Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/VoPH9k1N1OTksWL8-31giZ0FNSM.roa
File: VoPH9k1N1OTksWL8-31giZ0FNSM.roa (raw, json)
Hash identifier: NDwu8Il8szGOokbSwbr8bOUVADBKNswxI9YTXRcI5yc=
Subject key identifier: 56:83:C7:F6:4D:4D:D4:E4:E4:B1:62:FC:FB:7D:60:89:9D:05:35:23
Certificate issuer: /CN=00e4f6a77368b7cecfe67220b436576b1e008aec
Certificate serial: 018CC801BD39270EA1B628A84DFB2471991C
Authority key identifier: 00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/VoPH9k1N1OTksWL8-31giZ0FNSM.roa
Signing time: Tue 02 Jan 2024 02:30:06 +0000
ROA not before: Tue 02 Jan 2024 02:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209242
IP address blocks: 185.67.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:bd:39:27:0e:a1:b6:28:a8:4d:fb:24:71:99:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e4f6a77368b7cecfe67220b436576b1e008aec
Validity
Not Before: Jan 2 02:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5683c7f64d4dd4e4e4b162fcfb7d60899d053523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:44:86:a6:63:6d:ba:5c:3a:8a:6c:b0:b7:a4:
67:48:fc:80:6a:ad:9e:36:98:02:a5:48:84:ca:d0:
f9:3b:37:41:fb:09:97:d9:93:ca:83:4f:d4:6b:34:
98:08:32:e5:5c:4e:60:38:1f:3e:f1:53:6b:64:d7:
07:8e:49:69:ea:b5:bd:27:4d:0b:89:b2:51:a3:cf:
8d:99:01:f5:c3:fd:46:92:46:67:45:db:d5:b4:60:
c9:d9:71:2a:2e:3a:10:33:d1:92:6a:f4:9f:85:0b:
77:36:53:db:04:43:f2:52:a9:b7:83:07:29:05:00:
f3:58:aa:73:2d:53:3d:13:64:8f:a0:27:60:ef:80:
f7:99:a4:a5:45:35:ff:cf:0b:e7:01:39:8d:cd:4f:
9f:94:3f:e3:94:93:49:51:c4:52:57:36:49:7d:bf:
ab:bc:2f:f9:16:7d:ab:d6:3c:ff:a1:85:9a:4f:e8:
ba:9d:da:e4:9a:6e:2d:05:af:b5:05:dc:9d:95:59:
1c:35:08:a7:46:9c:94:0d:5a:96:6c:a5:33:a1:83:
d1:6f:bc:aa:de:2d:43:92:4d:2a:6e:67:86:90:f1:
1f:19:41:12:5d:73:b7:4f:1b:71:8d:f2:a8:2a:38:
79:33:b7:f4:50:01:ab:7f:4d:9b:c8:74:86:5e:44:
62:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:83:C7:F6:4D:4D:D4:E4:E4:B1:62:FC:FB:7D:60:89:9D:05:35:23
X509v3 Authority Key Identifier:
keyid:00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/VoPH9k1N1OTksWL8-31giZ0FNSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.67.124.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:27:b7:86:0b:f4:65:74:86:a8:e7:01:0b:da:af:a5:e9:a1:
ef:67:2e:6c:9c:26:0f:d3:dc:28:7d:9a:1c:38:51:2b:60:97:
10:69:42:44:67:56:43:6d:fa:57:4e:37:73:8c:c0:47:e4:c3:
0e:88:84:06:8b:37:94:24:88:20:96:18:e7:08:88:44:2f:5e:
ff:02:6c:af:c4:d7:cc:7d:5a:5e:ff:31:39:11:49:4d:31:ca:
db:38:7d:79:cf:f6:33:dd:6a:8a:70:e0:e4:0e:10:5b:4e:0d:
2f:78:9c:6c:0c:42:9d:a0:08:ca:e1:bc:62:03:e1:da:93:51:
24:c4:56:53:9b:34:4e:48:25:25:13:69:ad:12:9a:c6:e1:62:
70:fe:a7:d0:a3:ec:e7:0c:41:e3:96:67:3c:f3:ae:3b:b1:63:
43:51:68:12:7b:3f:30:e4:cf:f0:6b:7e:da:a7:62:d5:3d:6a:
f3:7f:cc:13:17:ea:92:34:00:07:1d:42:cb:32:e7:cc:d5:c3:
58:d7:a6:f4:5e:ed:27:dd:fe:e8:b1:82:b1:74:3c:f5:26:a0:
ed:8f:ae:4c:ce:63:c4:cc:77:81:20:e0:96:d5:38:6e:db:9c:
a3:98:ba:5b:5e:99:40:39:c9:d7:eb:e1:fa:57:ac:4d:3d:72:
26:86:ce:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 19:39:26 2024 by rpki-client on console-ams.rpki-client.org