Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/VONprgM4PVX9IVzNqQ_SgcEQv0I.roa
File: VONprgM4PVX9IVzNqQ_SgcEQv0I.roa (raw, json)
Hash identifier: CI3/zNMQc91luKXaGnOmjjd1A9rchxaYk6Vi+tN4u3g=
Subject key identifier: 54:E3:69:AE:03:38:3D:55:FD:21:5C:CD:A9:0F:D2:81:C1:10:BF:42
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 018F402D87E0F395B360486D58CE6C59D202
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/VONprgM4PVX9IVzNqQ_SgcEQv0I.roa
Signing time: Fri 03 May 2024 20:37:56 +0000
ROA not before: Fri 03 May 2024 20:37:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210542
IP address blocks: 185.226.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:40:2d:87:e0:f3:95:b3:60:48:6d:58:ce:6c:59:d2:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: May 3 20:37:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=54e369ae03383d55fd215ccda90fd281c110bf42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a2:ff:75:5e:f6:7c:c2:79:31:e0:ce:e3:64:
02:29:40:ae:01:28:d9:9a:51:8c:73:37:90:fb:d6:
00:20:f8:3a:f6:f5:4f:51:8a:45:bf:7c:50:db:01:
e2:f4:0d:3e:11:bd:41:31:ad:07:04:89:99:65:38:
99:9b:5a:b6:95:da:59:c9:88:de:d6:32:ab:db:13:
5c:a3:0a:44:e8:a3:e2:20:3e:a5:61:68:bb:0b:a6:
cf:98:e4:71:8b:45:6f:4a:14:a5:8b:60:92:cc:a7:
38:fc:86:5e:7e:e0:65:b2:d8:6d:eb:55:c9:cb:c0:
15:23:f9:38:b1:1c:7c:cd:fa:24:b8:27:2f:52:68:
72:56:f5:6f:3a:5c:6a:1b:e2:2d:a6:ef:61:6f:a5:
5c:e4:f9:d1:82:f4:a2:28:1c:73:f5:c1:5e:01:e6:
59:9a:9a:f5:1a:9d:58:a0:b7:fd:9c:25:18:02:dc:
7f:f0:4c:24:03:27:27:0b:45:cf:b1:7d:6c:45:43:
7e:e5:df:2f:94:02:9d:79:3a:72:e7:ef:bb:db:4c:
40:c5:29:67:c3:be:25:75:11:42:60:bc:6e:6c:95:
ec:a6:01:81:02:68:2f:80:e8:29:d1:eb:39:f4:b9:
88:5e:67:92:ee:41:76:b8:1e:5e:38:f5:e5:e5:33:
4d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E3:69:AE:03:38:3D:55:FD:21:5C:CD:A9:0F:D2:81:C1:10:BF:42
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/VONprgM4PVX9IVzNqQ_SgcEQv0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.181.0/24
Signature Algorithm: sha256WithRSAEncryption
02:25:6b:5c:86:7f:73:dd:6a:32:c7:8d:8b:34:8e:d6:1e:b9:
89:2c:94:e6:45:ef:0b:d5:d9:73:bc:e7:a8:0c:a8:8c:45:e2:
ba:f7:62:e3:7b:cf:67:f5:d7:d8:31:ae:6c:3e:df:ed:86:e6:
64:53:b8:cd:9c:ec:cf:dd:5d:ec:2b:8d:de:7f:7f:fc:b8:bc:
eb:0a:87:69:5a:91:ee:e7:3b:f1:74:45:bc:c2:10:78:52:03:
98:62:4b:70:f9:e9:16:80:cd:a5:ce:23:b5:aa:d3:ce:d4:12:
f3:e6:03:fe:cc:cd:c0:34:bb:50:f0:43:21:8f:91:46:ae:db:
5d:4a:29:1a:d1:95:ee:9b:17:65:9e:07:1c:8a:00:90:00:7f:
a8:14:d8:f8:02:5a:da:e8:ff:33:8a:19:c9:04:52:b8:21:0d:
e8:41:9e:3a:f9:42:aa:0b:c5:99:8f:7e:76:25:fe:44:6a:3f:
ea:68:d3:ce:f5:9a:5b:13:24:e9:af:e2:7f:4e:d1:3f:a2:07:
80:d9:a8:89:5e:7e:3d:35:49:47:5a:ae:90:cf:4e:85:ac:96:
9a:74:bb:27:a2:7b:c7:88:ed:0c:3e:a4:9a:93:d9:45:d0:57:
b4:fc:4f:b2:c4:5f:61:2b:ff:56:1d:97:ad:21:f3:d8:37:ec:
cd:e0:2e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 21:07:10 2024 by rpki-client on console-ams.rpki-client.org