Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/VQHhcz9UCoVjWha7otp83EgCwNo.roa
File: VQHhcz9UCoVjWha7otp83EgCwNo.roa (raw, json)
Hash identifier: ciToPuQ1CfJmGy/mYcpReaRnQDE512kaueLB/UIO934=
Subject key identifier: 55:01:E1:73:3F:54:0A:85:63:5A:16:BB:A2:DA:7C:DC:48:02:C0:DA
Certificate issuer: /CN=03f8388372dc332c7cc6f7766ad78d58a23b2544
Certificate serial: 018CC2DB18D54C9C1158B1235D1D24C33B5A
Authority key identifier: 03:F8:38:83:72:DC:33:2C:7C:C6:F7:76:6A:D7:8D:58:A2:3B:25:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/VQHhcz9UCoVjWha7otp83EgCwNo.roa
Signing time: Mon 01 Jan 2024 02:29:47 +0000
ROA not before: Mon 01 Jan 2024 02:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209947
IP address blocks: 212.119.36.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:18:d5:4c:9c:11:58:b1:23:5d:1d:24:c3:3b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03f8388372dc332c7cc6f7766ad78d58a23b2544
Validity
Not Before: Jan 1 02:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5501e1733f540a85635a16bba2da7cdc4802c0da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:55:da:b8:1d:2f:36:14:02:92:14:6e:84:6b:
8c:fd:44:bd:3f:06:2d:2d:3d:7b:81:c7:13:3a:91:
6a:65:63:e7:b8:61:cf:87:a3:64:be:6d:25:d3:18:
dc:d2:c3:0b:cf:f5:89:a0:13:3c:47:be:a7:1e:bc:
b6:ec:80:aa:3a:d9:fe:c5:6f:7e:1a:e5:e4:a7:fa:
08:56:c2:eb:f6:c9:7e:ed:3c:92:4e:4b:2e:fa:eb:
d3:34:ca:60:88:64:15:53:85:72:e3:5b:56:83:02:
4b:b4:fe:8c:9b:7c:2d:6c:d4:54:fb:4d:84:f0:4c:
5a:2b:8a:4e:fa:0f:af:7f:7c:87:fe:9e:4f:f0:a2:
c3:0f:91:00:4c:db:a1:03:c2:bd:cc:65:fb:39:0a:
a0:5b:51:3e:1f:61:5d:5e:61:d3:03:05:76:ca:8a:
d9:89:87:4f:4c:5d:a1:10:4e:18:9e:be:11:14:66:
5d:cb:7b:47:dd:fd:ad:1e:49:c5:c3:46:40:5f:b5:
d0:30:0e:cb:d0:5b:6b:ad:51:0d:d3:ee:1c:ec:08:
7e:20:29:b8:be:35:6a:a4:ab:5d:35:9e:aa:2f:fb:
85:4f:39:f2:dd:50:aa:9b:d7:3d:f0:bb:a9:f8:6d:
71:a9:c5:3d:aa:c9:83:ad:c8:c1:1d:4c:89:a2:a8:
1f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:01:E1:73:3F:54:0A:85:63:5A:16:BB:A2:DA:7C:DC:48:02:C0:DA
X509v3 Authority Key Identifier:
keyid:03:F8:38:83:72:DC:33:2C:7C:C6:F7:76:6A:D7:8D:58:A2:3B:25:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/VQHhcz9UCoVjWha7otp83EgCwNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.119.36.0/22
Signature Algorithm: sha256WithRSAEncryption
11:1d:1d:1a:e3:4b:d9:52:23:f5:07:36:8c:48:43:a4:f0:65:
4d:7b:a7:be:02:e6:18:e8:6a:c2:65:40:7f:50:a2:5f:77:af:
5a:7d:7d:38:cb:31:55:fd:93:79:0a:ed:47:5d:c6:c9:70:b5:
1d:a6:ab:e7:e5:de:a5:23:20:94:c7:3a:8f:6f:ef:d8:db:27:
ae:df:72:c3:f0:73:75:4e:7a:5b:c2:93:ce:8a:de:3f:f8:a2:
fa:a9:f8:35:d2:68:ca:9b:05:12:19:30:4e:ce:62:dc:c1:04:
42:00:f4:18:62:27:15:a9:50:b8:3d:15:4c:07:91:69:c4:6b:
5c:f1:ba:bc:84:10:dd:fe:87:ad:a2:e2:fa:8e:9b:0d:05:16:
1f:74:3d:da:b4:cc:6c:05:72:b3:c9:95:0e:a6:d3:ed:80:44:
ae:bc:d7:89:27:fc:ef:0c:cf:db:38:24:b6:58:18:92:65:cc:
1d:e7:5c:7d:66:3d:f4:c7:97:3b:2c:e3:06:93:b3:a6:71:e7:
3e:a7:8b:32:b5:49:be:6d:b1:ab:d6:69:85:d1:f1:39:c2:b7:
01:c3:1f:ee:87:a7:16:7f:73:50:ea:db:d8:1b:ba:8f:2b:76:
dd:f4:5e:fe:5c:00:31:e7:f9:38:fd:7b:0e:27:4c:00:ca:67:
db:9f:4c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 06:07:51 2024 by rpki-client on console-ams.rpki-client.org