Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/VqJkehjnYcv_lokftA4tJKWoiXA.roa
File: VqJkehjnYcv_lokftA4tJKWoiXA.roa (raw, json)
Hash identifier: lky9HyKVKEXWWJwR0E6FmyQDeSddeQ9oRq2/85cLKO0=
Subject key identifier: 56:A2:64:7A:18:E7:61:CB:FF:96:89:1F:B4:0E:2D:24:A5:A8:89:70
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 018DA7ABF88CEAE865A8B1557EBA20C9DE0F
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/VqJkehjnYcv_lokftA4tJKWoiXA.roa
Signing time: Wed 14 Feb 2024 12:51:21 +0000
ROA not before: Wed 14 Feb 2024 12:51:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 395092
IP address blocks: 45.95.16.0/22 maxlen: 22
45.155.36.0/22 maxlen: 22
185.93.220.0/22 maxlen: 24
213.108.246.0/23 maxlen: 23
213.139.204.0/22 maxlen: 22
217.195.152.0/22 maxlen: 22
2a0d:9ec0::/48 maxlen: 48
2a0d:9ec1::/48 maxlen: 48
2a0d:9ec2::/48 maxlen: 48
2a0d:d8c0::/48 maxlen: 48
2a0d:d8c0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 22:57:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a7:ab:f8:8c:ea:e8:65:a8:b1:55:7e:ba:20:c9:de:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Feb 14 12:51:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56a2647a18e761cbff96891fb40e2d24a5a88970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d5:e3:26:c7:76:0c:f1:8b:b0:b0:87:30:21:
a6:52:1f:2e:d3:f7:de:21:5d:aa:b5:63:a5:6b:bb:
10:d6:05:47:59:2a:1e:6d:ee:42:47:b4:76:bb:93:
4d:e7:20:39:a5:21:ea:b6:db:bb:dc:1b:45:5e:51:
32:fe:3a:00:29:cc:ec:38:ce:c8:2e:6b:e6:7e:ae:
f3:66:2e:fa:ca:e4:d6:bd:7f:04:fa:57:49:08:c2:
d9:af:d0:c2:66:1f:d1:31:eb:e2:1c:f7:8b:98:30:
b7:97:da:4a:00:6b:c5:92:a6:ad:33:43:80:35:93:
61:79:09:3f:01:c9:e6:c8:31:2d:bf:57:09:97:4f:
e4:9d:20:9d:18:3d:34:b4:a4:31:7d:fb:23:6e:0b:
22:b3:58:e8:81:25:65:2d:bc:11:6c:6d:27:c3:88:
2d:86:66:74:fb:02:2b:2e:dc:0b:ff:41:24:f6:bb:
0d:08:ef:79:3d:5b:b4:e2:42:b3:22:a5:90:fc:cf:
27:d1:db:c5:64:44:74:9f:30:6e:1e:de:3d:ee:c0:
a7:79:fe:37:eb:a9:f4:6f:8a:94:8e:d0:95:a0:45:
46:71:ee:20:95:f6:f2:da:24:87:4b:5d:41:be:d9:
8b:31:f3:23:93:c5:36:72:7e:c5:4d:a7:68:5f:d1:
77:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A2:64:7A:18:E7:61:CB:FF:96:89:1F:B4:0E:2D:24:A5:A8:89:70
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/VqJkehjnYcv_lokftA4tJKWoiXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.16.0/22
45.155.36.0/22
185.93.220.0/22
213.108.246.0/23
213.139.204.0/22
217.195.152.0/22
IPv6:
2a0d:9ec0::/48
2a0d:9ec1::/48
2a0d:9ec2::/48
2a0d:d8c0::/47
Signature Algorithm: sha256WithRSAEncryption
8a:86:ce:8e:75:b0:b2:cb:26:7f:ef:0e:d0:ab:2a:61:45:0b:
72:b4:c0:6d:b0:8b:b0:cc:1e:40:21:ea:2a:66:c8:c1:0f:63:
a1:b3:93:bb:de:07:7c:89:30:9c:19:17:ca:7a:fe:74:d1:f7:
bb:db:6b:59:3e:93:93:f9:0d:39:29:85:87:30:07:5b:f1:bd:
0f:02:16:bd:57:69:84:6b:61:e2:ac:40:e5:fc:e9:92:e7:fe:
95:a0:c2:9a:5a:f1:53:db:16:d1:95:e3:19:fd:12:ca:e2:ca:
83:fb:92:01:05:87:ae:19:2b:6d:33:05:e4:c4:38:ec:48:6e:
e8:d4:b7:02:a2:74:16:a6:d1:c1:ab:c4:1c:72:99:5b:33:bb:
4c:d6:52:47:ba:a4:1e:ff:f2:79:a9:7e:b3:53:60:59:5a:e3:
c6:bf:49:b3:24:56:40:49:35:3e:57:01:e9:d8:4d:17:25:c5:
b3:f0:49:c4:f5:aa:5f:0f:76:01:7c:a9:f4:91:ad:86:b9:b3:
c0:d5:08:a9:1f:15:99:1a:0e:43:a6:14:74:43:b9:f8:48:96:
b1:2e:cf:88:53:1f:c8:a0:88:48:c8:8a:8e:2d:79:f7:b1:df:
d8:9d:e2:a5:50:14:79:c3:8f:33:d8:aa:7f:6e:40:e1:d5:ee:
5e:12:92:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 03:43:58 2024 by rpki-client on console-ams.rpki-client.org