Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/9VC_dfpkfJKNDzhlodpLblb0J4w.roa
File: 9VC_dfpkfJKNDzhlodpLblb0J4w.roa (raw, json)
Hash identifier: sbYAIMfdxJDH2QwZ+fdWYBWeUihjAlxJE19Jxd452nI=
Subject key identifier: F5:50:BF:75:FA:64:7C:92:8D:0F:38:65:A1:DA:4B:6E:56:F4:27:8C
Certificate issuer: /CN=e4d7aaa3d25c2f9ebbec74c830cc0cde9318c8f8
Certificate serial: 0191355ABD60099E2E6D76122E686024AF98
Authority key identifier: E4:D7:AA:A3:D2:5C:2F:9E:BB:EC:74:C8:30:CC:0C:DE:93:18:C8:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Neqo9JcL5677HTIMMwM3pMYyPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/9VC_dfpkfJKNDzhlodpLblb0J4w.roa
Signing time: Fri 09 Aug 2024 04:17:04 +0000
ROA not before: Fri 09 Aug 2024 04:17:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6079
IP address blocks: 94.231.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Neqo9JcL5677HTIMMwM3pMYyPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:35:5a:bd:60:09:9e:2e:6d:76:12:2e:68:60:24:af:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4d7aaa3d25c2f9ebbec74c830cc0cde9318c8f8
Validity
Not Before: Aug 9 04:17:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f550bf75fa647c928d0f3865a1da4b6e56f4278c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:21:0f:bb:ea:e6:07:dc:1f:4d:d9:26:22:fb:
67:f8:57:77:60:1f:1f:c3:fa:d3:92:f7:be:b2:d7:
fa:e5:73:65:eb:f4:b7:b3:34:01:90:d4:f1:0a:16:
80:7c:cf:aa:0c:3a:f2:9e:86:27:0f:89:38:8d:56:
53:7e:89:55:2b:fe:5b:7f:1a:fd:43:fa:03:e0:56:
3b:e0:39:5f:52:77:9e:e9:6d:fc:b8:5d:01:15:f6:
c5:31:91:b8:21:15:e3:fb:ab:f8:16:17:98:92:0b:
42:b8:6d:58:ce:e6:de:89:6b:4f:78:b1:b0:9e:71:
2b:5c:51:92:45:2e:f7:6f:60:9e:94:83:ef:31:0b:
24:63:e6:39:b7:5b:cd:2e:1e:c1:e7:ee:11:f7:0f:
60:29:cf:85:ed:d7:49:e2:a2:b1:9d:1b:63:6e:86:
8d:d4:d4:8d:42:79:3c:f6:1f:d0:38:b9:08:a1:4a:
55:5e:2b:7e:67:83:a3:30:b5:ad:fd:b1:8a:ab:59:
88:17:69:32:13:66:2b:3f:9c:b8:71:32:9a:33:37:
87:d2:fe:bf:e6:83:39:85:be:37:bf:8a:58:c4:bb:
92:2c:da:da:7d:16:62:4d:ed:c3:d1:5b:af:60:e8:
bd:bb:17:85:7d:28:2b:1a:3f:d1:03:41:65:a6:1c:
8e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:50:BF:75:FA:64:7C:92:8D:0F:38:65:A1:DA:4B:6E:56:F4:27:8C
X509v3 Authority Key Identifier:
keyid:E4:D7:AA:A3:D2:5C:2F:9E:BB:EC:74:C8:30:CC:0C:DE:93:18:C8:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Neqo9JcL5677HTIMMwM3pMYyPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/9VC_dfpkfJKNDzhlodpLblb0J4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.231.215.0/24
Signature Algorithm: sha256WithRSAEncryption
67:ec:e6:48:e9:32:b9:fb:e0:5d:bb:1e:31:16:32:42:5a:11:
a4:73:c9:df:d6:e2:c9:2f:72:a9:f1:58:36:36:79:24:0f:82:
9a:d4:b6:c7:46:ef:64:3c:88:6f:4f:c6:2b:be:fe:0e:28:88:
6f:c3:f3:55:c3:fd:cd:75:ca:68:2a:fe:92:c3:20:d7:df:cb:
70:e3:60:46:e7:df:da:37:3e:41:42:30:5d:d7:5c:f6:c8:6d:
6c:8d:ca:45:2a:58:c9:ab:e9:ff:f9:26:48:c0:c8:f6:34:77:
f8:6e:65:dc:6e:ad:f5:e4:aa:c3:68:fe:77:41:b2:9f:aa:36:
25:15:71:95:d0:a6:e4:20:ec:ad:5e:2d:6d:8f:d7:37:de:e4:
fd:a0:e5:82:2c:0e:90:44:62:da:1d:a5:37:d1:77:ef:6a:a8:
21:d4:36:ff:9c:22:06:23:86:1e:54:9d:cb:70:9e:5e:6e:c3:
3f:e6:fb:8b:af:48:3c:6b:c6:01:2f:95:a6:e4:f9:70:f4:f2:
b2:12:46:3d:80:74:b8:3d:0d:d3:15:0f:05:29:a7:0c:72:7a:
05:b7:d4:33:dd:1f:f6:27:9b:7c:72:63:d2:25:59:01:f1:4b:
09:04:ad:72:85:7c:ac:c6:b6:0d:7f:a6:78:19:06:a4:42:c6:
45:07:36:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:38:20 2024 by rpki-client on console-ams.rpki-client.org