Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/vgEXb2WuSYn9hlGYzqvpyeUAK5M.roa
File: vgEXb2WuSYn9hlGYzqvpyeUAK5M.roa (raw, json)
Hash identifier: 07sR3qLOWBDQOzRGTwsRji2HN0o4hzD6vhq/6uUx6cY=
Subject key identifier: BE:01:17:6F:65:AE:49:89:FD:86:51:98:CE:AB:E9:C9:E5:00:2B:93
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018CC86F46AE522D8CBDB5DC8DFA4CDD34AE
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/vgEXb2WuSYn9hlGYzqvpyeUAK5M.roa
Signing time: Tue 02 Jan 2024 04:29:44 +0000
ROA not before: Tue 02 Jan 2024 04:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203648
IP address blocks: 185.200.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:46:ae:52:2d:8c:bd:b5:dc:8d:fa:4c:dd:34:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 2 04:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be01176f65ae4989fd865198ceabe9c9e5002b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:12:1a:1e:e2:fd:db:10:37:cb:e6:e8:40:c3:
d6:2b:6a:bf:f7:9e:dc:00:a9:de:de:1a:1d:b8:34:
e7:b6:6a:da:e9:19:71:a6:38:49:fa:d1:d8:19:20:
61:35:8c:fd:0a:f8:e6:60:18:d2:c2:71:07:99:35:
04:e3:01:5a:12:2a:b3:4e:09:29:f6:2d:5e:14:5b:
05:7a:e7:2d:22:e3:41:bf:67:16:ae:13:6d:a7:fc:
53:24:e9:c5:31:2a:5c:67:9c:61:87:bf:64:47:74:
78:35:4c:fb:e4:4a:f0:90:d4:e4:b3:41:83:51:cf:
5d:fa:d6:d9:50:d9:c4:cc:2c:9d:5b:36:6d:58:61:
3e:0b:7b:9e:a8:1e:c3:86:bc:78:84:b2:f8:28:f6:
3b:40:99:87:22:8f:85:a8:d6:cc:c6:53:61:8b:d9:
a9:6f:b4:ee:6d:b0:68:4b:62:21:89:86:c6:86:61:
66:2c:52:0e:4b:88:cc:52:95:d8:31:58:48:6d:51:
b9:b6:25:1f:7a:27:93:01:b3:29:71:c2:22:f5:ce:
b2:13:6f:f7:6c:d8:13:3b:37:61:1f:6f:b6:fe:b5:
d7:24:3f:70:a1:9c:03:ce:92:69:ec:08:b7:03:88:
74:cb:44:b1:42:fd:d7:e6:20:0d:8f:0c:0d:d2:d1:
e1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:01:17:6F:65:AE:49:89:FD:86:51:98:CE:AB:E9:C9:E5:00:2B:93
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/vgEXb2WuSYn9hlGYzqvpyeUAK5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.63.0/24
Signature Algorithm: sha256WithRSAEncryption
56:59:a9:bd:34:b3:e8:3b:40:17:3a:b0:0a:f7:7d:9e:82:05:
f1:d7:2b:8a:d5:41:88:5a:8e:de:a8:37:91:c3:6d:b1:0b:c1:
a5:6c:a7:36:a3:a7:cb:2d:0a:d7:ab:59:55:39:a5:88:75:c6:
aa:6b:05:77:4e:20:cc:a0:b8:a4:16:23:07:55:a1:c4:a4:a8:
a4:6c:ea:dc:c0:12:50:dd:ca:fe:8a:74:ae:53:cf:19:83:e7:
49:d4:eb:af:8d:02:90:c6:ca:92:46:25:83:f5:e8:b9:74:10:
77:3e:34:eb:be:0a:db:0f:ea:6b:60:3d:43:4c:59:b8:d9:fe:
d4:b5:90:39:dc:c2:a4:fd:33:cc:f3:84:6e:ac:19:f2:9c:0d:
13:ea:de:4d:17:63:85:72:2d:93:76:4f:09:60:e7:cd:f2:76:
bd:06:fe:0c:a9:31:16:d9:f9:e7:31:48:5a:5e:5d:63:b1:9a:
e6:2c:b6:59:a3:38:c7:54:47:fe:d1:82:4c:75:06:f6:22:26:
22:6d:69:a5:95:13:0f:e7:28:42:ba:9b:f8:33:75:ea:62:d1:
04:d4:6d:91:05:24:d9:32:08:01:7e:a5:b7:a4:8c:22:7c:cc:
ec:c1:eb:b0:74:e3:8a:96:f6:47:ae:25:29:47:e9:bd:3b:cb:
fc:bf:2c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:43:46 2024 by rpki-client on console-ams.rpki-client.org