Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/VILJm2MWYpSCzWh4oWU3UC5hvNY.roa
File: VILJm2MWYpSCzWh4oWU3UC5hvNY.roa (raw, json)
Hash identifier: r9zF10AQZnWYw/cHXnXMNY07+RE6xUl1FVrECoVamTY=
Subject key identifier: 54:82:C9:9B:63:16:62:94:82:CD:68:78:A1:65:37:50:2E:61:BC:D6
Certificate issuer: /CN=4b48cf146b4c73d274096d705708d24b729329f8
Certificate serial: 018D54BB551B6A565B5863EE3B37C3E0D35D
Authority key identifier: 4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/VILJm2MWYpSCzWh4oWU3UC5hvNY.roa
Signing time: Mon 29 Jan 2024 10:19:39 +0000
ROA not before: Mon 29 Jan 2024 10:19:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205467
IP address blocks: 85.12.0.0/22 maxlen: 24
85.12.4.0/22 maxlen: 24
193.138.223.0/24 maxlen: 24
2a01:788:213::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:54:bb:55:1b:6a:56:5b:58:63:ee:3b:37:c3:e0:d3:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b48cf146b4c73d274096d705708d24b729329f8
Validity
Not Before: Jan 29 10:19:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5482c99b6316629482cd6878a16537502e61bcd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a4:e2:6e:c3:ea:f9:6e:48:94:a1:8d:11:e3:
42:3b:3d:52:60:5a:71:36:d6:b0:2f:cb:1b:21:c0:
c2:7f:e7:47:1c:e8:6a:9f:24:09:58:7f:a4:8b:3c:
0b:ec:8b:a2:f9:15:66:20:4e:50:c0:8d:bf:cb:2d:
6b:8a:68:3d:0e:f4:45:b8:52:7c:7b:52:8a:01:a7:
c2:dd:f8:0b:72:27:a1:ac:86:71:65:53:a2:5d:8c:
e5:c4:bb:6f:49:74:f6:e5:3e:a3:26:a7:7b:e1:32:
4b:6a:0a:98:04:b5:a6:ae:5d:df:9a:6d:c1:f6:f8:
09:39:80:9e:3b:ad:7f:80:89:b9:43:ab:12:e9:2c:
ad:0e:b3:fd:72:a3:83:24:fc:9d:cd:85:78:03:c5:
9f:9d:89:6a:8d:6f:d9:43:65:9d:04:cd:ba:b3:cc:
28:9a:7c:25:c6:e3:44:45:8d:73:93:02:b3:8b:a9:
a3:cf:bd:3a:96:4c:bc:da:b4:86:e6:8a:57:11:37:
84:76:75:c7:a4:32:65:14:8f:5a:5d:d2:1c:b7:5a:
b4:c9:87:b0:83:84:41:dc:ec:fa:d7:6a:8e:75:d4:
53:ec:2b:04:30:55:25:1e:21:1f:5d:b5:1a:96:a9:
c9:c9:91:82:06:a1:4b:1f:79:b4:58:fa:62:6f:36:
45:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:82:C9:9B:63:16:62:94:82:CD:68:78:A1:65:37:50:2E:61:BC:D6
X509v3 Authority Key Identifier:
keyid:4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/VILJm2MWYpSCzWh4oWU3UC5hvNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.12.0.0/21
193.138.223.0/24
IPv6:
2a01:788:213::/48
Signature Algorithm: sha256WithRSAEncryption
62:3a:bd:24:bc:6a:06:6c:c8:4d:bb:b3:58:bd:a5:df:22:b1:
72:e4:b4:60:91:9a:5a:6d:90:bf:a6:3a:2e:df:74:13:e7:03:
c1:44:2f:32:3f:7b:df:74:b9:b1:b5:52:24:37:ad:97:c4:99:
40:3e:1b:c0:99:f6:20:65:6a:7f:a1:56:57:62:78:06:b7:5d:
20:26:c0:d7:27:9a:fa:71:40:70:9e:bf:d4:8c:fa:72:45:5e:
34:89:92:07:94:3c:19:7f:2b:94:d1:5e:3e:d6:07:25:a0:f4:
4b:7d:e1:f7:4b:bb:12:da:7b:02:02:b7:c4:b6:c4:cf:ae:56:
6e:ed:e8:37:fd:d7:43:8a:a3:eb:fd:c6:0c:08:e6:6f:af:3e:
76:b2:50:5b:40:95:c8:63:f9:28:9b:b6:46:99:3a:24:0e:a5:
53:00:bc:af:40:81:d5:62:bb:64:40:9f:fb:f6:c5:61:50:e4:
b0:18:0f:75:86:70:3b:c2:01:6e:be:25:1d:93:6a:0d:c5:eb:
eb:1f:c4:57:a2:fc:7e:1d:2b:76:fd:15:0c:71:90:fe:73:ec:
e4:ee:93:0f:52:c6:2f:6d:e6:c3:96:1f:f2:02:bd:81:89:5b:
e2:31:bf:eb:5e:0a:0c:2e:bd:ac:39:61:d8:3d:21:e7:10:f6:
5b:c1:d9:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:36:40 2024 by rpki-client on console-ams.rpki-client.org