Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/vriAmgqdhCjlVj6tHBu5ZpaKHzw.roa
File: vriAmgqdhCjlVj6tHBu5ZpaKHzw.roa (raw, json)
Hash identifier: gWD8A7kq+28wk1Y2/KgDP9PMgAU+nRR+N6elMBWeuBs=
Subject key identifier: BE:B8:80:9A:0A:9D:84:28:E5:56:3E:AD:1C:1B:B9:66:96:8A:1F:3C
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 018F39AB4690C8EF043D58FACA4D227BE835
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/vriAmgqdhCjlVj6tHBu5ZpaKHzw.roa
Signing time: Thu 02 May 2024 14:17:56 +0000
ROA not before: Thu 02 May 2024 14:17:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206505
IP address blocks: 185.221.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Jun 2024 01:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:39:ab:46:90:c8:ef:04:3d:58:fa:ca:4d:22:7b:e8:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: May 2 14:17:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=beb8809a0a9d8428e5563ead1c1bb966968a1f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ea:63:28:29:33:b3:13:a8:68:13:65:8e:cd:
df:a5:4b:44:11:ac:09:ef:ea:ca:30:fa:aa:38:2d:
a1:c3:bf:88:67:f5:f3:a9:f5:81:6d:9f:44:89:6d:
ad:bd:39:b5:5c:ee:02:5d:d5:4c:57:75:95:8f:93:
24:46:44:e6:67:b7:17:4a:31:f2:a5:33:5d:65:74:
5d:dd:02:f5:b0:1a:f4:b0:99:b1:54:bd:39:c4:3b:
1c:20:cc:0f:46:76:1d:e4:c5:a2:c1:31:8a:d0:70:
e8:da:63:50:70:1a:3c:4e:42:a4:65:47:a3:1a:f7:
20:1a:bd:ac:4e:15:e2:b3:6c:0b:87:00:e0:5d:94:
c0:61:72:b2:d3:29:cb:d3:38:c7:57:7f:b0:ef:0d:
85:df:96:7f:df:6f:4a:3c:ec:44:73:2d:84:4c:79:
b6:7c:12:39:6f:8d:ae:eb:ff:0f:53:ab:d0:df:0c:
b0:79:b9:22:4a:15:a1:3c:37:a8:38:15:f5:f0:24:
e6:86:fc:1f:df:ca:58:19:97:72:48:e2:42:91:1d:
47:e5:a3:77:c1:67:60:f9:21:31:c6:3e:3b:71:e3:
e5:7f:51:35:e0:e0:34:ee:ab:95:7e:3e:73:31:0c:
68:d7:a6:71:76:9b:4f:f6:5e:54:8e:9a:f9:30:a8:
aa:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B8:80:9A:0A:9D:84:28:E5:56:3E:AD:1C:1B:B9:66:96:8A:1F:3C
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/vriAmgqdhCjlVj6tHBu5ZpaKHzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.27.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:de:3b:c2:dd:5b:18:92:f9:ba:91:16:bd:5d:20:84:f9:75:
c6:a8:d6:52:6d:9b:f1:4d:a8:cf:56:27:bd:05:6e:59:29:6d:
3e:8a:b0:39:94:b1:02:e2:a0:67:5a:a5:2b:e3:42:b7:1a:c3:
88:52:35:11:b5:d3:7d:80:7d:61:c3:82:e8:f7:0c:09:41:88:
8f:43:4f:bf:41:4f:22:c8:46:dd:78:7e:77:77:35:90:54:17:
ec:60:5c:ef:53:40:d9:cb:f6:7c:02:0c:6f:8d:7f:42:9a:f7:
e8:b8:8e:f1:9d:dd:88:ea:e0:bf:58:aa:38:ef:94:7d:4e:0c:
71:e1:00:66:f6:6e:34:f3:f3:fa:08:26:66:4f:32:5c:6a:68:
d6:13:8a:51:14:dc:36:dd:17:2e:e3:4f:6a:48:1b:8c:3a:4f:
35:6b:3b:53:1d:3e:70:11:d4:6b:64:4e:5f:df:d8:57:a4:dc:
6c:ba:87:09:aa:46:9b:d4:3a:9e:a5:4d:2f:7a:c3:cd:33:a2:
dc:ef:41:57:2d:e8:2a:58:42:14:82:38:fa:1d:8f:16:dd:56:
78:25:eb:54:76:b3:d8:89:f6:7d:e1:33:60:87:74:8c:ff:ce:
9b:ac:46:cc:86:53:74:7e:c6:de:5d:cf:f6:a5:75:2a:ed:65:
9c:0c:2a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 10:59:52 2024 by rpki-client on console-ams.rpki-client.org