Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/VwdRePlDopY7vtWO_rEJOwFPl94.roa
File: VwdRePlDopY7vtWO_rEJOwFPl94.roa (raw, json)
Hash identifier: zn1SUxK0kQIFXVlxgB7Vrw6NEyVYkwKhDTGhcDxl6Yg=
Subject key identifier: 57:07:51:78:F9:43:A2:96:3B:BE:D5:8E:FE:B1:09:3B:01:4F:97:DE
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 018CC94E061C43266EFDE193B743F8594800
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/VwdRePlDopY7vtWO_rEJOwFPl94.roa
Signing time: Tue 02 Jan 2024 08:33:02 +0000
ROA not before: Tue 02 Jan 2024 08:33:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206092
IP address blocks: 188.215.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 15:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:06:1c:43:26:6e:fd:e1:93:b7:43:f8:59:48:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jan 2 08:33:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57075178f943a2963bbed58efeb1093b014f97de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:09:4f:d6:58:4b:00:a3:9d:4a:0a:14:a5:39:
a5:8a:12:fe:0a:1f:9a:fd:d9:04:06:e8:a9:88:94:
69:92:01:3a:ae:2c:30:1d:3c:d9:56:f9:9b:4b:ca:
6e:4a:3c:83:56:18:dc:c4:2c:b7:ca:c2:31:9d:b3:
be:b3:72:10:b9:ff:9b:7c:71:be:4e:4e:02:7c:83:
40:59:a5:2a:1a:77:b9:b4:45:78:c5:ed:b1:5d:b4:
8a:d0:67:c6:4c:43:09:bd:1d:9b:b2:97:9a:9e:e6:
a8:34:04:50:b2:22:fd:46:34:16:77:38:58:7d:95:
96:10:f1:7f:da:46:f6:9a:ff:c7:df:0e:4d:87:3d:
d9:eb:67:65:d9:37:6e:0e:39:2d:01:fd:a4:d5:59:
4e:a9:40:13:21:80:2e:56:ac:3a:23:f6:f9:92:cd:
5c:ac:a0:4f:88:7e:85:ba:3a:d7:8a:bf:88:5c:1f:
7f:12:00:37:59:5e:8e:e0:bc:61:30:68:9a:65:50:
f4:8d:7e:5c:e4:25:d5:b1:11:41:81:2d:3e:7a:be:
b2:23:d7:73:32:2d:ac:e9:41:cd:46:4d:4d:9e:2c:
4e:7d:c7:6f:5f:7a:fb:cf:74:2b:f4:84:91:b9:b0:
a2:c1:6c:27:4a:b5:df:17:1e:60:ae:48:87:66:8b:
b1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:07:51:78:F9:43:A2:96:3B:BE:D5:8E:FE:B1:09:3B:01:4F:97:DE
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/VwdRePlDopY7vtWO_rEJOwFPl94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.215.95.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:15:08:8a:86:c1:46:fc:cf:0a:aa:13:f9:5b:a1:49:06:00:
40:65:ba:0e:c5:f5:64:8a:be:6f:e3:3d:82:0e:30:20:a3:3c:
52:89:8f:13:cc:68:7d:d1:b2:cc:8d:c1:ad:37:62:19:18:c9:
11:f5:fd:49:f7:94:7c:94:d6:9b:e6:81:3f:d9:27:e1:ae:e2:
27:35:a8:69:7e:12:0e:6a:b0:f8:d8:73:38:88:66:d2:ce:fc:
5d:de:3a:90:82:49:db:94:d3:d5:77:ea:07:90:b6:94:d7:e7:
a7:2d:cb:16:09:9c:f8:cd:83:56:d4:0c:96:cf:bd:a6:ac:dd:
03:63:b7:5d:64:34:81:15:5b:5e:17:5a:06:3f:65:fb:b7:e8:
ef:ea:d6:87:9c:4a:55:cb:71:13:76:c4:a7:f2:24:bf:b1:a9:
c4:86:d5:5d:ac:07:8a:d5:26:51:1c:fa:7e:96:0f:3d:e9:b4:
80:6b:c8:18:c3:b5:df:9a:6c:5c:92:0b:69:e3:21:8b:df:f8:
3b:0f:91:61:da:e3:8a:aa:40:88:11:5a:1d:d4:a9:86:70:f3:
1f:e4:5d:20:9a:55:b8:2d:de:30:0c:b0:42:e4:b9:f7:74:9f:
11:d8:c0:9f:4c:b5:a3:1d:0c:6f:c4:34:77:fe:09:64:7e:67:
3f:38:36:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 21:23:39 2024 by rpki-client on console-fra.rpki-client.org