Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/VyQSiAENV_R36GbGywJb2Lt26ps.roa
File: VyQSiAENV_R36GbGywJb2Lt26ps.roa (raw, json)
Hash identifier: 5CVoowL+N2ygPXpcEtXEwm7QSAYrscxXbcA0rKCvgsA=
Subject key identifier: 57:24:12:88:01:0D:57:F4:77:E8:66:C6:CB:02:5B:D8:BB:76:EA:9B
Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial: 018CC56E7D6C740AC36F257AA6C42986FB5C
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/VyQSiAENV_R36GbGywJb2Lt26ps.roa
Signing time: Mon 01 Jan 2024 14:30:01 +0000
ROA not before: Mon 01 Jan 2024 14:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137409
IP address blocks: 31.217.248.0/24 maxlen: 24
185.137.164.0/24 maxlen: 24
5.180.179.0/24 maxlen: 24
193.35.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:7d:6c:74:0a:c3:6f:25:7a:a6:c4:29:86:fb:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Validity
Not Before: Jan 1 14:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57241288010d57f477e866c6cb025bd8bb76ea9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d0:56:77:f1:e5:f5:6c:68:55:ec:df:27:03:
b9:ee:1e:63:f4:38:2b:96:cc:68:ac:8a:5f:cb:6a:
ec:1c:87:ed:7b:28:90:ee:60:01:f1:38:d2:55:4c:
f1:29:6b:5c:00:4a:57:4f:c2:2a:3e:9a:55:7a:03:
88:51:dd:af:60:21:e3:79:13:c5:3a:5f:00:83:26:
8c:34:d5:28:2f:b9:27:8b:34:cf:96:e9:58:e6:c1:
c6:fe:d6:02:e7:85:89:69:c4:ab:9a:fc:ef:66:62:
e9:10:f5:0f:42:55:ac:81:1c:b7:01:77:de:37:14:
95:da:a6:ea:cb:42:c3:1b:10:fb:6d:2b:83:9e:12:
62:6e:4d:26:4b:96:86:d3:d6:27:c5:bb:95:cc:bd:
5b:41:fd:c5:f2:cd:05:c0:92:f1:64:aa:94:69:f7:
fe:b0:3f:72:67:74:87:d0:8b:7a:28:56:f0:dd:15:
2c:b0:3a:f4:b8:8a:49:0e:06:d1:59:04:e2:50:fa:
6c:4d:d1:19:d2:d6:3b:0c:24:8d:c2:4a:fe:ba:74:
11:31:2b:9c:fa:69:fb:06:5e:e4:2f:10:d5:87:76:
12:eb:9d:38:e5:3e:36:0d:b2:5a:4c:96:a8:c6:88:
28:d4:45:a5:68:79:a6:11:cf:4c:7d:5e:97:fe:10:
e1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:24:12:88:01:0D:57:F4:77:E8:66:C6:CB:02:5B:D8:BB:76:EA:9B
X509v3 Authority Key Identifier:
keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/VyQSiAENV_R36GbGywJb2Lt26ps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.179.0/24
31.217.248.0/24
185.137.164.0/24
193.35.228.0/24
Signature Algorithm: sha256WithRSAEncryption
62:37:7b:4a:7c:df:d9:34:01:a1:c3:d9:13:1b:ee:b7:45:98:
27:69:8c:17:99:93:0f:b4:70:c1:cf:39:e2:d9:8e:24:82:2d:
5a:2f:07:a8:03:93:24:50:c9:25:d6:87:73:fb:4f:34:0e:8a:
3d:6b:6f:04:7d:12:d7:cc:18:16:a0:9a:99:e2:7c:c1:34:6a:
e1:ba:d3:d3:ce:d9:5d:23:f0:b6:6c:7b:13:f2:c2:68:ac:52:
05:39:a9:c6:55:94:6b:0d:b6:e5:e6:c8:09:a4:e4:86:c2:21:
c7:2d:c6:44:fe:cf:94:4e:2e:60:5d:ef:e4:89:c8:66:48:cf:
c6:c9:0e:00:28:4e:92:94:20:d7:71:85:b5:19:1b:46:84:5d:
5d:cc:c1:74:82:fa:37:6f:9f:2a:19:37:f8:c7:dc:64:f6:2d:
68:0f:d6:56:4e:1f:3d:fe:7c:04:88:86:89:5e:4e:ea:2f:ce:
48:17:b3:33:5f:de:59:60:2f:a0:5e:6d:66:b4:fa:6a:76:07:
6e:9d:61:21:1e:d4:5a:62:a3:90:9d:58:49:53:fa:3f:55:27:
a8:b6:80:b2:02:2b:ee:05:07:0d:dc:b2:18:1d:3a:b3:73:6d:
c0:b8:f9:f7:89:c3:c9:62:90:41:3d:85:4c:91:d0:13:9b:c0:
0d:bb:ae:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 04:08:51 2024 by rpki-client on console-ams.rpki-client.org