Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/Vm6xVnGu5Af01Ox696kESJbpre8.roa
File: Vm6xVnGu5Af01Ox696kESJbpre8.roa (raw, json)
Hash identifier: l8pWFwTDpUI74w7nuYter9AFo7CKzg+Vp6nXkWlBx3E=
Subject key identifier: 56:6E:B1:56:71:AE:E4:07:F4:D4:EC:7A:F7:A9:04:48:96:E9:AD:EF
Certificate issuer: /CN=13cd87027d7d3a3b9f7c4ba4495e49e21ad5a4bb
Certificate serial: 018CC56E313B264BF380E94FF4E314078DDA
Authority key identifier: 13:CD:87:02:7D:7D:3A:3B:9F:7C:4B:A4:49:5E:49:E2:1A:D5:A4:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E82HAn19OjuffEukSV5J4hrVpLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/Vm6xVnGu5Af01Ox696kESJbpre8.roa
Signing time: Mon 01 Jan 2024 14:29:42 +0000
ROA not before: Mon 01 Jan 2024 14:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202709
IP address blocks: 185.242.178.0/24 maxlen: 24
2a10:98c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/E82HAn19OjuffEukSV5J4hrVpLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:31:3b:26:4b:f3:80:e9:4f:f4:e3:14:07:8d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13cd87027d7d3a3b9f7c4ba4495e49e21ad5a4bb
Validity
Not Before: Jan 1 14:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=566eb15671aee407f4d4ec7af7a9044896e9adef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:af:6c:aa:57:5f:e5:be:d7:83:f0:e5:87:a5:
0d:5b:b0:fc:de:99:78:43:ae:b2:e8:f2:0d:20:be:
51:0b:0c:a5:01:4f:76:58:a0:a6:43:41:74:c2:b7:
ef:48:0b:76:ff:49:b3:66:03:7b:c6:68:39:e8:44:
c4:32:6c:0d:bf:0b:eb:52:ac:93:2d:e4:db:c8:85:
e2:8f:aa:6d:1c:7c:a0:c8:08:ca:0a:6b:a4:70:b7:
57:91:d0:81:6b:63:f1:92:76:1a:93:99:72:a3:42:
8b:64:24:6c:43:01:9c:4d:1e:cc:e6:15:94:51:f9:
ad:bc:58:4a:cb:97:40:4a:01:d7:61:e6:45:4d:a8:
de:7d:d5:8f:dc:3f:c2:9d:59:63:82:49:81:09:24:
bb:60:3f:4a:46:90:a7:59:08:29:5c:25:44:f6:eb:
8a:0a:73:6e:69:ae:e3:83:fa:30:e1:ed:4b:be:fe:
ec:7a:29:a4:46:01:10:bf:80:2e:d5:c7:3a:7c:23:
fc:c3:4e:61:6b:58:28:fd:21:89:53:2e:c7:71:ee:
24:22:3f:9e:02:7f:3c:f1:a3:3f:12:7a:be:31:51:
a9:2e:d7:f2:8d:04:27:b0:9f:95:4e:eb:36:a6:19:
17:24:6c:ad:14:26:ce:bf:a4:41:a5:02:1b:c1:d7:
53:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:6E:B1:56:71:AE:E4:07:F4:D4:EC:7A:F7:A9:04:48:96:E9:AD:EF
X509v3 Authority Key Identifier:
keyid:13:CD:87:02:7D:7D:3A:3B:9F:7C:4B:A4:49:5E:49:E2:1A:D5:A4:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E82HAn19OjuffEukSV5J4hrVpLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/Vm6xVnGu5Af01Ox696kESJbpre8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.178.0/24
IPv6:
2a10:98c0::/29
Signature Algorithm: sha256WithRSAEncryption
b9:e3:bd:c7:9e:e7:39:dd:f4:b1:19:94:84:1e:dc:78:59:4b:
7c:ae:1b:ae:9b:8c:be:24:d9:cd:7e:cb:59:4d:f3:1c:4f:ac:
e8:45:7b:58:da:39:08:23:7d:f2:ff:af:b8:95:b3:9c:bf:6f:
43:78:ff:93:ac:c1:c6:f8:56:79:24:b7:a2:fa:e4:28:7f:6b:
25:ba:b2:82:a3:cd:59:51:e6:74:7b:ab:c3:a2:f7:f5:56:dc:
8e:21:0c:31:9a:8d:1b:c6:a4:b6:22:c5:af:9e:e4:91:cc:0a:
b1:0e:c8:d6:80:90:68:cb:c4:bf:f2:0c:79:c7:1d:60:f9:86:
00:e4:41:ab:e9:2b:f8:91:60:9a:3d:5e:85:8a:ba:74:f2:64:
23:f0:08:69:ab:a7:ca:25:35:b5:24:64:e7:63:01:97:93:3f:
91:a0:6a:f4:b5:11:0d:ec:ea:ed:fc:96:51:78:ba:0e:a0:07:
b2:c0:48:1d:fd:dd:bb:ef:52:4f:a3:53:95:d0:79:6e:43:6e:
c2:4d:0e:ff:a4:d5:99:60:10:94:c2:40:1f:1c:ef:bf:3c:9f:
96:00:33:11:e1:9d:17:b1:ff:d9:5b:c8:c5:3a:ee:af:9a:f2:
a8:c0:b2:44:be:3e:03:71:5b:24:50:d0:44:56:bd:92:b2:fb:
32:3f:bc:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 23:14:54 2024 by rpki-client on console-ams.rpki-client.org