Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/vnzz_HwfvY8vw-eSD_C6PXKBfcM.roa
File: vnzz_HwfvY8vw-eSD_C6PXKBfcM.roa (raw, json)
Hash identifier: 1ddTGlZQgh50jPcoT7u1QbcmXkj+1OWiX4FvUYrN1GE=
Subject key identifier: BE:7C:F3:FC:7C:1F:BD:8F:2F:C3:E7:92:0F:F0:BA:3D:72:81:7D:C3
Certificate issuer: /CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
Certificate serial: 01904A90FDEA06420F1E71D489E97B45C252
Authority key identifier: 08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/vnzz_HwfvY8vw-eSD_C6PXKBfcM.roa
Signing time: Mon 24 Jun 2024 14:05:34 +0000
ROA not before: Mon 24 Jun 2024 14:05:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 195.69.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4a:90:fd:ea:06:42:0f:1e:71:d4:89:e9:7b:45:c2:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
Validity
Not Before: Jun 24 14:05:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be7cf3fc7c1fbd8f2fc3e7920ff0ba3d72817dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:97:cd:82:e0:f1:a0:6e:f1:45:00:f0:3d:f9:
de:32:e3:32:38:b9:e9:56:a6:b3:59:24:06:3e:5c:
f3:90:db:72:03:b3:a5:85:0e:67:cb:69:1c:4a:23:
d0:8f:48:3f:97:18:a3:05:c3:96:f2:ba:ad:33:33:
b4:27:92:02:dd:fd:26:33:28:39:e6:7b:01:db:49:
41:5b:86:67:49:42:29:b0:6b:f9:1d:61:e5:b8:b4:
f4:6e:ce:98:f0:0e:c3:96:4c:b8:90:2a:34:a8:b3:
ae:80:c6:af:29:82:c3:08:8c:b5:66:12:04:4a:b2:
e4:8d:49:f3:2d:b9:2e:fb:25:0a:ff:28:3a:47:ed:
10:d4:9b:40:4f:46:0c:bf:4d:64:ba:c4:2b:6b:05:
6e:6e:d5:56:c5:a1:f9:c7:41:ca:9c:a7:51:24:30:
44:d4:54:15:ec:f9:15:04:de:54:3e:0a:96:3e:fd:
3b:c4:8b:57:8d:13:c8:0d:54:0d:02:d1:96:91:e8:
8d:d2:9d:62:0c:0d:0f:e2:20:53:02:9d:cb:aa:12:
0e:87:7f:2c:c5:9a:ea:00:da:b6:8e:13:53:b8:12:
27:d2:18:cb:39:e9:98:b1:c0:c4:f8:00:90:6e:ac:
30:94:b2:09:68:7e:a1:85:c0:49:5f:20:6e:99:ba:
1c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:7C:F3:FC:7C:1F:BD:8F:2F:C3:E7:92:0F:F0:BA:3D:72:81:7D:C3
X509v3 Authority Key Identifier:
keyid:08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/vnzz_HwfvY8vw-eSD_C6PXKBfcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.69.163.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:aa:56:01:51:16:ca:5a:30:43:04:63:30:39:bf:45:8f:7e:
71:19:ac:b4:5a:e4:ed:68:e5:fd:32:87:45:b4:3c:b1:df:40:
f5:e0:09:e8:54:7e:17:82:64:23:e8:4f:2d:56:11:f0:d8:02:
16:6f:e0:78:6f:cf:79:5b:fa:46:fc:c8:70:d2:ce:71:f3:7d:
47:8e:7d:94:db:1a:6b:64:bb:e5:be:bd:05:69:cd:83:20:28:
c9:21:62:3b:6b:fa:64:64:95:3e:79:1d:9b:3c:ce:08:c1:95:
57:10:1e:42:5a:97:9c:44:f5:0d:7e:3f:29:30:1d:db:b8:ff:
fc:21:e4:97:cf:3e:5e:61:22:0c:5c:5c:cf:5e:52:a0:72:b6:
3e:81:e3:f2:48:e9:c2:e3:aa:11:14:ad:23:de:fc:e0:6c:0c:
b3:f5:c0:e8:a3:03:6a:95:82:f6:ae:80:16:55:a7:ba:35:e2:
00:d4:de:2e:b4:80:47:db:af:19:e2:18:71:ec:26:54:d0:4f:
37:20:01:05:ae:c8:27:c0:f3:9e:53:ad:97:da:ef:5c:ee:47:
e1:1d:25:0f:e9:c0:b6:f4:96:84:2e:90:23:96:f6:7a:28:25:
b9:ce:34:b3:4f:13:ad:08:02:8e:4d:1f:7a:bd:87:2a:8d:de:
71:7f:61:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:19:14 2024 by rpki-client on console-ams.rpki-client.org