Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/VmSVyvi3lyudcnmBWmJFeCYTV6E.roa
File: VmSVyvi3lyudcnmBWmJFeCYTV6E.roa (raw, json)
Hash identifier: wAQhZuayAXBnSuyxtOB+CVFlqGztTG/JfcgHkNQhnvI=
Subject key identifier: 56:64:95:CA:F8:B7:97:2B:9D:72:79:81:5A:62:45:78:26:13:57:A1
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 018F0A3A114D8755BCEA68222F62CB915F14
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/VmSVyvi3lyudcnmBWmJFeCYTV6E.roa
Signing time: Tue 23 Apr 2024 09:12:08 +0000
ROA not before: Tue 23 Apr 2024 09:12:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 212.46.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 00:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0a:3a:11:4d:87:55:bc:ea:68:22:2f:62:cb:91:5f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Apr 23 09:12:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=566495caf8b7972b9d7279815a624578261357a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e3:66:a8:89:ee:44:34:86:bc:d3:36:89:0d:
93:50:2a:62:c3:e2:f4:d5:c9:6e:28:9e:89:28:43:
d7:56:b3:3a:5d:3d:88:c8:b8:d7:da:36:6a:5f:8a:
7e:63:f3:67:a2:d2:63:16:c3:12:4c:73:62:6d:5d:
14:09:c3:a5:81:eb:a3:42:ec:35:1a:f3:59:bb:ef:
2f:e4:8d:55:e9:01:9f:34:2b:a9:da:78:69:94:74:
0f:9b:eb:91:66:18:72:b2:bf:d4:08:a3:41:ac:59:
59:49:bc:58:fb:ca:9e:64:83:4e:a9:09:0e:8f:49:
d6:b5:be:7d:8c:26:27:a5:25:34:ab:8c:64:ae:1a:
d8:4c:37:17:6d:06:39:ca:47:b4:bf:a5:e9:48:6f:
be:34:09:00:34:77:c0:56:67:a0:c0:71:6f:52:fe:
0b:22:1e:aa:ec:0d:c0:2d:d7:e7:69:88:42:b7:19:
92:90:f1:d4:31:4c:a6:c9:bb:18:cc:55:27:b7:04:
cf:3e:a2:d2:c2:60:a1:ad:ed:ad:35:3b:1f:59:11:
df:37:84:e7:05:8c:76:b6:b5:f0:6a:a2:25:4a:5a:
12:c5:1e:1d:b1:14:2b:0a:3a:28:80:82:a3:44:88:
19:49:ba:5d:8b:be:94:d7:40:fd:47:d0:04:d2:88:
1e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:64:95:CA:F8:B7:97:2B:9D:72:79:81:5A:62:45:78:26:13:57:A1
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/VmSVyvi3lyudcnmBWmJFeCYTV6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.37.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:90:69:6d:16:19:13:a5:8b:26:fc:a0:ac:51:4c:50:3c:95:
a8:34:0e:d6:cf:6a:1b:5a:14:9b:a4:d3:3a:ac:bb:54:ac:4a:
61:37:10:d6:c7:48:10:82:1c:8c:e3:c5:3a:e4:d7:5e:dd:c6:
34:d0:8e:8d:b3:13:60:48:ed:78:01:3b:ef:b2:82:35:e4:b1:
1a:9b:cf:41:6b:95:30:83:a7:3f:c5:50:6c:2f:4d:17:73:b8:
33:0c:bb:ab:32:e2:b8:62:33:55:8e:b8:8d:67:4f:b2:e7:b8:
d0:7f:5a:df:97:03:d8:2e:88:13:1d:21:af:ed:a9:7f:d9:bf:
06:94:7d:51:2e:04:8c:bb:6d:f5:50:4f:44:13:fc:7b:d5:aa:
a1:a5:3f:36:5e:72:9a:36:34:d2:3d:6e:f8:d4:7b:4d:8c:f6:
61:e8:83:90:30:f6:82:5b:ce:8c:8c:50:d7:4a:e4:c1:eb:50:
88:a8:d9:a5:89:bd:45:77:2a:47:5f:4d:00:58:c6:3c:5c:4f:
5f:8c:d3:0f:86:dc:bf:ae:43:1b:2c:7a:68:87:94:31:f7:34:
f2:e4:af:40:f0:34:ae:50:75:e8:4b:70:93:e6:00:2d:1f:14:
db:c2:de:ef:b5:34:22:33:f4:36:6a:38:33:e1:84:0b:7b:aa:
bc:27:04:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 08:42:36 2024 by rpki-client on console-fra.rpki-client.org