Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VywvLIMnrdMgUQnM-8i9ZvcYUpg.roa
File: VywvLIMnrdMgUQnM-8i9ZvcYUpg.roa (raw, json)
Hash identifier: zVx8D01hva416cL99NEkGIB5ye5J5N5PiEY9dC5eEp8=
Subject key identifier: 57:2C:2F:2C:83:27:AD:D3:20:51:09:CC:FB:C8:BD:66:F7:18:52:98
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DD028A830AF8FEBA69B241255A9E38
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VywvLIMnrdMgUQnM-8i9ZvcYUpg.roa
Signing time: Tue 02 Jan 2024 06:29:36 +0000
ROA not before: Tue 02 Jan 2024 06:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202160
IP address blocks: 87.120.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dd:02:8a:83:0a:f8:fe:ba:69:b2:41:25:5a:9e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=572c2f2c8327add3205109ccfbc8bd66f7185298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:80:cb:e0:2d:ff:59:34:b7:f4:fc:a6:79:8f:
50:1f:4f:e4:9d:ac:ce:b4:6e:9e:40:98:3e:6b:71:
61:2a:3a:f8:45:49:e8:6c:02:b2:3b:69:28:75:66:
9d:72:ba:28:31:5d:e9:7e:54:4e:7d:19:c1:4f:23:
ce:7e:e3:a6:48:a9:58:da:5e:17:ae:45:36:40:8b:
f1:76:e3:43:1e:9c:0b:c9:ce:d7:44:29:57:b7:3b:
96:c1:89:35:7c:86:6e:9a:01:2e:9c:89:0b:b1:95:
28:c0:7c:3c:5e:6d:66:ef:b1:1a:7b:c1:be:20:58:
f7:ce:74:a5:78:50:ab:c9:de:d9:fd:35:71:6f:1e:
e9:17:9f:ed:b9:35:aa:3a:65:da:cd:a2:6d:b6:d8:
77:39:84:d1:07:55:15:e3:5e:3c:a5:db:df:18:51:
fb:a2:ff:bf:b6:90:60:1d:f3:dc:c0:10:f0:53:e8:
40:2f:36:c8:b2:f3:08:cd:43:b7:81:07:bc:93:ce:
ad:f7:7c:95:ef:0c:14:89:e8:61:c9:ca:b2:9e:c5:
9c:38:13:38:87:31:5b:5b:38:05:d6:8f:4f:d9:9c:
12:3a:27:d8:24:54:15:e8:0e:71:52:df:6e:09:7c:
47:9d:1d:57:3c:fe:e9:10:48:6f:17:a3:58:00:ad:
66:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:2C:2F:2C:83:27:AD:D3:20:51:09:CC:FB:C8:BD:66:F7:18:52:98
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VywvLIMnrdMgUQnM-8i9ZvcYUpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.142.0/24
Signature Algorithm: sha256WithRSAEncryption
30:8a:a0:60:61:2e:8e:90:06:43:5e:47:a9:a2:ed:26:67:c2:
ea:b1:0e:85:3b:47:ce:f2:15:85:6b:52:99:e1:ae:ad:68:a6:
5e:62:32:3b:5b:16:85:1d:c9:50:20:eb:ee:8d:58:ce:79:d9:
a0:91:ec:a4:d1:08:9f:33:a8:5e:01:65:1f:84:7f:d1:d9:55:
d9:ac:08:88:15:02:6a:19:2e:a2:da:3e:5b:f2:07:f0:cc:33:
c1:1a:9b:97:80:e0:f4:f7:99:7f:25:d9:7f:7f:57:36:01:b8:
95:2e:16:4a:94:6c:b6:70:c8:e3:2a:c0:14:8c:94:dd:0d:f2:
7a:fc:ca:1e:e0:b0:88:df:8f:18:0e:30:52:e4:21:15:01:c9:
61:47:2b:da:4a:eb:a3:b7:fd:a5:e9:eb:22:ab:e3:35:81:05:
89:4f:44:d5:9c:fd:a7:8b:28:22:b3:f5:da:33:08:b4:28:5b:
14:77:7f:78:77:8f:65:be:b4:3d:15:77:bf:2f:cb:d3:4f:ba:
dc:54:d0:5d:51:d7:66:9f:14:f5:97:d3:38:b6:eb:0b:09:df:
94:b1:5d:f2:e0:8d:1d:a4:50:20:cc:d4:54:23:2a:d3:fc:56:
9e:80:10:d4:76:b6:69:6a:8b:d0:c4:e6:ac:2f:c8:73:7f:e8:
fb:87:83:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:58:06 2024 by rpki-client on console-ams.rpki-client.org