Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/VZ1EmHpMRykG2CAcPno6z_Pi1WA.roa
File: VZ1EmHpMRykG2CAcPno6z_Pi1WA.roa (raw, json)
Hash identifier: fL4BPgV5or86FuXLf5eNB03WKF2n3hDhar3zEsJo/A4=
Subject key identifier: 55:9D:44:98:7A:4C:47:29:06:D8:20:1C:3E:7A:3A:CF:F3:E2:D5:60
Certificate issuer: /CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
Certificate serial: 0190A5E03B70922057F52AD9C561C167ADC3
Authority key identifier: 47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/VZ1EmHpMRykG2CAcPno6z_Pi1WA.roa
Signing time: Fri 12 Jul 2024 07:37:34 +0000
ROA not before: Fri 12 Jul 2024 07:37:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39679
IP address blocks: 185.6.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a5:e0:3b:70:92:20:57:f5:2a:d9:c5:61:c1:67:ad:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
Validity
Not Before: Jul 12 07:37:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=559d44987a4c472906d8201c3e7a3acff3e2d560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d4:cb:58:23:f7:6e:ae:4d:91:f4:07:28:e5:
94:d1:38:94:e7:d2:d9:ae:5e:1c:d5:7c:78:b3:a2:
7c:fb:cf:04:03:0b:ac:63:7c:22:13:a8:32:cc:66:
9f:d5:be:0a:3c:73:3a:50:47:83:51:eb:9b:de:52:
89:49:03:98:9e:b1:b3:b8:24:30:9c:1b:cd:3c:a3:
a5:32:6e:6c:88:56:3b:79:7d:1a:e3:73:19:c1:00:
57:82:4d:7d:7c:32:1b:64:5c:44:9c:bb:1c:38:4b:
19:b3:f1:e0:ad:7e:54:cb:f9:a1:3d:fa:89:e9:4d:
40:92:95:d4:4c:30:14:64:03:b7:6e:d2:e4:de:84:
46:14:15:d7:c2:61:6b:0c:58:f5:f7:a4:38:a1:6a:
46:e3:b6:7a:1d:f8:76:42:cd:14:df:8b:61:95:0e:
09:af:29:bb:92:fe:50:39:67:ee:51:a8:77:c8:73:
74:77:a8:fa:08:dd:d6:1d:5f:31:c4:97:c3:73:bf:
b5:1c:2b:a1:ce:0b:01:d2:3f:cd:4f:bb:3c:d8:a6:
8d:83:17:55:13:a4:b0:22:3e:1e:1c:54:a9:7e:61:
ec:27:df:c1:41:02:bc:02:6e:f0:05:90:34:17:e9:
82:5a:07:8f:52:e4:2b:49:a6:1a:30:d1:96:3d:3c:
d9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:9D:44:98:7A:4C:47:29:06:D8:20:1C:3E:7A:3A:CF:F3:E2:D5:60
X509v3 Authority Key Identifier:
keyid:47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/VZ1EmHpMRykG2CAcPno6z_Pi1WA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.6.138.0/24
Signature Algorithm: sha256WithRSAEncryption
44:e3:9c:13:da:f2:57:e9:d3:62:a6:7a:e7:ac:b8:96:ec:3a:
fa:6b:e5:88:41:e3:cc:03:2e:2a:e8:fb:1d:54:66:18:c2:13:
b3:99:07:75:f2:fb:8f:a4:7a:98:db:3c:1e:6d:a1:47:31:a4:
71:14:b6:a4:62:ff:b0:f0:9f:19:a0:03:b0:5d:9c:c6:8c:04:
b1:b7:29:bb:33:31:b0:95:7f:f2:ea:18:49:67:07:a0:95:2d:
83:b7:41:51:e0:cd:7c:4f:ee:10:96:14:74:2e:bb:f0:6c:59:
78:80:e5:7d:00:d4:69:ca:cb:0b:6c:fe:d3:1b:e5:ad:d9:1b:
95:fd:a0:55:9b:cb:d7:81:8d:f7:38:15:e5:58:33:41:9e:6f:
c0:9d:94:82:1e:b4:18:23:99:80:68:d6:5b:2d:57:f7:23:a7:
3a:a6:57:28:8a:ac:28:4c:e2:90:4b:30:79:f3:48:67:7a:30:
2d:a6:3d:7e:7b:ec:06:16:23:7c:b9:18:d5:fe:6a:87:54:c3:
e8:2c:e4:63:b5:a5:45:ed:92:7d:e2:3c:d0:3c:2f:54:68:9c:
76:08:f1:1f:65:fd:50:9e:d3:ca:01:1b:51:13:f5:fd:90:8e:
43:ed:71:c2:cc:48:a3:ec:a6:81:58:94:1e:58:8b:7c:68:3f:
ae:da:b0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:34:16 2024 by rpki-client on console-ams.rpki-client.org