Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/VDL0jUZescSzv5MELC-a-rE5JCE.roa
File: VDL0jUZescSzv5MELC-a-rE5JCE.roa (raw, json)
Hash identifier: yH2w5/mpJASe5msvYhcm/mnPtcMRUmymJTpb0P3nkZo=
Subject key identifier: 54:32:F4:8D:46:5E:B1:C4:B3:BF:93:04:2C:2F:9A:FA:B1:39:24:21
Certificate issuer: /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial: 018CC9BC95691F244BB3D5EC4638F4FE7CC6
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/VDL0jUZescSzv5MELC-a-rE5JCE.roa
Signing time: Tue 02 Jan 2024 10:33:48 +0000
ROA not before: Tue 02 Jan 2024 10:33:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 399734
IP address blocks: 83.231.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:95:69:1f:24:4b:b3:d5:ec:46:38:f4:fe:7c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Validity
Not Before: Jan 2 10:33:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5432f48d465eb1c4b3bf93042c2f9afab1392421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b8:14:a5:ac:28:4a:c7:32:03:d6:05:5d:b2:
75:29:0e:dd:fb:b2:9e:71:02:9e:90:08:59:d1:23:
f9:f8:e8:4a:25:72:7f:d0:3a:3f:c5:6b:b0:c1:df:
50:a0:2a:9b:d7:63:27:b2:e9:1c:4e:d4:6a:f3:f9:
eb:c4:75:19:c8:46:1b:cf:0c:79:23:7f:a0:49:11:
e7:21:6a:d5:36:ae:41:a7:6e:29:94:cd:b9:59:5e:
66:8f:d8:01:47:f5:58:c6:ba:d9:08:21:0b:3c:f5:
7b:f2:65:45:9b:df:6e:5f:38:d8:ff:77:27:ec:cc:
a5:5a:e7:01:9f:77:39:af:66:a4:79:22:a6:77:af:
55:86:13:91:f8:ba:ae:ec:fb:1f:c1:f7:72:8b:dc:
ad:e7:e3:27:17:d4:86:b6:d4:b9:b8:a8:80:ce:f2:
4f:ea:f9:62:fe:7d:63:d7:b1:27:1f:a1:32:af:5a:
54:7d:e2:51:30:aa:a2:f7:af:bc:75:e8:01:e9:72:
90:67:03:3b:3e:09:76:1d:49:1a:b6:1a:6e:9e:3b:
2b:29:86:02:ee:60:ea:b0:22:5d:c9:18:48:07:28:
3f:d0:41:fc:c9:77:37:84:e7:75:fb:8a:7f:1d:3b:
30:4f:71:b1:ab:c2:ea:c0:43:fd:26:11:33:dd:24:
5f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:32:F4:8D:46:5E:B1:C4:B3:BF:93:04:2C:2F:9A:FA:B1:39:24:21
X509v3 Authority Key Identifier:
keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/VDL0jUZescSzv5MELC-a-rE5JCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.231.238.0/24
Signature Algorithm: sha256WithRSAEncryption
53:3b:c4:cb:96:89:ef:0b:49:00:dd:0a:c9:09:20:12:eb:55:
40:41:bf:63:56:39:e7:12:f4:63:47:59:14:e3:7f:e9:05:02:
b1:14:c9:72:c2:aa:14:64:b5:b2:35:6a:b9:dd:ff:f7:6b:93:
c9:57:17:4f:42:57:3c:03:bf:37:74:03:93:ba:bc:37:74:10:
1b:34:15:53:a0:e0:88:4b:cb:78:35:ed:7f:86:5e:49:0e:51:
3b:0d:8d:3d:bc:9f:40:68:79:6d:a8:4a:f3:ef:e7:d2:aa:fa:
b3:81:37:fc:42:3a:66:06:96:62:88:12:7a:6e:df:90:88:f5:
c4:c8:d3:d2:36:fc:e2:cc:59:e5:50:9e:05:ef:c8:59:15:a1:
71:fd:cd:6a:13:35:be:69:6b:56:f3:87:e9:ae:2e:b2:39:90:
f9:52:11:38:7d:fe:71:b0:f7:2f:2f:a0:16:25:ee:3c:07:9b:
62:01:06:d7:54:89:34:9d:a5:97:e8:16:a4:04:4e:ee:e7:b0:
6e:76:e8:46:5f:22:d2:8d:61:a6:b4:0d:d2:a0:2b:13:16:c9:
d0:98:a8:67:f7:08:ed:f3:04:1c:6a:ee:32:ff:44:73:98:43:
6b:25:e3:69:30:5a:d8:bc:e1:50:7f:ba:50:c4:16:cb:29:56:
9c:02:62:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 01:03:33 2024 by rpki-client on console-ams.rpki-client.org