Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/VY_I-jnZ5FCsfaI58ygsn2y3NFI.roa
File: VY_I-jnZ5FCsfaI58ygsn2y3NFI.roa (raw, json)
Hash identifier: 6Gl3wwSR8frdXu3wYdpfIbk9igfvlCW34Jm7lAKNY+U=
Subject key identifier: 55:8F:C8:FA:39:D9:E4:50:AC:7D:A2:39:F3:28:2C:9F:6C:B7:34:52
Certificate issuer: /CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6
Certificate serial: 018ED3ED9657133B7E9BE3BA22A4323105CB
Authority key identifier: 9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/VY_I-jnZ5FCsfaI58ygsn2y3NFI.roa
Signing time: Fri 12 Apr 2024 20:09:06 +0000
ROA not before: Fri 12 Apr 2024 20:09:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 45.158.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d3:ed:96:57:13:3b:7e:9b:e3:ba:22:a4:32:31:05:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6
Validity
Not Before: Apr 12 20:09:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=558fc8fa39d9e450ac7da239f3282c9f6cb73452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1b:59:a0:9e:4a:c3:80:9d:88:9b:87:27:2c:
0d:a4:d8:23:f1:f1:3f:a1:c3:72:81:10:92:81:7a:
87:69:ce:4e:29:64:b2:39:53:36:d3:33:7e:95:1b:
c3:9b:ad:9a:f4:d9:8c:b6:b3:b5:1c:08:85:99:32:
82:03:90:2e:97:93:d0:cd:ff:8f:32:3c:3e:65:d4:
20:2f:5b:a1:02:d0:fe:44:35:56:f3:b0:3f:f7:c4:
a7:98:8b:6b:97:04:8f:a2:a1:b9:d0:da:c3:9e:bc:
8e:c1:7b:e6:9a:73:76:3b:cd:16:15:d4:68:73:fe:
ab:00:28:a7:7a:28:f9:8c:71:7d:63:88:f6:6a:8f:
4a:ea:d5:56:e3:f2:00:36:fc:df:6c:43:35:db:43:
2f:df:94:48:f1:fa:d1:a5:5c:8d:98:bb:ae:55:49:
a7:bd:1f:ff:9d:17:71:62:b7:26:7a:f0:8c:01:d9:
fb:05:1c:14:22:86:be:3f:a9:3b:91:1d:30:7e:70:
69:e1:bb:b2:d3:25:40:78:9c:b0:e3:52:9d:d9:94:
1d:40:d9:19:58:74:dd:2e:73:9f:84:0c:55:04:d7:
6b:42:6d:ad:0b:18:8c:5e:11:f2:5f:11:4f:09:a4:
55:c3:c8:88:74:c0:64:60:7d:75:3a:e3:04:e4:b3:
26:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:8F:C8:FA:39:D9:E4:50:AC:7D:A2:39:F3:28:2C:9F:6C:B7:34:52
X509v3 Authority Key Identifier:
keyid:9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/VY_I-jnZ5FCsfaI58ygsn2y3NFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.39.0/24
Signature Algorithm: sha256WithRSAEncryption
51:b7:bc:82:64:04:37:20:e2:ca:71:4f:a2:cc:7e:54:71:5b:
49:ce:3b:2f:7f:fa:0c:be:a0:96:76:e4:ef:6d:3a:41:16:e5:
93:fe:4a:60:ce:f2:c4:8a:2a:06:46:f2:da:22:49:7d:28:9a:
37:51:8d:5a:89:ce:fa:dc:d6:b2:db:1a:3f:83:53:57:58:b6:
8d:63:78:45:a0:21:89:e1:7a:f2:e6:a4:87:d7:e8:81:6f:3c:
37:76:1e:87:dd:23:16:24:f1:c9:55:16:c2:4e:79:ef:a0:df:
10:48:8d:32:f5:c4:a0:55:b0:6f:f3:b9:47:a8:32:29:b4:fc:
3e:33:3f:29:3d:0f:c6:de:a5:7c:58:b0:b5:7b:94:01:5e:be:
04:7b:01:50:d2:d2:97:7d:6c:3d:f5:08:61:cc:46:1a:34:10:
eb:df:26:8a:6f:4f:1a:86:a6:69:11:3d:34:e4:fc:1d:79:35:
33:0d:06:4d:1e:87:36:55:46:8d:a2:85:75:18:b3:ff:9c:eb:
e4:82:36:e7:2d:bd:fe:96:b2:26:15:23:56:01:aa:40:7f:0d:
d6:df:50:2e:53:43:c0:a8:c0:41:62:78:99:13:4e:f1:12:04:
d5:c8:72:b1:15:d8:9b:67:3c:8b:7b:e6:60:d4:8a:d9:eb:71:
61:2d:5c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 18:10:19 2024 by rpki-client on console-fra.rpki-client.org