Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/VSKrRwNCP6UZqboiLnEym_-GsoI.roa
File: VSKrRwNCP6UZqboiLnEym_-GsoI.roa (raw, json)
Hash identifier: VpxAv5bUOYi6Wwt4YpKxxInXU3tJkhyQFfx/kIcty/Y=
Subject key identifier: 55:22:AB:47:03:42:3F:A5:19:A9:BA:22:2E:71:32:9B:FF:86:B2:82
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0192752D8B86CD81DC5A100D283B6B576FBC
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/VSKrRwNCP6UZqboiLnEym_-GsoI.roa
Signing time: Thu 10 Oct 2024 06:46:12 +0000
ROA not before: Thu 10 Oct 2024 06:46:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136557
IP address blocks: 91.200.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:75:2d:8b:86:cd:81:dc:5a:10:0d:28:3b:6b:57:6f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Oct 10 06:46:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5522ab4703423fa519a9ba222e71329bff86b282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ce:2a:73:79:5d:27:e4:e7:47:0f:8f:3d:c8:
2a:da:c0:71:3a:f4:6f:7d:68:38:16:54:87:c6:a0:
74:75:4b:eb:db:59:01:56:ba:b3:47:dd:46:ca:e1:
de:dd:0a:e8:53:cf:d3:d9:73:36:82:63:28:92:be:
52:5a:0c:7d:bb:da:00:29:03:b3:6d:f3:68:71:61:
25:02:fa:55:ec:2e:a7:58:41:7b:ac:98:da:4e:0a:
5f:d1:c9:7d:d7:38:bf:28:a7:9a:9b:71:54:8b:20:
d4:e8:bc:6c:04:8f:d0:c6:ea:18:3f:0b:c4:e7:3a:
6c:bd:b7:a7:85:f3:54:46:29:7f:57:de:e1:fe:dc:
95:f9:b5:95:95:28:35:44:f1:c6:f6:b9:4a:55:f0:
31:91:8c:f1:a4:82:c7:2e:d0:ff:86:0e:5c:6d:a0:
70:c7:9d:ce:3f:a5:1f:35:96:88:cd:f0:6a:0d:c7:
e2:0f:94:b6:9e:24:cb:b8:4b:aa:c8:77:7b:7b:7c:
47:30:84:5a:f3:02:0c:9a:6b:d8:24:a8:39:cf:33:
09:6d:24:aa:1f:80:80:28:0e:20:48:ff:ab:a7:92:
ee:bd:58:16:46:72:45:bf:92:46:34:ed:df:e5:5f:
86:8c:47:63:05:1d:fd:ad:f9:3c:65:9c:a4:7e:95:
dc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:22:AB:47:03:42:3F:A5:19:A9:BA:22:2E:71:32:9B:FF:86:B2:82
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/VSKrRwNCP6UZqboiLnEym_-GsoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.222.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:ef:5b:52:c1:36:5e:e4:0a:ed:3f:be:25:26:7c:1c:66:cb:
ca:44:fb:9b:0c:44:7a:2a:fe:06:46:7c:76:eb:c5:7b:63:9e:
fb:08:83:95:08:37:2e:df:94:5f:36:0c:d9:b5:4f:92:f0:8a:
73:81:30:5d:58:25:9d:3f:0e:3a:b5:70:aa:f3:24:53:37:ab:
a7:ee:17:63:4c:3b:e8:34:b8:b0:c8:ec:2e:02:1e:be:2d:c5:
70:fd:16:69:3f:db:09:1a:48:32:f8:0d:af:26:8d:c3:22:2e:
18:16:cc:1f:b5:30:5b:4a:3f:aa:8c:f3:43:87:3f:fc:c7:a5:
c5:85:5d:23:67:97:4e:75:18:d4:e7:c1:35:e1:69:14:a4:61:
8f:1d:65:68:fd:86:2e:d0:fa:f7:5a:92:36:16:14:09:96:6e:
2d:18:b1:d9:1a:7c:38:26:f1:18:c5:be:7c:51:ee:4b:34:64:
56:46:27:d6:81:c6:fe:f5:3e:73:70:95:91:58:e4:25:39:fa:
b1:25:91:ba:a5:d6:e1:a3:2c:7e:a7:fa:95:6e:1a:20:ab:71:
3c:a5:a6:aa:dc:de:98:1c:60:3b:d3:3e:3d:fb:fc:eb:87:53:
d7:92:1b:30:05:d6:75:22:31:b2:c4:df:3c:ba:32:19:6b:82:
a1:e2:2f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:35:41 2024 by rpki-client on console-fra.rpki-client.org