Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/957bb3-2de5-45cf-acf3-c3a02d7c0697/1/VkP5aoUuegrjIi7sbxZR52eJl-o.roa
File: VkP5aoUuegrjIi7sbxZR52eJl-o.roa (raw, json)
Hash identifier: 14SCTcZln+thSCMDTzdX5sneNdGbezT0xlF28zspxLQ=
Subject key identifier: 56:43:F9:6A:85:2E:7A:0A:E3:22:2E:EC:6F:16:51:E7:67:89:97:EA
Certificate issuer: /CN=8756d27768e11d94a0bbcdfb3fbcd740d45a00f4
Certificate serial: 018CC4245D6D162AD3C2A067FA01986F554D
Authority key identifier: 87:56:D2:77:68:E1:1D:94:A0:BB:CD:FB:3F:BC:D7:40:D4:5A:00:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h1bSd2jhHZSgu837P7zXQNRaAPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/957bb3-2de5-45cf-acf3-c3a02d7c0697/1/VkP5aoUuegrjIi7sbxZR52eJl-o.roa
Signing time: Mon 01 Jan 2024 08:29:26 +0000
ROA not before: Mon 01 Jan 2024 08:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6079
IP address blocks: 82.146.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/957bb3-2de5-45cf-acf3-c3a02d7c0697/1/h1bSd2jhHZSgu837P7zXQNRaAPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/957bb3-2de5-45cf-acf3-c3a02d7c0697/1/h1bSd2jhHZSgu837P7zXQNRaAPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/h1bSd2jhHZSgu837P7zXQNRaAPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:5d:6d:16:2a:d3:c2:a0:67:fa:01:98:6f:55:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8756d27768e11d94a0bbcdfb3fbcd740d45a00f4
Validity
Not Before: Jan 1 08:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5643f96a852e7a0ae3222eec6f1651e7678997ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8d:fe:9f:d4:b1:f5:b3:85:56:31:66:ea:80:
b4:d6:66:b2:0c:36:11:33:b4:43:db:ae:46:8f:48:
c3:a9:14:5c:b9:43:ee:b5:8f:cb:e1:97:68:e4:0d:
cc:6a:c0:ee:6b:53:ec:c1:15:3a:d0:3a:24:7d:05:
1e:1b:2d:1b:c0:9c:82:0e:22:a6:3a:1d:27:6a:8f:
8d:c2:f7:2a:34:3d:13:2e:cc:05:91:98:6d:73:6a:
56:b8:16:60:18:58:1d:ae:c7:d9:80:ed:d0:8f:2e:
92:06:db:72:0f:7b:f2:e8:02:9c:34:29:56:94:c1:
3e:67:0b:b6:0d:2e:ec:57:a2:70:fa:a9:7d:f2:22:
ef:15:4e:61:fc:5c:c9:c0:6b:de:5d:f6:f8:02:f1:
2d:f4:6e:f9:00:bc:af:2a:d7:dc:dc:20:e1:a9:bc:
4f:db:e9:af:e2:09:d9:e3:cc:64:22:a8:b7:15:ed:
36:44:68:6e:12:f7:97:0a:69:33:55:c1:4c:90:d3:
d6:64:04:e4:fc:0e:ad:9b:a8:20:d2:4a:d1:90:fe:
ea:9b:4d:db:88:40:d4:05:ee:16:46:02:90:eb:a1:
9c:49:bf:3f:da:1f:cf:1b:1b:b8:4d:1d:a4:6d:20:
29:3b:bc:2b:71:a4:22:87:0e:6c:22:5d:48:8e:c6:
ed:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:43:F9:6A:85:2E:7A:0A:E3:22:2E:EC:6F:16:51:E7:67:89:97:EA
X509v3 Authority Key Identifier:
keyid:87:56:D2:77:68:E1:1D:94:A0:BB:CD:FB:3F:BC:D7:40:D4:5A:00:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1bSd2jhHZSgu837P7zXQNRaAPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/957bb3-2de5-45cf-acf3-c3a02d7c0697/1/VkP5aoUuegrjIi7sbxZR52eJl-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/957bb3-2de5-45cf-acf3-c3a02d7c0697/1/h1bSd2jhHZSgu837P7zXQNRaAPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.146.16.0/22
Signature Algorithm: sha256WithRSAEncryption
46:02:71:08:53:2b:6b:d6:f7:3f:4f:07:1f:dd:aa:38:f4:d9:
61:f1:5c:74:7e:56:a3:e4:c4:43:4f:c5:a4:70:c7:f9:d1:02:
e1:7e:8d:ed:7b:f5:ac:6b:16:dc:14:5b:b8:14:5a:b1:8b:d9:
7f:5c:c3:4d:46:a0:6b:5b:3b:3d:76:c4:01:44:a6:76:94:eb:
31:95:2f:64:c7:31:2c:a6:e7:48:f9:5b:1a:38:f7:2b:74:17:
a5:cc:df:82:e5:85:f7:04:e0:96:c9:6c:b5:27:9a:ce:99:1c:
84:3e:f3:5a:74:5e:89:a5:13:4b:9c:8b:f9:bc:5f:d0:6a:c6:
58:5b:53:03:ac:b7:13:b4:a7:71:f7:3e:7e:6a:b5:f1:9b:89:
81:03:d4:63:61:fd:bb:4a:c9:9e:70:f5:f9:a0:a5:7b:5b:13:
8c:85:e7:da:31:f7:0c:a6:ad:45:39:83:0c:23:ed:3d:3d:04:
31:9d:73:18:67:06:73:c4:27:cc:71:84:58:dd:d5:1c:6a:66:
8b:39:23:d4:07:18:db:db:e4:0e:3b:66:17:c7:e9:ca:dd:73:
d2:bb:5e:4f:2b:de:5e:3e:af:2a:39:9c:35:59:26:8e:40:2a:
ac:c1:5b:ec:0a:01:ed:cf:72:7c:5d:42:f2:9b:92:5c:38:8b:
83:27:f9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 23:02:13 2024 by rpki-client on console-ams.rpki-client.org