Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/VT2fxTxcc_X8MZ3Enklz8A5h5Ok.roa
File: VT2fxTxcc_X8MZ3Enklz8A5h5Ok.roa (raw, json)
Hash identifier: vpm7uOalBspuo3QrmOpYM/t7oKsNQDdetCbc2VKz8eo=
Subject key identifier: 55:3D:9F:C5:3C:5C:73:F5:FC:31:9D:C4:9E:49:73:F0:0E:61:E4:E9
Certificate issuer: /CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5
Certificate serial: 018CC6B942E4BCB8D98D0E36B3327405928F
Authority key identifier: 06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/VT2fxTxcc_X8MZ3Enklz8A5h5Ok.roa
Signing time: Mon 01 Jan 2024 20:31:19 +0000
ROA not before: Mon 01 Jan 2024 20:31:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206123
IP address blocks: 176.10.116.0/24 maxlen: 24
185.32.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:42:e4:bc:b8:d9:8d:0e:36:b3:32:74:05:92:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5
Validity
Not Before: Jan 1 20:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=553d9fc53c5c73f5fc319dc49e4973f00e61e4e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:49:5a:f9:93:cd:29:16:11:95:22:87:50:bd:
c9:9a:08:17:9f:73:8e:58:f9:6a:e7:88:6b:fb:60:
b1:5f:34:16:76:c1:da:01:e1:4b:af:53:c0:aa:e2:
ce:85:eb:ea:ad:1b:ef:f8:8a:2e:a4:33:aa:b9:25:
9b:65:c8:e4:ad:71:6d:b0:05:db:0b:ba:db:75:79:
96:09:6b:81:77:b1:a6:4a:55:06:f9:c2:6d:98:1c:
b9:30:da:b6:03:f3:5c:b8:93:1e:e2:2b:a3:6d:c8:
33:44:a0:51:03:0e:01:4a:ca:95:ee:fe:42:68:b4:
00:fb:ad:9c:75:ec:e0:d2:44:51:61:1b:24:24:76:
82:c4:cf:fc:31:4f:28:f9:a4:71:83:9d:b7:fb:67:
68:11:b5:db:29:2e:e4:74:7f:bb:2b:2c:c3:99:87:
1f:16:f8:02:2e:f3:13:59:9e:af:82:48:3f:37:02:
30:ae:e2:55:9e:ac:4c:68:6b:ed:30:e2:8d:16:df:
d3:35:44:27:f4:fb:07:99:76:6c:00:97:9e:98:63:
9e:2e:19:1d:6c:c0:81:aa:d5:4c:2d:24:42:e1:c4:
d9:78:0e:90:ff:c3:de:89:c8:ef:44:3e:74:99:b7:
1b:3b:f3:ca:01:8b:b5:c0:dc:c7:25:a4:4e:07:1c:
9c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:3D:9F:C5:3C:5C:73:F5:FC:31:9D:C4:9E:49:73:F0:0E:61:E4:E9
X509v3 Authority Key Identifier:
keyid:06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/VT2fxTxcc_X8MZ3Enklz8A5h5Ok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.10.116.0/24
185.32.221.0/24
Signature Algorithm: sha256WithRSAEncryption
16:b8:c2:e8:48:53:22:4f:0c:a2:9a:4f:5b:d4:3e:14:69:1d:
19:c1:c1:85:ab:63:7e:b0:87:91:28:11:e8:0e:c1:7c:d8:25:
29:db:5b:80:b6:f3:e8:9a:84:af:fd:5f:31:1b:f7:d0:60:fe:
25:fa:00:81:ab:ea:c9:5a:97:1c:b3:da:68:5f:fb:31:bf:71:
c9:cb:19:e7:88:2c:22:d7:fe:13:03:9e:ec:a6:7e:c6:e0:c4:
be:43:5d:f7:46:bf:6a:b7:b4:53:d6:c6:a6:11:bf:99:53:b3:
81:c4:02:0d:9a:de:eb:0c:d3:04:12:7f:78:57:63:91:25:fa:
aa:6a:9a:2e:42:fc:46:de:67:17:92:a6:08:6b:fc:88:b4:dd:
53:f5:1c:ea:7a:74:d0:cd:cb:d7:4c:ad:4b:e4:43:34:8b:b2:
3d:41:9f:07:91:8b:90:45:f8:26:f3:96:0c:2c:68:f5:c3:2c:
e5:a3:8b:4c:df:13:00:e0:2f:4a:8b:9d:ab:35:f2:f7:45:c5:
33:47:4a:95:16:36:ef:a3:8b:99:bd:af:23:9a:d0:fa:01:6b:
39:73:c5:2a:9f:5a:fb:d5:58:82:fb:cc:42:27:95:13:da:b2:
19:ee:7e:88:75:f7:d5:3b:5f:1f:bd:0f:08:6d:5c:83:84:63:
23:22:47:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:18:40 2024 by rpki-client on console-fra.rpki-client.org