Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Vp6ENt2XmZ14xeV7IooyWDnES8g.roa
File: Vp6ENt2XmZ14xeV7IooyWDnES8g.roa (raw, json)
Hash identifier: sQ/YPyF+O9eYlhM8pCA+tAqduHKe/QMN8yzbMgbPlyw=
Subject key identifier: 56:9E:84:36:DD:97:99:9D:78:C5:E5:7B:22:8A:32:58:39:C4:4B:C8
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DD00589B9266879689A4A691A346C0
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Vp6ENt2XmZ14xeV7IooyWDnES8g.roa
Signing time: Tue 02 Jan 2024 06:29:35 +0000
ROA not before: Tue 02 Jan 2024 06:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201409
IP address blocks: 93.123.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dd:00:58:9b:92:66:87:96:89:a4:a6:91:a3:46:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=569e8436dd97999d78c5e57b228a325839c44bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f6:e3:c0:60:1d:70:3c:72:3b:36:da:1c:ab:
07:62:06:50:a8:2d:09:79:9b:0b:e6:73:37:b5:57:
35:b8:a2:ce:e7:3a:0b:65:14:e3:18:dc:30:be:db:
da:44:d4:6c:cb:25:51:fc:82:b5:9e:7e:e9:af:33:
47:3f:21:a9:5f:92:0f:3e:eb:4f:49:d5:98:f6:70:
3b:12:dd:9a:56:95:98:b6:f5:c1:08:c6:a1:90:a0:
f7:2d:d5:bc:f2:0d:95:68:30:a8:e4:e1:2c:25:9c:
63:54:e1:51:6c:20:6a:a3:89:be:7b:2a:d8:12:cb:
f6:72:df:16:d1:54:86:8b:db:70:4e:3d:0a:1a:d9:
06:74:51:50:c1:45:56:29:e7:60:dc:09:cc:bc:21:
9e:32:b9:e9:13:2d:9d:36:1b:f2:8f:0d:30:8d:3e:
65:d7:d9:95:7c:0a:73:86:b6:fb:b5:35:42:a7:cf:
88:8c:8a:2d:7d:81:18:b7:a2:d3:f6:0d:28:d9:77:
d4:b5:af:27:36:7f:0f:4e:a7:05:de:d3:be:4b:6d:
14:06:12:6d:a7:6e:9a:dd:f8:29:cf:08:cd:f5:0f:
44:1d:ba:ab:be:2c:e2:ff:d4:16:57:3f:bd:07:d5:
ed:38:cc:03:0f:aa:1f:6e:23:0b:54:53:e5:29:e4:
38:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:9E:84:36:DD:97:99:9D:78:C5:E5:7B:22:8A:32:58:39:C4:4B:C8
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Vp6ENt2XmZ14xeV7IooyWDnES8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.118.0/24
Signature Algorithm: sha256WithRSAEncryption
09:1d:91:d4:36:b0:84:80:7b:34:1c:d4:f5:e3:e5:65:2e:12:
6a:0e:e7:f8:a6:81:71:d4:69:7e:e4:12:48:06:90:c7:1d:05:
c0:50:56:46:65:50:0c:2c:48:5a:6c:71:3a:a2:5c:2e:d5:b8:
0e:bb:71:0c:b1:34:d7:6c:4a:87:96:13:86:97:49:cb:fa:0d:
fa:ac:6a:37:0d:4c:ff:7e:13:c1:47:9c:51:14:fa:93:96:46:
e6:10:0c:6b:09:8b:e0:9a:4e:e4:be:ed:4c:ce:c3:56:9d:dc:
76:b9:c6:01:e7:eb:24:2e:1b:84:78:ac:06:85:6e:41:0e:bd:
d1:1a:48:a2:6b:dd:0f:59:a8:3d:d7:9b:7e:5c:66:e8:30:49:
a3:8b:e0:47:89:53:ea:87:ff:61:1a:0f:a8:e8:0b:70:3c:4b:
d4:cb:f8:26:5d:c1:8c:a7:d9:a4:91:3c:d9:45:6b:35:d0:2b:
9d:3b:35:bd:4c:33:05:ef:0e:f5:46:7b:33:0d:a8:ee:b3:21:
8d:e4:83:d1:cb:9c:bc:5d:95:8c:9c:a4:8d:14:3d:3b:49:a5:
b7:34:d7:58:e9:84:a3:b1:f6:cc:3b:02:f5:47:8e:c1:70:00:
16:75:2b:8f:0f:c3:89:2f:a9:d1:63:24:30:b8:17:d6:5b:7a:
5a:9a:cd:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 10:04:19 2024 by rpki-client on console-ams.rpki-client.org