Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VQZEgCxEMJhEv0MFo4wmlj2r_Zw.roa
File: VQZEgCxEMJhEv0MFo4wmlj2r_Zw.roa (raw, json)
Hash identifier: zAuUkqiFMImKjbd33MUXuKO42/V+RF2j0mWuxpBAm2U=
Subject key identifier: 55:06:44:80:2C:44:30:98:44:BF:43:05:A3:8C:26:96:3D:AB:FD:9C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018D784EA58235EA43B8A8B671DA4840885A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VQZEgCxEMJhEv0MFo4wmlj2r_Zw.roa
Signing time: Mon 05 Feb 2024 08:07:16 +0000
ROA not before: Mon 05 Feb 2024 08:07:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24875
IP address blocks: 87.121.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:78:4e:a5:82:35:ea:43:b8:a8:b6:71:da:48:40:88:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 5 08:07:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=550644802c44309844bf4305a38c26963dabfd9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:23:19:41:88:03:e3:c7:e3:ad:23:2b:a1:d1:
c6:5b:60:ff:4f:96:ee:43:62:e0:b1:28:c6:83:fc:
75:68:5b:8d:7f:d9:62:10:39:25:e2:7a:87:4d:88:
96:d5:0f:9a:cd:77:7b:89:b4:4a:23:1a:2b:69:94:
b2:78:00:0c:81:ac:fc:0b:7b:58:12:f1:14:ae:3a:
9e:df:6a:bf:9b:ec:6a:72:60:14:44:d8:b4:42:77:
13:ce:a3:e9:af:20:c3:e0:17:81:77:8d:ea:ce:52:
cb:92:0a:cf:a3:b4:4f:1f:89:d1:c8:ca:a4:fc:2d:
09:36:1b:e6:2c:f1:d7:59:31:fb:6f:27:2a:69:15:
a0:a4:5a:db:89:a3:ff:bb:b7:9e:58:2d:a0:d5:f8:
7b:97:4e:69:58:6a:41:d1:8d:24:06:ba:6d:de:b7:
90:ad:b0:67:3b:84:62:d9:e4:cd:dc:47:54:4b:a3:
69:74:f1:5d:52:1e:3c:67:6c:39:84:0a:aa:1b:ba:
e1:c0:a2:a6:a6:1b:e2:70:90:69:1a:b7:3f:1a:ea:
03:06:db:bf:97:03:0b:05:dd:5c:50:39:aa:fc:65:
ba:ff:7d:73:e3:a5:91:cf:d8:b0:e9:88:ae:59:93:
3f:49:18:21:ea:0c:c0:f7:45:16:51:28:a8:3a:96:
bd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:06:44:80:2C:44:30:98:44:BF:43:05:A3:8C:26:96:3D:AB:FD:9C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VQZEgCxEMJhEv0MFo4wmlj2r_Zw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.220.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:b1:a1:95:87:72:75:a1:01:3f:69:ca:03:a2:5e:b6:4b:a7:
60:b7:63:99:60:fc:17:1e:8e:d8:0d:b0:3d:94:c6:b7:30:f3:
63:76:f0:63:a9:7e:0a:d1:77:20:00:48:da:11:d1:57:92:a8:
aa:65:78:c3:c6:66:7a:3f:92:32:0b:e0:8a:0e:68:28:a3:33:
e6:e7:9c:8a:4f:ef:85:3b:ec:1f:ce:dc:d6:4a:56:5c:d7:8a:
6a:76:81:ec:03:c5:71:43:bf:ce:30:90:36:f4:5c:43:4d:86:
7c:4e:71:15:21:8c:2f:e9:67:fe:4a:dd:46:6a:81:87:c0:f1:
85:03:d2:50:25:6f:1c:61:37:a3:d1:2a:c7:d3:53:42:83:a6:
04:48:36:f7:2e:d6:b6:cf:f6:23:e4:79:f7:ef:f8:01:55:9c:
5b:c2:cd:70:d0:65:8e:d1:29:9b:3b:ac:fd:4a:a6:b1:e4:64:
ba:7e:72:71:f1:9b:54:c1:51:fd:8c:83:50:6c:d3:cc:30:50:
29:42:43:86:28:d9:26:36:3b:0b:9f:a6:71:8e:5b:98:5f:81:
2f:dc:35:2f:0b:a9:a6:f2:c6:81:97:d9:bb:f9:1d:03:59:aa:
bc:3f:32:34:85:ec:53:51:8c:0a:63:75:67:79:70:48:76:f9:
50:81:ef:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 14:36:14 2024 by rpki-client on console-ams.rpki-client.org