Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/V3cSpCsjsntCLwEpr_O2FqQKpPA.roa
File: V3cSpCsjsntCLwEpr_O2FqQKpPA.roa (raw, json)
Hash identifier: zOvAruO49go5kNUWIni7eF6roLpTUUwSto+oDYiSYxY=
Subject key identifier: 57:77:12:A4:2B:23:B2:7B:42:2F:01:29:AF:F3:B6:16:A4:0A:A4:F0
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 018CC7274FC63F7F3FE39CF1ACF89C0BCA7C
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/V3cSpCsjsntCLwEpr_O2FqQKpPA.roa
Signing time: Mon 01 Jan 2024 22:31:31 +0000
ROA not before: Mon 01 Jan 2024 22:31:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48542
IP address blocks: 213.238.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:4f:c6:3f:7f:3f:e3:9c:f1:ac:f8:9c:0b:ca:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 22:31:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=577712a42b23b27b422f0129aff3b616a40aa4f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b4:a1:e2:76:65:a6:42:9b:3f:d7:4b:51:d2:
0a:a2:fb:2b:cb:ed:ca:c3:34:44:4c:47:12:4d:33:
c0:37:58:0e:02:b9:43:69:a8:55:29:ed:0c:c1:fb:
d3:b7:85:78:fe:53:68:d2:a5:c0:86:aa:5e:ea:1c:
62:b7:c9:85:6e:9f:ca:65:92:62:33:f1:c5:91:94:
ec:92:c8:99:ad:5e:ae:ed:df:e8:b6:ea:57:e0:7e:
b4:60:5b:f2:0b:2e:b2:52:7f:34:d6:36:0e:ed:ef:
66:3b:9c:06:7a:51:de:a4:87:30:ab:cb:0b:bf:c5:
88:d6:dd:2d:45:94:7b:dc:a9:1d:30:45:07:9e:84:
12:49:89:5b:63:d2:71:d4:f9:c3:4a:a9:9b:29:12:
61:d1:b1:39:f2:cc:aa:d2:11:65:d7:f6:04:fa:5a:
6d:39:04:33:c9:10:69:80:f4:81:fd:c6:46:d1:6a:
fd:0e:67:ce:ad:90:12:69:0e:40:c3:d2:e6:c2:b4:
53:49:1b:0b:62:da:25:98:d1:94:db:60:85:85:43:
78:ef:dc:e5:a6:ae:aa:10:d8:78:0b:0d:75:7b:10:
9a:20:fd:c1:d8:77:1f:70:ca:d9:8a:ab:30:34:86:
b6:a1:2c:64:56:7c:73:82:14:d8:fe:ff:75:ae:03:
aa:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:77:12:A4:2B:23:B2:7B:42:2F:01:29:AF:F3:B6:16:A4:0A:A4:F0
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/V3cSpCsjsntCLwEpr_O2FqQKpPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.170.0/24
Signature Algorithm: sha256WithRSAEncryption
96:fe:68:ad:48:5a:1a:03:60:f0:8f:2f:79:f1:85:34:d3:7f:
35:52:cd:d7:a4:8c:6d:ec:54:58:f1:03:42:89:40:11:53:af:
3c:63:f9:8f:1a:10:17:a5:b4:0c:81:d3:63:ba:da:b9:2c:ec:
70:18:03:e1:af:51:e7:97:13:08:3b:11:ee:c6:59:d6:e6:28:
15:a9:0e:8f:43:0c:20:66:ac:3f:18:b2:68:32:cb:e7:cf:23:
f3:fa:2f:91:7d:99:58:86:a2:19:2c:a4:b5:bc:2d:d6:2c:cf:
87:b1:fa:d7:39:3b:86:11:d9:1c:3f:e4:cb:c7:75:8f:cd:8f:
3b:94:6a:1a:2c:3f:58:73:11:54:f5:16:29:de:4c:53:52:7f:
33:8b:79:fc:fa:80:e1:6b:82:26:f1:66:c9:51:7a:79:1e:51:
3e:b5:58:49:90:b6:6d:4f:97:76:39:f1:41:b1:e0:f9:6a:b4:
84:ac:37:08:13:de:71:84:49:2b:e3:c2:6c:fd:67:da:af:23:
45:fc:e3:06:3b:f0:e9:9f:31:fc:57:3d:35:66:38:b5:40:d7:
9a:62:ac:b0:18:5e:8f:54:66:ce:09:74:b4:28:80:ab:b6:0c:
bd:6d:c7:66:af:86:25:85:05:5f:cb:94:cd:27:e8:9f:91:19:
4e:be:73:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 13:21:27 2024 by rpki-client on console-fra.rpki-client.org