Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/VVegjOCFV1SJHc-ctc7lu6cnSqE.roa
File: VVegjOCFV1SJHc-ctc7lu6cnSqE.roa (raw, json)
Hash identifier: NErLKd6r3FdmiGzfAzz4tYtYBVNBsq4k5to/H1QGIxw=
Subject key identifier: 55:57:A0:8C:E0:85:57:54:89:1D:CF:9C:B5:CE:E5:BB:A7:27:4A:A1
Certificate issuer: /CN=37a4d2e42f2362c2e6ef52b82f19f7e563757e0c
Certificate serial: 01922E653BDD9B3F83082EEF11DB51E60860
Authority key identifier: 37:A4:D2:E4:2F:23:62:C2:E6:EF:52:B8:2F:19:F7:E5:63:75:7E:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6TS5C8jYsLm71K4Lxn35WN1fgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/VVegjOCFV1SJHc-ctc7lu6cnSqE.roa
Signing time: Thu 26 Sep 2024 12:53:59 +0000
ROA not before: Thu 26 Sep 2024 12:53:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28876
IP address blocks: 5.100.0.0/18 maxlen: 18
5.100.0.0/19 maxlen: 19
5.100.0.0/24 maxlen: 24
5.100.32.0/19 maxlen: 19
37.61.128.0/20 maxlen: 20
176.52.192.0/21 maxlen: 21
185.53.216.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/N6TS5C8jYsLm71K4Lxn35WN1fgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2e:65:3b:dd:9b:3f:83:08:2e:ef:11:db:51:e6:08:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a4d2e42f2362c2e6ef52b82f19f7e563757e0c
Validity
Not Before: Sep 26 12:53:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5557a08ce0855754891dcf9cb5cee5bba7274aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:44:2f:b6:ef:46:a6:72:36:19:33:dd:a8:a2:
2c:b6:d0:d5:72:54:ec:a6:16:1f:6b:77:de:50:8c:
4a:ad:bb:25:ab:33:ad:84:14:73:e6:11:29:4e:21:
3a:77:cf:c4:5f:d3:a5:6f:3b:bd:f8:61:9f:86:1c:
e8:4a:8a:2d:ff:99:a3:db:ad:64:39:6f:03:6f:91:
78:af:ab:fa:fb:e0:70:31:e7:be:fe:a3:c6:a6:4d:
62:b6:c6:6b:1e:5f:29:60:22:4d:57:f0:7b:8d:a0:
53:ae:77:c5:35:b8:a9:a4:c3:69:73:bf:8e:be:6f:
b3:8d:96:68:e3:ce:62:49:d2:1d:a9:fb:ca:2b:6e:
20:52:0d:7d:41:7e:b7:9c:97:f5:8d:d8:c8:23:8f:
14:fd:f7:0b:d2:2e:4d:28:7c:0d:15:c4:26:d6:e2:
7a:d7:b4:0d:4f:d9:f5:e2:a6:32:9a:22:4d:a7:f4:
64:b7:bb:ef:8a:77:7d:c0:5e:db:36:54:e8:62:ad:
f0:62:a7:9e:0d:ce:46:7f:07:48:22:e8:b4:24:9b:
03:76:aa:7c:57:e9:9b:34:7e:f0:3e:42:d7:34:a2:
94:b3:36:10:25:83:9e:7a:ee:6b:89:3f:36:33:08:
c2:3a:0a:af:00:9e:37:4e:bf:bb:e8:2f:8d:b3:68:
97:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:57:A0:8C:E0:85:57:54:89:1D:CF:9C:B5:CE:E5:BB:A7:27:4A:A1
X509v3 Authority Key Identifier:
keyid:37:A4:D2:E4:2F:23:62:C2:E6:EF:52:B8:2F:19:F7:E5:63:75:7E:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6TS5C8jYsLm71K4Lxn35WN1fgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/VVegjOCFV1SJHc-ctc7lu6cnSqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.100.0.0/18
37.61.128.0/20
176.52.192.0/21
185.53.216.0/22
Signature Algorithm: sha256WithRSAEncryption
62:c7:4a:d8:ce:d8:2e:b8:01:81:e7:33:ed:82:9f:4e:14:ba:
87:05:80:71:bf:66:d5:54:46:fe:db:54:0d:ff:3e:2c:a7:fc:
28:0c:56:11:3a:fa:e6:72:7a:73:b8:72:81:a7:6a:bc:44:f2:
48:8f:1c:4f:45:95:12:3a:ff:7a:ab:6a:79:b0:a5:1c:3f:a0:
fc:a7:fa:99:8b:f5:50:42:f6:04:f3:40:cf:54:06:e2:8c:e4:
bc:c0:65:c4:99:ed:36:28:1e:b5:30:47:4b:51:38:03:62:c0:
94:05:e0:10:9e:de:ad:3d:11:8f:6a:ed:9b:be:3a:ee:b6:bd:
7f:c2:fd:74:a1:69:44:01:d5:a5:35:32:94:c4:bd:82:51:3b:
c6:86:3a:9e:e8:cb:c5:0b:1c:21:41:46:49:8c:22:be:4f:83:
62:1d:5e:53:4f:82:c2:57:8e:5a:f4:22:38:78:74:25:99:46:
2d:29:c6:3b:d5:61:c1:a6:4b:8a:9c:af:9b:a8:27:14:ca:d7:
a8:aa:b6:37:bd:a2:dd:71:d7:74:9b:36:de:24:51:72:7a:72:
35:db:72:22:96:da:a4:8a:b8:8a:e1:7b:a1:eb:b5:c0:9d:d5:
1a:b2:5e:1d:45:dd:fe:6a:aa:73:30:fc:98:c3:76:f9:a0:d7:
bd:6e:e6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:32:08 2024 by rpki-client on console-ams.rpki-client.org