Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/VvnUFWvz3XiFgpO9S1NO7jjf_z0.roa
File: VvnUFWvz3XiFgpO9S1NO7jjf_z0.roa (raw, json)
Hash identifier: 9t0Wp/EETZcxkwQEpt5oWNVYNdecwrphHGd/56zdpHw=
Subject key identifier: 56:F9:D4:15:6B:F3:DD:78:85:82:93:BD:4B:53:4E:EE:38:DF:FF:3D
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 018CCA2BB9A2CDCBD4F00A00DB2A5006E4B7
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/VvnUFWvz3XiFgpO9S1NO7jjf_z0.roa
Signing time: Tue 02 Jan 2024 12:35:12 +0000
ROA not before: Tue 02 Jan 2024 12:35:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43253
IP address blocks: 217.17.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:b9:a2:cd:cb:d4:f0:0a:00:db:2a:50:06:e4:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 2 12:35:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56f9d4156bf3dd78858293bd4b534eee38dfff3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:64:27:c9:38:53:74:a7:a9:06:ff:58:b9:ba:
42:83:d9:cd:71:21:83:df:18:cd:52:be:7d:cf:cd:
ef:aa:8d:10:95:f5:12:d1:18:14:52:55:9a:e1:10:
69:47:b3:c1:5e:b5:1c:8f:d6:d0:6f:90:75:28:47:
a5:70:88:c2:69:7b:b8:29:4b:fe:98:f6:ca:79:97:
2b:bc:61:7c:bb:ad:6a:dd:7f:b7:e7:26:e6:b8:08:
ca:29:11:a7:dc:07:3e:c7:c9:3d:04:c3:c9:da:63:
7e:87:54:37:63:94:19:a1:56:6b:3d:09:7f:c6:fa:
5a:f9:e9:7d:92:2e:97:c4:e9:b1:34:fb:5d:cf:fc:
72:cd:fa:89:b3:a0:c2:93:4a:c6:db:54:7d:95:76:
e5:66:00:4a:c5:a1:20:24:59:ef:9c:17:4d:db:2a:
38:b1:c5:b8:60:4c:28:99:50:53:45:45:26:95:74:
cb:88:05:88:5b:c9:0a:4d:4a:bf:03:8e:c0:81:43:
f1:ac:84:47:4a:19:4e:d0:e0:45:38:09:a7:b6:be:
3e:29:26:7a:ad:37:0a:7e:7e:b1:8e:18:75:a0:8f:
d2:d1:27:3c:fa:6c:96:ff:16:8f:10:d2:40:03:2d:
e7:bb:43:91:16:c7:0f:c9:63:e1:6b:8b:fd:63:61:
b8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F9:D4:15:6B:F3:DD:78:85:82:93:BD:4B:53:4E:EE:38:DF:FF:3D
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/VvnUFWvz3XiFgpO9S1NO7jjf_z0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.17.38.0/24
Signature Algorithm: sha256WithRSAEncryption
86:18:0b:01:b7:79:23:e2:d6:fc:10:ea:7f:b9:1e:fc:55:dd:
8f:4a:dc:ca:55:8d:63:23:6a:e8:69:e1:17:ab:b5:18:6a:51:
3e:ce:59:67:b3:9f:13:9e:e4:90:d6:c5:82:f4:1a:f6:48:1d:
14:81:6f:8d:44:3b:da:63:30:14:5e:8f:02:ef:8c:bf:00:3b:
54:b9:30:2b:45:2c:bb:7e:98:47:57:05:f5:a1:40:c6:cc:62:
18:7b:41:bd:ca:5c:4e:bd:04:c9:f2:82:49:16:b6:59:3e:6d:
f4:b3:43:b3:26:ba:31:97:b6:df:48:6e:75:75:62:4d:fc:4b:
96:3e:ef:09:2f:4e:96:3d:2b:a8:f2:04:00:b2:fa:b7:2e:e2:
16:4c:d8:d9:bb:a7:19:97:96:c9:5f:9d:1a:85:86:d3:2c:f0:
21:fa:93:85:8b:ae:5a:4f:a3:65:ec:6e:fd:ff:b6:fd:00:56:
ab:eb:28:fa:59:3e:34:1f:60:36:26:6a:8e:6b:af:0e:cf:5d:
8b:3e:01:e0:5d:b3:d8:51:8b:42:e0:78:79:bf:68:0f:cd:7f:
63:83:88:03:e8:d0:ed:8f:bc:08:1c:34:86:e0:98:30:bb:6e:
96:b0:c0:bb:20:18:87:49:5c:0a:39:96:96:20:fc:a6:99:5a:
99:28:70:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 13:57:00 2024 by rpki-client on console-ams.rpki-client.org