Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/vfvzBRAvo93lxceIJ74gh7gs0Uw.roa
File: vfvzBRAvo93lxceIJ74gh7gs0Uw.roa (raw, json)
Hash identifier: X9//AlGX6gZtqIIR/BFaz3KTgATuy0KdrDaf5Kx8zKk=
Subject key identifier: BD:FB:F3:05:10:2F:A3:DD:E5:C5:C7:88:27:BE:20:87:B8:2C:D1:4C
Certificate issuer: /CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
Certificate serial: 018CC80144AD237B8E42D372682C7AFD5A75
Authority key identifier: 2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/vfvzBRAvo93lxceIJ74gh7gs0Uw.roa
Signing time: Tue 02 Jan 2024 02:29:35 +0000
ROA not before: Tue 02 Jan 2024 02:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209095
IP address blocks: 5.182.136.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:44:ad:23:7b:8e:42:d3:72:68:2c:7a:fd:5a:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
Validity
Not Before: Jan 2 02:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bdfbf305102fa3dde5c5c78827be2087b82cd14c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5d:00:b2:83:5c:fb:df:ae:7c:03:93:e1:48:
1f:7b:6d:b3:03:d7:04:3a:eb:1a:a6:35:ae:31:1d:
73:1a:bd:b3:89:f8:ce:e5:65:7b:f2:55:8b:49:53:
64:fc:ff:6c:01:cf:e1:1f:cb:f4:12:4f:38:69:64:
73:d3:a0:61:0c:af:98:d2:9d:52:d6:9f:e6:6e:a0:
5d:01:8d:b5:34:62:e8:82:1c:7c:79:1e:ff:f0:61:
fd:46:ab:1b:35:a5:d1:e3:c8:19:73:71:e3:fb:ef:
06:91:5a:a9:9a:19:5f:ec:25:e9:e2:fa:d7:a7:17:
98:68:58:f4:23:9f:18:74:a0:ab:f8:72:70:43:6a:
6e:80:d1:35:05:2e:b5:fe:9c:e5:e7:25:a2:5d:57:
99:48:05:50:bd:96:08:96:22:8c:5a:21:33:bd:a9:
80:28:fb:d7:ab:60:d5:f4:62:b2:52:18:25:bb:8e:
1a:fd:04:9f:12:8d:c3:87:02:97:aa:56:c4:f2:0f:
fb:bd:99:a8:ce:c2:ad:03:d0:f6:06:cd:8d:b2:18:
17:2b:d6:d2:cb:d0:11:70:47:37:1b:f8:fc:10:67:
e8:1d:25:f6:3f:36:c1:20:c2:53:f7:18:12:4e:18:
35:63:d4:0a:ea:8b:ad:b0:98:97:a3:98:9f:eb:ce:
cb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:FB:F3:05:10:2F:A3:DD:E5:C5:C7:88:27:BE:20:87:B8:2C:D1:4C
X509v3 Authority Key Identifier:
keyid:2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/vfvzBRAvo93lxceIJ74gh7gs0Uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.136.0/22
Signature Algorithm: sha256WithRSAEncryption
42:8d:c3:2f:53:89:9d:15:65:ec:7b:4c:ab:b3:f9:c4:48:b0:
d3:6c:14:a7:30:30:64:71:82:d8:ff:35:f9:af:cc:9d:c1:79:
60:f4:63:14:cd:62:d7:37:74:1c:98:c6:14:5a:a6:39:db:3f:
43:c1:62:9a:30:59:c2:9e:2d:24:45:ed:c3:7e:81:8e:b0:c5:
c3:0d:af:3b:c8:0b:30:08:ac:18:57:d8:45:55:f1:f7:b6:b4:
ff:8a:0a:1f:2b:0d:23:91:f0:1f:09:7a:69:e3:03:52:cd:6b:
3b:df:df:32:aa:ca:f5:af:d0:a2:f6:80:36:8b:8d:0b:b7:52:
fd:33:38:43:4f:51:3a:f2:3b:65:92:40:9a:b8:d9:ec:8c:49:
35:64:b6:56:ef:72:3c:d4:21:ab:50:06:27:c2:52:d7:6e:04:
03:fb:08:12:a0:1e:a2:2f:e3:25:de:e6:a6:65:88:6e:78:6f:
2d:9c:99:63:74:1f:d3:b4:bf:61:b9:d4:27:b4:38:34:19:17:
72:5a:ec:62:cf:0d:39:7b:52:29:95:56:bc:e9:53:e1:ff:bb:
67:8a:48:36:9d:47:9f:a9:ba:52:13:23:d4:be:5c:b0:20:a7:
69:ff:f1:bb:27:bf:a9:c6:81:e7:95:65:45:8e:ee:ac:29:c6:
2e:35:db:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:48:08 2024 by rpki-client on console-fra.rpki-client.org