Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/vRZ-NtCK9WI0NjQbpRgXDM8l1Tk.roa
File: vRZ-NtCK9WI0NjQbpRgXDM8l1Tk.roa (raw, json)
Hash identifier: BbUnMHoO1S+MimsV5Wihdl/YNwYEElrN8rY6G7/3HtY=
Subject key identifier: BD:16:7E:36:D0:8A:F5:62:34:36:34:1B:A5:18:17:0C:CF:25:D5:39
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 018CC64A8030076BEA25FE82B6446735107F
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/vRZ-NtCK9WI0NjQbpRgXDM8l1Tk.roa
Signing time: Mon 01 Jan 2024 18:30:20 +0000
ROA not before: Mon 01 Jan 2024 18:30:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198044
IP address blocks: 46.243.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:80:30:07:6b:ea:25:fe:82:b6:44:67:35:10:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 18:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd167e36d08af5623436341ba518170ccf25d539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a7:7d:4f:65:1f:fc:60:58:e5:b6:85:25:af:
89:c4:11:c2:74:8e:1f:29:68:dc:63:0e:4f:d4:1b:
20:1b:bc:8d:53:f3:0b:0b:eb:35:a4:eb:bd:af:61:
19:84:31:35:49:ca:0b:e2:f8:10:58:fb:0b:04:bf:
95:77:63:13:6c:dd:24:75:6e:e0:c3:d6:4d:f7:5c:
27:5a:06:39:d6:83:13:95:90:ce:18:c3:c4:63:88:
27:63:d3:b8:77:68:88:ba:6f:d3:d9:a9:54:87:83:
22:66:aa:e1:5c:7f:62:99:81:b6:50:1f:15:18:1c:
8b:54:46:5a:37:d4:53:bc:49:74:1f:4b:6d:01:6f:
16:f2:4d:fb:57:37:4c:05:46:93:db:0b:ba:b4:be:
13:37:b9:78:1a:ff:88:54:9a:11:05:db:a4:90:e4:
21:f4:46:57:99:03:fe:f8:9a:a4:ce:7e:0e:86:85:
cc:4f:7d:b4:06:f0:35:99:ee:e0:ee:0f:90:82:c9:
4d:bc:e9:e8:13:b1:a4:e8:99:70:0a:0b:61:f6:3f:
ac:54:65:ec:f7:95:69:7f:ca:3b:03:62:89:7a:cf:
49:20:cf:b4:58:dd:9d:2b:35:1c:cb:9f:6d:8a:39:
49:10:f5:61:95:73:70:36:eb:b0:2a:8b:f2:26:35:
dc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:16:7E:36:D0:8A:F5:62:34:36:34:1B:A5:18:17:0C:CF:25:D5:39
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/vRZ-NtCK9WI0NjQbpRgXDM8l1Tk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.253.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:01:53:93:66:ca:18:20:7f:e5:31:0a:e9:d5:06:e3:4e:ec:
c7:5c:8d:f4:12:24:d7:ed:51:73:26:e3:66:5a:72:e0:d6:c0:
b0:3f:40:00:7d:ef:82:7e:88:39:17:24:b6:fa:ca:55:2a:00:
b1:79:82:2b:fa:4c:7a:94:fe:1e:c2:39:1f:aa:4f:3f:20:16:
a1:3a:82:d8:31:3b:65:3c:a8:b8:28:57:a5:1e:3a:29:5e:a9:
a5:e1:d1:a4:29:66:16:28:ab:fe:69:99:06:f6:86:f6:1e:d0:
65:e7:a0:07:77:6c:27:0b:ff:f3:e6:d8:bb:09:a4:32:fa:ad:
61:5a:a2:ef:b5:52:28:67:2d:2a:84:95:ae:40:76:d3:85:de:
78:5a:c9:4f:57:5c:6a:eb:9e:97:5e:36:32:91:50:43:e4:1a:
cc:4f:09:b9:40:29:48:ec:5e:43:78:c4:de:b0:74:23:72:d3:
9a:cb:86:e5:fb:b8:6a:11:27:04:a9:a7:39:98:04:1e:da:84:
ba:20:1d:c9:f5:7b:b2:88:eb:3b:1a:ad:df:9f:e6:11:66:cb:
76:33:23:dc:2b:02:11:ea:22:1d:20:5c:2a:84:cf:24:7c:a9:
d0:a2:60:e9:51:79:27:ef:d0:b3:ae:dd:e3:a7:0b:69:7e:16:
d2:2d:02:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 12:31:40 2024 by rpki-client on console-ams.rpki-client.org