Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/VOG9BAroC8F_yWJZbJ27M4Sza78.roa
File: VOG9BAroC8F_yWJZbJ27M4Sza78.roa (raw, json)
Hash identifier: 89ddDhwuV/uXS7d6XnpCgkBlkiq3A47MQoYXxnyR0J4=
Subject key identifier: 54:E1:BD:04:0A:E8:0B:C1:7F:C9:62:59:6C:9D:BB:33:84:B3:6B:BF
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 018CC56E1D10A55CD868CA3E6379FF131574
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/VOG9BAroC8F_yWJZbJ27M4Sza78.roa
Signing time: Mon 01 Jan 2024 14:29:37 +0000
ROA not before: Mon 01 Jan 2024 14:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13213
IP address blocks: 89.46.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 07:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:1d:10:a5:5c:d8:68:ca:3e:63:79:ff:13:15:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Jan 1 14:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=54e1bd040ae80bc17fc962596c9dbb3384b36bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d0:21:1f:25:3b:48:b2:51:fd:84:91:51:b9:
f2:3e:6d:de:83:a2:c6:5d:50:79:f7:5d:03:a8:ad:
ee:bf:89:de:ed:7a:a4:cd:77:f0:f1:fb:3d:99:e2:
01:7a:0a:84:77:12:06:d1:29:0b:e7:a6:16:2e:93:
71:9a:1d:ef:5b:2f:7c:e3:50:91:0c:0e:68:01:b0:
6b:80:c7:99:62:3b:90:be:9e:a2:a8:a9:fa:55:a9:
ce:ab:75:32:d9:ef:e4:29:d4:69:f4:92:b4:c8:63:
49:88:86:08:db:12:2b:3e:5b:8b:f5:e9:71:e1:fa:
54:03:93:6a:15:cc:1c:77:e2:76:0c:06:72:4d:46:
21:25:f9:cc:ae:d7:3e:1c:b4:b6:ea:5a:80:30:14:
64:8d:46:5f:39:cc:22:e7:e1:b4:08:3a:31:85:84:
fb:ed:29:7f:db:f5:91:04:a8:d1:74:d4:66:8f:8e:
fd:b2:97:18:05:3e:59:77:56:72:5f:81:bb:9c:14:
d3:34:61:14:5e:d7:90:33:cf:af:bf:47:f1:e6:74:
ca:f2:98:73:90:26:57:2f:e9:83:96:dc:08:33:99:
18:34:e7:15:a9:8e:66:8f:cf:4a:b4:c6:db:d8:fc:
0e:d6:8a:8f:c1:4b:50:eb:f2:e5:6f:95:cf:a6:e2:
a3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E1:BD:04:0A:E8:0B:C1:7F:C9:62:59:6C:9D:BB:33:84:B3:6B:BF
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/VOG9BAroC8F_yWJZbJ27M4Sza78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.9.0/24
Signature Algorithm: sha256WithRSAEncryption
32:c1:74:09:e7:09:8f:5a:b7:8b:25:25:2e:c7:87:22:42:3c:
77:8a:0a:f1:6e:f8:2a:f0:f3:98:3a:8b:39:f0:ce:0b:9e:23:
38:86:48:2e:63:9f:16:28:aa:60:a5:68:be:e8:0f:21:02:39:
05:16:74:06:b4:d8:73:5f:35:57:37:12:e4:75:02:95:b3:a6:
f5:e0:60:b6:bd:ae:d3:13:75:c1:34:d3:57:51:0a:6b:e7:53:
33:1c:56:1f:9c:03:cb:65:48:3d:51:77:94:30:2d:a3:64:37:
a3:bd:d7:3a:8d:d2:41:7b:7d:b3:32:7f:aa:ef:8d:45:e4:a6:
85:91:25:41:a5:8c:97:13:59:26:8c:b5:e1:f9:2e:dc:5a:ca:
eb:b8:cd:de:9a:24:04:c5:f5:8f:2b:26:a0:05:59:c5:48:64:
82:54:68:5e:11:d2:49:6e:6a:05:35:35:f5:46:64:c5:08:71:
ae:4b:89:7c:98:0c:9c:67:31:c5:f4:2d:13:9d:a8:87:c8:9c:
d8:21:63:cd:0f:90:a3:52:48:b9:ae:61:7a:0b:b0:ca:36:7b:
0d:49:26:0d:d0:48:5f:4e:3b:42:a2:93:76:16:1f:8e:25:07:
39:ff:42:98:1e:85:f2:28:1b:bd:52:8b:31:b6:ef:67:9f:05:
78:53:e8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:12:20 2024 by rpki-client on console-ams.rpki-client.org