Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/7ksrAgsyUB2SzPZjh78EJCBvcZE.roa
File: 7ksrAgsyUB2SzPZjh78EJCBvcZE.roa (raw, json)
Hash identifier: 5c96zKFhyM70CWIF22d2EI/WvRmprtwJEGIC8fFmpxU=
Subject key identifier: EE:4B:2B:02:0B:32:50:1D:92:CC:F6:63:87:BF:04:24:20:6F:71:91
Certificate issuer: /CN=55c9620593cc4fca8567c244257861a522f7359d
Certificate serial: 019027A5C7ACB700DC66E0613D56079B9EDB
Authority key identifier: 55:C9:62:05:93:CC:4F:CA:85:67:C2:44:25:78:61:A5:22:F7:35:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/7ksrAgsyUB2SzPZjh78EJCBvcZE.roa
Signing time: Mon 17 Jun 2024 19:21:34 +0000
ROA not before: Mon 17 Jun 2024 19:21:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31477
IP address blocks: 193.164.144.0/24 maxlen: 24
2001:678:750::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:27:a5:c7:ac:b7:00:dc:66:e0:61:3d:56:07:9b:9e:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55c9620593cc4fca8567c244257861a522f7359d
Validity
Not Before: Jun 17 19:21:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee4b2b020b32501d92ccf66387bf0424206f7191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:21:57:48:b7:71:19:d2:da:85:03:6f:04:27:
89:95:e7:5e:16:0b:ed:0f:ee:a9:75:8a:c0:38:0d:
dd:de:de:02:47:9c:08:16:27:22:b9:b4:f1:1f:c9:
dd:2a:cf:2c:f7:13:6c:20:c3:38:b7:fe:db:75:59:
6f:85:80:8a:7d:a6:d7:cd:79:b0:a4:3d:0b:44:90:
94:06:94:c9:f5:42:77:24:0b:a3:83:32:2d:5d:cd:
9e:bd:bd:3e:4d:1b:25:11:eb:8e:c4:5e:4f:9d:ae:
00:db:bc:5c:d2:ae:11:4e:6f:3a:4f:3f:a5:32:21:
6b:83:c7:4c:dc:0e:de:a2:0a:1f:42:3e:0f:81:ef:
ed:9f:91:52:43:9b:52:37:52:fc:cb:54:e1:0e:69:
2f:5a:c5:54:e5:42:ce:95:7a:4c:05:44:b8:f5:51:
ba:09:59:6b:44:37:23:1f:8a:81:41:31:46:ff:06:
98:37:85:5a:2d:e5:4b:e2:18:2d:1b:45:c7:ba:88:
9b:ef:85:e3:29:cc:91:ba:28:f1:24:2c:0f:43:83:
b9:d8:e6:a4:b6:c6:b8:cc:3b:cf:a3:f3:e9:a2:31:
88:fe:9b:10:e7:e9:25:6b:b5:9d:e9:3c:48:6b:2f:
a1:50:a7:79:8c:9b:e4:df:a5:a0:df:0f:39:b3:e8:
4d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:4B:2B:02:0B:32:50:1D:92:CC:F6:63:87:BF:04:24:20:6F:71:91
X509v3 Authority Key Identifier:
keyid:55:C9:62:05:93:CC:4F:CA:85:67:C2:44:25:78:61:A5:22:F7:35:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/7ksrAgsyUB2SzPZjh78EJCBvcZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.144.0/24
IPv6:
2001:678:750::/48
Signature Algorithm: sha256WithRSAEncryption
ad:49:eb:73:c2:bf:4c:2b:a7:b9:83:ce:d5:36:e7:a9:5a:c8:
92:43:62:41:f8:39:90:4f:d8:11:7c:73:3f:5c:f8:0f:b4:a1:
f1:f8:28:85:97:62:36:83:dc:aa:08:d2:27:14:23:fb:5c:96:
8a:c0:2a:3e:1a:d6:09:ab:b4:8d:3e:6d:d1:fd:99:f5:3e:c2:
5b:b5:8a:60:1a:0b:34:7e:83:a3:25:14:80:4d:4c:b9:6a:4f:
03:36:22:5d:2c:21:32:63:aa:30:c0:cd:eb:2c:1a:b0:df:d8:
d8:ba:b4:57:5e:2e:4b:6a:19:5e:1c:82:dd:32:b5:9e:75:cc:
7a:cd:60:7e:40:9c:a9:76:c5:8d:29:29:26:de:58:cc:fe:51:
0f:8e:ca:77:ce:97:05:02:cf:03:5a:7e:9a:f6:22:a5:0b:ca:
a5:14:18:a1:d8:15:34:fa:4b:c8:fd:52:cc:ec:60:69:65:c0:
1e:b8:9a:f9:b5:b4:18:f4:6c:51:19:83:40:cf:23:11:1e:af:
7a:38:14:c1:4f:5c:da:06:b8:28:ce:b5:2d:34:cd:bc:38:b6:
a8:cf:db:de:93:b9:39:03:7f:88:42:8f:a6:d4:fb:7b:bb:af:
54:14:69:24:04:ff:ef:0c:16:93:16:5e:40:a2:bb:4c:3a:29:
0e:c3:71:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:58:44 2024 by rpki-client on console-ams.rpki-client.org