Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/vXY9tl3Roc44WswaMXfkNjvlrJ0.roa
File: vXY9tl3Roc44WswaMXfkNjvlrJ0.roa (raw, json)
Hash identifier: AKiSk8+bo48RuDAerYeQQLtmWCcKjfBJe3Wd0qJSXj4=
Subject key identifier: BD:76:3D:B6:5D:D1:A1:CE:38:5A:CC:1A:31:77:E4:36:3B:E5:AC:9D
Certificate issuer: /CN=62d190b238d97af7900bdcbd02304b782ffcaf2a
Certificate serial: 018CC5DD3FD8E9CC83447CCD1B3C61D9B284
Authority key identifier: 62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/vXY9tl3Roc44WswaMXfkNjvlrJ0.roa
Signing time: Mon 01 Jan 2024 16:31:00 +0000
ROA not before: Mon 01 Jan 2024 16:31:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25577
IP address blocks: 81.27.64.0/19 maxlen: 19
31.3.208.0/20 maxlen: 20
2001:9d8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dd:3f:d8:e9:cc:83:44:7c:cd:1b:3c:61:d9:b2:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d190b238d97af7900bdcbd02304b782ffcaf2a
Validity
Not Before: Jan 1 16:31:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd763db65dd1a1ce385acc1a3177e4363be5ac9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b4:5e:aa:7e:52:9c:8c:ea:88:ab:05:90:7c:
d9:03:7b:99:72:16:52:ed:48:8f:e8:9b:ae:3d:a8:
9b:66:be:76:77:74:e1:23:73:c3:51:ef:c1:45:ef:
f8:a0:41:b2:bd:54:48:67:02:c9:19:f0:7a:65:4a:
ae:6f:41:b7:a7:d5:85:53:7a:25:8e:a7:62:56:e9:
ba:34:8c:d2:f2:05:3d:d5:5e:0e:2e:10:9a:ef:45:
10:44:cf:f1:86:52:ef:fd:7f:33:48:f0:11:b4:68:
0d:2a:6f:d9:81:df:b7:b8:b9:6b:cf:69:de:b9:55:
bf:00:0d:69:31:ba:98:46:e6:01:ed:8b:28:00:56:
08:bf:6a:67:99:fb:78:91:e6:54:70:6c:dc:98:b6:
0a:2b:9f:a9:db:c7:20:c9:f0:85:06:19:ce:79:7c:
e0:0c:27:31:53:2e:d4:9c:83:45:b2:f1:04:f8:1d:
a2:1d:d9:0a:b8:34:bd:56:6c:85:2b:cc:69:50:a8:
f1:32:d1:52:b0:ec:04:50:46:6c:51:61:d9:a4:ea:
5d:f1:48:4b:14:5b:d3:57:dc:45:e7:e4:4d:57:31:
9a:cd:19:c4:64:0b:48:cb:41:17:32:1b:5f:03:2c:
1b:db:1e:33:78:de:91:4f:60:96:4f:00:04:7a:ec:
66:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:76:3D:B6:5D:D1:A1:CE:38:5A:CC:1A:31:77:E4:36:3B:E5:AC:9D
X509v3 Authority Key Identifier:
keyid:62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/vXY9tl3Roc44WswaMXfkNjvlrJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.208.0/20
81.27.64.0/19
IPv6:
2001:9d8::/32
Signature Algorithm: sha256WithRSAEncryption
93:77:6c:19:52:d0:d6:45:35:bc:ba:cd:ca:ce:28:ee:0e:fb:
0b:ba:95:33:70:13:52:c3:d0:03:3a:f3:1a:74:3c:57:62:f5:
c7:1d:8d:92:a8:4f:6a:3e:85:5a:82:c7:81:bf:1f:43:b4:57:
0c:54:c9:b8:b7:4a:fd:49:f2:dd:f3:aa:22:99:0d:a3:fc:ce:
99:4b:b7:63:71:ce:5d:0d:d1:c2:44:eb:f2:23:53:f1:51:44:
10:d7:b9:b8:21:ab:ab:a8:c2:61:2d:94:b2:0f:26:90:3e:5b:
32:cf:12:64:fd:54:0f:e2:d1:ac:52:f0:1f:ff:ca:0f:ed:43:
2c:b6:03:fc:2b:b4:c5:82:45:50:d2:f3:a6:e1:33:27:12:c9:
6a:5f:fb:ab:e3:b9:24:fc:ab:95:f4:77:2f:47:55:91:43:e9:
70:84:3d:f1:65:0f:db:51:5a:f2:55:57:5b:92:8d:b2:97:bf:
be:f8:ad:9e:9f:2d:7f:80:0b:57:df:46:a4:91:5d:fb:3b:bf:
2c:87:10:53:11:a8:1b:a3:e4:cb:e9:39:e6:68:f5:ce:de:4d:
17:66:0c:94:e4:6d:d4:7f:54:35:95:24:cc:6b:75:70:5d:4a:
7d:3f:d1:87:5d:f6:93:44:c3:f6:47:5e:69:5f:6b:a4:d8:36:
2c:d4:a9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:09:30 2024 by rpki-client on console-fra.rpki-client.org