Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/vhsKlufdaEGrccAo_ruGxylvRhg.roa
File: vhsKlufdaEGrccAo_ruGxylvRhg.roa (raw, json)
Hash identifier: mODTvSUUAKHDZaQ4n2VntNvJ0OJ6QOSBtH0uvhLPyO8=
Subject key identifier: BE:1B:0A:96:E7:DD:68:41:AB:71:C0:28:FE:BB:86:C7:29:6F:46:18
Certificate issuer: /CN=6246bd00daa4da92a0c36facdd9cd69491d96c68
Certificate serial: 01905194579124CE05D695C56C108944E3B8
Authority key identifier: 62:46:BD:00:DA:A4:DA:92:A0:C3:6F:AC:DD:9C:D6:94:91:D9:6C:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/vhsKlufdaEGrccAo_ruGxylvRhg.roa
Signing time: Tue 25 Jun 2024 22:46:34 +0000
ROA not before: Tue 25 Jun 2024 22:46:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39128
IP address blocks: 195.114.96.0/23 maxlen: 24
2001:67c:2974::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jul 2024 14:20:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:51:94:57:91:24:ce:05:d6:95:c5:6c:10:89:44:e3:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6246bd00daa4da92a0c36facdd9cd69491d96c68
Validity
Not Before: Jun 25 22:46:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be1b0a96e7dd6841ab71c028febb86c7296f4618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:0b:05:43:50:dc:98:92:8a:4f:1d:c9:2f:41:
93:4a:a9:5b:1c:19:bd:fa:12:3e:2c:5d:d3:6b:3a:
64:ef:fc:2b:f8:3d:57:26:88:b4:31:2c:48:80:f3:
b7:22:d3:2a:1a:21:7c:d4:87:a7:30:27:1f:df:68:
f0:0a:e8:d5:42:10:b3:c4:cb:7c:93:53:b2:e1:45:
10:c8:be:a8:b6:d8:7a:c9:89:af:e1:bc:26:90:8d:
44:df:eb:a7:6e:9b:35:58:69:8e:a1:55:94:14:f4:
2a:d2:83:a6:6e:cf:68:57:f7:a3:d9:76:58:e2:f6:
48:93:a7:2f:59:62:6b:be:82:49:41:d9:b9:db:d5:
54:6c:7a:ec:46:7a:46:09:9f:de:d2:0e:49:ae:10:
fb:15:6e:03:e1:d7:89:50:6d:04:45:56:da:17:be:
d8:9f:f6:52:59:c7:1c:d0:88:45:58:54:51:7a:36:
fc:0d:19:22:59:34:67:af:f0:15:ab:da:72:51:69:
65:bd:7d:41:3e:b1:48:85:23:af:9f:06:56:80:c5:
2c:1d:7e:48:57:d3:e9:cf:70:f2:64:d3:1c:a9:0c:
7d:18:0d:e3:d8:32:2d:63:c1:5e:35:00:45:fd:98:
82:b8:7e:b5:73:4f:96:38:a4:4e:54:ba:32:22:5c:
60:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:1B:0A:96:E7:DD:68:41:AB:71:C0:28:FE:BB:86:C7:29:6F:46:18
X509v3 Authority Key Identifier:
keyid:62:46:BD:00:DA:A4:DA:92:A0:C3:6F:AC:DD:9C:D6:94:91:D9:6C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/vhsKlufdaEGrccAo_ruGxylvRhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.114.96.0/23
IPv6:
2001:67c:2974::/48
Signature Algorithm: sha256WithRSAEncryption
2a:de:9d:5b:e3:69:b1:a8:bc:4f:20:50:d4:20:24:8c:80:a8:
fd:96:cd:ed:59:06:dc:54:85:b6:70:b5:7e:64:83:5f:29:d7:
af:66:71:04:0d:a5:48:80:2d:d5:4a:b6:3c:ca:b8:49:ee:a6:
ec:7f:a1:fb:41:a4:69:8f:2d:7d:ac:27:fb:15:5f:84:d9:10:
d9:a3:02:07:75:f7:2b:20:d1:2b:02:14:dc:d4:da:80:9f:da:
f9:f3:41:8a:71:a2:a5:d5:16:75:00:8a:76:58:da:34:63:ae:
f1:c4:09:fa:bb:82:04:b6:15:45:67:64:c2:d9:db:41:af:ce:
59:b3:b6:64:ee:8d:61:57:b8:3a:d9:1b:15:1d:5a:db:2f:d4:
2f:28:9e:a5:6d:bd:de:26:57:34:8b:95:71:14:59:72:36:07:
f7:21:97:90:6f:22:63:5b:1f:d3:5e:ed:93:c9:6a:da:02:0d:
12:8b:e8:23:29:3d:d4:37:0c:1f:d6:1a:ed:ba:60:54:95:37:
03:16:30:17:21:90:f9:11:54:d6:b8:ef:f5:7a:03:62:b2:85:
9e:34:b7:65:54:32:6b:27:33:8f:95:c6:e5:09:44:5c:b8:54:
bb:6b:e8:04:c1:41:83:0b:ab:31:f2:46:98:e8:fa:8c:b7:11:
51:ee:14:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 22:17:46 2024 by rpki-client on console-fra.rpki-client.org