Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/vSFrHdE5yQxJdJeGzEMuWnp9E5U.roa
File: vSFrHdE5yQxJdJeGzEMuWnp9E5U.roa (raw, json)
Hash identifier: 67WpJMIoQ0bI5lvuDKx3m+hoHpr7MT3Tnm6JsCOmbTg=
Subject key identifier: BD:21:6B:1D:D1:39:C9:0C:49:74:97:86:CC:43:2E:5A:7A:7D:13:95
Certificate issuer: /CN=936cb336c1beb71d4fbbaae243b23352c6270061
Certificate serial: 018CC4254CD1DD6DD6CFEEA6A4EE77CC58ED
Authority key identifier: 93:6C:B3:36:C1:BE:B7:1D:4F:BB:AA:E2:43:B2:33:52:C6:27:00:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/vSFrHdE5yQxJdJeGzEMuWnp9E5U.roa
Signing time: Mon 01 Jan 2024 08:30:27 +0000
ROA not before: Mon 01 Jan 2024 08:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210923
IP address blocks: 46.175.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 16:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:4c:d1:dd:6d:d6:cf:ee:a6:a4:ee:77:cc:58:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=936cb336c1beb71d4fbbaae243b23352c6270061
Validity
Not Before: Jan 1 08:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd216b1dd139c90c49749786cc432e5a7a7d1395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:70:da:b3:f7:08:79:ae:ee:56:67:bd:d2:47:
89:42:26:40:14:45:52:5c:ab:cb:e8:31:76:cc:13:
15:11:0e:82:68:42:3a:f1:ed:bf:f7:e1:2a:5f:b6:
13:32:9e:92:cf:2d:98:11:2e:0d:4c:db:08:dc:e5:
81:2f:29:62:63:c9:02:25:c8:87:ac:8a:44:c1:4c:
3b:24:25:ac:77:07:e6:bc:55:29:b2:2e:9c:f8:24:
b9:b3:07:bb:63:f3:51:ed:1d:9c:d3:89:51:2c:a9:
2d:c2:17:13:ea:c0:d9:0c:23:30:fa:aa:f8:31:e8:
b5:4f:65:ae:ab:45:53:0a:d6:9f:50:51:7d:a3:69:
0f:f4:43:9f:17:9a:59:ab:11:0f:13:31:4b:cd:64:
13:db:98:46:0f:e6:18:f0:2e:a4:f3:82:04:66:af:
05:63:bd:69:e8:41:d6:31:e3:08:cf:b1:8a:d9:5f:
75:06:66:c9:07:89:52:8f:b9:a9:bf:6e:27:1f:12:
1b:86:fe:81:0c:0c:fd:89:92:ff:ee:84:65:2b:60:
45:2a:aa:3c:f3:30:52:f0:e8:ea:a1:6f:e4:11:62:
9b:12:7b:fa:49:6e:d7:7c:6d:f8:72:dc:c5:c8:8f:
76:85:e1:91:a8:c5:51:e7:05:10:e9:07:ae:ec:87:
52:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:21:6B:1D:D1:39:C9:0C:49:74:97:86:CC:43:2E:5A:7A:7D:13:95
X509v3 Authority Key Identifier:
keyid:93:6C:B3:36:C1:BE:B7:1D:4F:BB:AA:E2:43:B2:33:52:C6:27:00:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/vSFrHdE5yQxJdJeGzEMuWnp9E5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.175.134.0/24
Signature Algorithm: sha256WithRSAEncryption
89:0e:20:af:29:4c:74:ab:b3:55:ef:82:c4:d3:63:2b:56:c5:
53:bc:98:35:76:44:38:55:32:5e:2e:2a:5d:6f:87:30:bd:46:
13:ff:6a:09:3c:88:be:78:b6:e2:fd:a3:cd:f5:5a:24:f9:80:
dd:b0:5b:49:32:c3:d9:2b:ac:20:0e:73:78:dc:b4:ee:ba:f4:
f4:8a:45:47:bf:c8:1e:5c:b4:bf:50:ac:bc:10:de:49:ae:7d:
7a:53:cc:19:b7:b2:e5:c1:4e:a3:c1:90:9b:83:68:da:d4:e6:
45:ba:28:ee:60:d3:b9:88:28:88:d8:51:d7:9f:23:63:80:18:
08:cd:a4:c7:ce:bd:58:d8:fb:d1:23:5d:61:85:3d:80:c3:09:
87:7c:d6:98:5a:12:85:89:fb:11:6c:9b:27:ae:b5:88:c9:bb:
0e:74:d2:eb:9e:c1:cd:ba:30:3a:63:04:a3:97:fd:f3:f6:5c:
46:15:ee:12:f5:9d:ec:9e:61:b5:85:7d:0b:b4:93:b5:df:8a:
0e:ee:5f:78:20:23:48:f5:31:fe:63:c5:64:03:58:ff:fa:0c:
92:40:31:97:51:16:98:20:70:40:78:95:1c:6a:ba:92:c5:a9:
a1:78:ea:1a:3d:64:f4:a5:15:21:db:64:e8:0d:fa:50:b0:5e:
6c:26:c7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:27:46 2024 by rpki-client on console-ams.rpki-client.org