Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/VkknxPqy99rmyEvPrhbTWmSaGUs.roa
File: VkknxPqy99rmyEvPrhbTWmSaGUs.roa (raw, json)
Hash identifier: XM59uUMli+bnpQNw2/PerSSxIe3vp/rNL2JHbFQrCmY=
Subject key identifier: 56:49:27:C4:FA:B2:F7:DA:E6:C8:4B:CF:AE:16:D3:5A:64:9A:19:4B
Certificate issuer: /CN=4b2e93ca9f9d46de543ff7c2d0540e897dc14fee
Certificate serial: 018CC79572CEAF1A7A5D4B524E1A237AF548
Authority key identifier: 4B:2E:93:CA:9F:9D:46:DE:54:3F:F7:C2:D0:54:0E:89:7D:C1:4F:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/VkknxPqy99rmyEvPrhbTWmSaGUs.roa
Signing time: Tue 02 Jan 2024 00:31:49 +0000
ROA not before: Tue 02 Jan 2024 00:31:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8881
IP address blocks: 194.180.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:72:ce:af:1a:7a:5d:4b:52:4e:1a:23:7a:f5:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b2e93ca9f9d46de543ff7c2d0540e897dc14fee
Validity
Not Before: Jan 2 00:31:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=564927c4fab2f7dae6c84bcfae16d35a649a194b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a3:12:17:23:a8:a5:d1:78:c8:de:06:51:93:
bf:f3:66:b8:ae:90:aa:a1:66:4d:ac:e8:b9:8f:1e:
3d:e4:36:95:bf:a0:83:6e:b5:db:c5:a2:9d:f4:f2:
fe:37:42:73:72:4a:63:27:e7:13:50:5f:af:5b:5a:
50:c1:d5:af:af:8f:90:26:33:53:ce:4d:86:a2:38:
68:5e:b7:2b:6e:13:f7:ab:01:13:be:87:83:bc:0d:
1f:b1:77:74:c9:a7:b2:d1:11:3d:40:75:c1:25:4e:
a7:01:fb:ed:0b:7c:85:db:f2:a9:fb:a1:8e:79:01:
0b:33:eb:4e:e7:10:6d:44:da:5a:cc:14:e6:e3:5a:
8a:0a:18:6e:94:8e:d5:9b:ad:ca:fa:1c:ef:12:32:
a1:9d:63:a3:5b:43:2f:cd:10:5e:23:bc:a1:1b:08:
1c:82:f7:ed:1a:67:ef:f6:31:f2:09:27:5e:2a:8a:
82:c9:85:fe:41:ca:b2:c7:4e:6c:9d:8b:71:91:ac:
33:ee:3b:ce:25:30:bf:09:f3:5c:aa:04:7e:af:6f:
e6:ab:d4:89:7e:38:76:19:2b:eb:5e:71:db:ae:83:
2a:06:d9:0e:20:4a:e2:e4:31:6d:8e:73:68:9a:b1:
33:70:bc:dd:bb:d7:98:60:2e:d1:cb:07:c3:b7:91:
b2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:49:27:C4:FA:B2:F7:DA:E6:C8:4B:CF:AE:16:D3:5A:64:9A:19:4B
X509v3 Authority Key Identifier:
keyid:4B:2E:93:CA:9F:9D:46:DE:54:3F:F7:C2:D0:54:0E:89:7D:C1:4F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/VkknxPqy99rmyEvPrhbTWmSaGUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.18.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:d0:ee:c1:0b:d6:de:34:56:85:70:1b:96:80:34:3e:b0:50:
03:94:c6:12:7f:4a:b5:65:1a:84:88:ed:9a:e5:40:ec:e7:e3:
9c:96:9f:d5:ea:1e:9c:88:e5:79:7f:0d:9c:cb:88:3f:ab:5c:
d1:65:9b:27:83:7d:4b:d7:c9:74:75:8c:d8:c5:da:17:ee:ca:
57:e3:b9:79:42:93:d1:5c:da:56:7b:c9:b3:da:6e:cd:2c:fc:
ea:69:3e:9a:c9:91:54:ab:0e:80:aa:36:6c:8b:20:92:0b:19:
ec:30:63:74:b7:8d:00:9f:3b:cc:a1:c8:9b:97:72:00:e1:70:
2c:dd:61:1d:96:c1:0b:54:bc:8a:c8:5a:4f:18:2d:d4:f9:40:
9b:64:1b:a2:f1:cb:d8:ad:e5:2a:a9:d3:a9:ff:06:2f:48:50:
b7:98:ac:b1:4f:fa:db:ae:9c:5b:4f:7b:f0:5d:4a:36:65:01:
58:e9:ad:30:30:ac:f8:25:a3:ad:d5:55:28:bb:e0:2d:13:5e:
c3:1e:df:a5:b5:31:64:bd:63:9f:8f:04:1c:2b:03:73:c8:b9:
c4:15:d7:c3:8b:6f:b9:fa:55:a5:c1:b0:e5:cc:d4:31:56:88:
c0:75:4b:64:09:c9:67:f4:fa:11:a6:d0:6d:7e:14:9c:a9:f8:
49:bc:d4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 01:41:27 2024 by rpki-client on console-ams.rpki-client.org