2f:33:d8:06:db:06:61:cd:eb:
1b:da:ff:4f:f0:69:a0:b0:57:fe:6f:b4:df:3b:d7:a1:4e:ad:
59:5e:85:ea:e0:30:ad:1a:7f:66:99:af:4c:4e:7d:ed:7d:40:
72:26:44:79:e9:39:ea:5e:77:5c:04:70:d9:b2:00:5b:44:cb:
82:17:23:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 10:20:07 2024 by rpki-client on console-fra.rpki-client.org