Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vkyu7GXxyAt_ZcEEOM0XSQVjbLk.roa
File: Vkyu7GXxyAt_ZcEEOM0XSQVjbLk.roa (raw, json)
Hash identifier: jsMGZclLbdBz6S8KE0tsT18nL4xQxzqkmj/clpDs9H8=
Subject key identifier: 56:4C:AE:EC:65:F1:C8:0B:7F:65:C1:04:38:CD:17:49:05:63:6C:B9
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 018CC6B933AF4BE5F2D1D55CC1350E8339BD
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vkyu7GXxyAt_ZcEEOM0XSQVjbLk.roa
Signing time: Mon 01 Jan 2024 20:31:15 +0000
ROA not before: Mon 01 Jan 2024 20:31:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47294
IP address blocks: 84.44.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:33:af:4b:e5:f2:d1:d5:5c:c1:35:0e:83:39:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 20:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=564caeec65f1c80b7f65c10438cd174905636cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:1f:49:9f:0a:61:4d:af:fc:a9:bd:c6:1c:46:
1f:4f:86:c2:54:f0:99:10:03:77:f4:18:e4:62:f7:
14:50:8f:91:c0:5a:ee:e8:b2:1c:47:49:d6:1a:83:
69:43:81:03:fb:85:1d:b5:ac:75:79:61:f4:7d:a0:
95:ba:a0:e2:30:79:9a:8e:4e:db:f7:c2:f9:49:42:
db:17:65:dc:ce:a7:ad:26:9e:29:ab:12:66:f4:15:
2f:7c:f3:42:6e:1a:59:96:b2:b0:6d:1b:78:bf:52:
41:d6:da:cf:91:30:39:dd:91:1c:bd:6e:11:8a:33:
c3:4d:24:50:63:a9:25:05:05:d2:4b:0c:79:e5:7d:
8b:41:51:c8:53:8a:7d:9d:5b:4c:81:a0:fa:ba:c1:
2b:f2:c1:8e:df:96:18:9c:0f:83:72:4a:d3:46:95:
50:79:e0:99:af:aa:7a:50:58:92:8f:86:9f:83:c7:
d5:8a:f8:5c:ef:d2:7b:63:65:4d:4f:4d:be:48:2f:
0e:c7:3a:ab:43:de:05:8b:3c:9e:35:90:7f:2e:9b:
60:30:ad:90:35:fe:ee:e5:e8:d8:24:a5:38:42:1b:
75:9e:33:74:95:36:86:4f:63:49:29:3d:67:5f:8a:
3f:50:67:9f:0a:ae:30:a3:19:0e:9c:73:55:53:05:
16:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:4C:AE:EC:65:F1:C8:0B:7F:65:C1:04:38:CD:17:49:05:63:6C:B9
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vkyu7GXxyAt_ZcEEOM0XSQVjbLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.44.41.0/24
Signature Algorithm: sha256WithRSAEncryption
43:01:24:cc:04:08:8e:f8:b1:77:f2:c0:b7:ea:83:ec:7c:37:
8b:97:6d:78:24:7b:95:cb:16:46:4e:a3:99:8c:42:8e:7a:b4:
65:e6:88:a8:c3:95:3d:a5:66:c8:c8:79:a5:c9:82:58:2b:ef:
19:31:cd:d1:77:6c:be:24:b6:11:94:ba:78:07:91:89:52:9a:
62:a2:a6:ff:67:63:07:26:aa:09:da:d7:37:97:b5:65:52:04:
9f:33:a8:e5:09:40:8c:05:33:7d:06:10:ea:3a:ca:ff:17:5b:
48:ab:de:7d:18:25:8f:40:88:61:eb:65:23:3b:d6:8e:4f:1f:
35:3d:e1:f7:21:f0:c1:44:fe:67:49:f3:48:f6:cc:ca:6c:3a:
b3:94:70:a4:90:70:3a:7a:6c:17:4c:de:e6:5b:fe:97:6f:c2:
a0:b5:d6:df:62:3c:a3:6e:66:30:6b:35:3c:77:27:39:76:bf:
c1:63:af:03:c2:bb:52:11:60:ef:b7:3e:7d:49:17:7d:01:31:
9b:29:4f:4b:2d:7e:9c:55:be:aa:ab:0f:3e:e9:c4:94:f5:d2:
5a:14:18:40:61:02:fd:41:92:16:90:84:32:20:85:29:9a:64:
b4:c4:3b:12:19:fa:bd:ae:ad:11:65:c8:cf:1e:7c:f4:7d:67:
88:44:98:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:11:58 2024 by rpki-client on console-ams.rpki-client.org