Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/VP33zENJAApC-8fVszCvEHHFtLk.roa
File: VP33zENJAApC-8fVszCvEHHFtLk.roa (raw, json)
Hash identifier: F6JZVb08PJYKN1X/GMcZU/K84v+vJ6ITSekkUgV5II4=
Subject key identifier: 54:FD:F7:CC:43:49:00:0A:42:FB:C7:D5:B3:30:AF:10:71:C5:B4:B9
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018E32DF6614DBBF928A92377482238140D9
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/VP33zENJAApC-8fVszCvEHHFtLk.roa
Signing time: Tue 12 Mar 2024 13:34:45 +0000
ROA not before: Tue 12 Mar 2024 13:34:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42731
IP address blocks: 80.97.163.0/24 maxlen: 24
194.153.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:32:df:66:14:db:bf:92:8a:92:37:74:82:23:81:40:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Mar 12 13:34:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=54fdf7cc4349000a42fbc7d5b330af1071c5b4b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2b:e6:c5:9c:22:81:f0:57:fe:fa:57:c3:5d:
6d:d5:ab:0e:9d:ba:a2:ca:25:3b:9b:da:3a:39:77:
a7:12:2d:bb:bd:ee:79:14:16:5c:28:dc:4b:fc:85:
19:a4:d9:bc:83:32:3b:b3:81:a5:bd:5e:1a:96:db:
a1:f2:5f:85:8d:8c:69:d4:38:52:b9:d5:0e:d9:08:
9c:22:af:ca:2c:42:2d:63:55:72:46:76:24:68:f0:
a5:cd:3f:a0:d2:37:03:a4:e0:f9:5b:ca:d1:6a:8d:
1e:93:a5:82:81:2b:02:ea:1d:37:95:cc:26:5a:cb:
8d:bf:a8:8a:c6:31:91:51:08:5f:07:04:ae:3e:75:
65:44:3d:69:47:96:10:75:60:5b:2d:43:7e:a0:f3:
7f:03:e9:78:7b:a1:6b:61:b8:32:2d:6d:43:0a:73:
7f:d5:74:44:75:45:f0:26:3b:fc:de:19:39:c9:a9:
5d:10:5d:49:99:9c:f0:b5:54:db:10:23:99:87:49:
1e:ab:0e:8f:17:9a:75:b5:19:73:4d:83:b6:96:ae:
36:cf:6c:3b:ec:97:cb:9c:03:55:98:6e:51:01:b9:
83:63:bd:89:66:81:20:4e:01:7e:89:c9:b2:15:4e:
06:2e:7a:27:7b:ca:67:ba:36:01:7e:13:ae:70:54:
98:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:FD:F7:CC:43:49:00:0A:42:FB:C7:D5:B3:30:AF:10:71:C5:B4:B9
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/VP33zENJAApC-8fVszCvEHHFtLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.97.163.0/24
194.153.250.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:01:3d:83:93:28:f9:9f:2b:b4:a7:8e:b1:0c:15:3c:81:67:
41:a0:4d:7f:22:81:23:03:b4:ee:28:87:40:03:35:be:4b:78:
da:91:14:ab:8f:a2:81:1d:9b:7d:b8:b9:d4:1d:ad:81:f4:f1:
81:69:ea:16:fe:68:ae:a4:80:27:b2:a1:a4:23:ee:63:d8:a3:
75:f8:14:7f:e6:03:44:57:25:18:bb:8e:28:dc:7c:7a:dc:b2:
02:dc:8c:8d:a3:ab:b5:48:55:54:95:9d:86:91:b7:e0:64:85:
92:de:ec:b2:34:9c:34:cc:77:a3:c7:ee:da:49:05:59:31:f1:
8c:ce:1f:8b:c0:47:e4:f0:1c:fe:29:c3:47:27:f3:18:bf:20:
30:f9:aa:9c:3c:d8:38:c6:f9:1e:db:d1:95:65:a2:d6:c8:f2:
ba:49:49:d9:c3:d8:06:8b:43:48:ad:d4:11:f6:19:92:43:c8:
87:d5:fc:7b:02:64:52:0d:5b:cb:43:e3:9f:5b:87:7d:19:fb:
48:5c:a0:d1:3c:77:e0:49:d2:64:92:b9:78:58:94:e0:04:5c:
ce:66:ec:6a:6c:8f:e1:fe:29:bb:25:7a:5f:a4:b3:cf:ae:ea:
e5:8e:30:36:52:6b:41:75:a1:7c:a0:09:4a:a4:49:a8:83:32:
d4:01:eb:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 13:56:04 2024 by rpki-client on console-ams.rpki-client.org