Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/Vdb1Rb2YZn7N0iIsm3LOE1YvdKg.roa
File: Vdb1Rb2YZn7N0iIsm3LOE1YvdKg.roa (raw, json)
Hash identifier: WWGzGGD3tukJbyhjbCjZxdzl7PfkR2pHhlW1167fRhU=
Subject key identifier: 55:D6:F5:45:BD:98:66:7E:CD:D2:22:2C:9B:72:CE:13:56:2F:74:A8
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 018CC50048F8265E430EF4C367C70C7600DC
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/Vdb1Rb2YZn7N0iIsm3LOE1YvdKg.roa
Signing time: Mon 01 Jan 2024 12:29:39 +0000
ROA not before: Mon 01 Jan 2024 12:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57206
IP address blocks: 217.113.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:48:f8:26:5e:43:0e:f4:c3:67:c7:0c:76:00:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Jan 1 12:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55d6f545bd98667ecdd2222c9b72ce13562f74a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:48:9e:d5:21:74:8a:c8:cd:a9:2b:8d:31:3c:
dc:1e:6f:fa:63:78:2c:78:7e:0f:6e:80:6f:28:77:
a8:d9:28:c8:28:80:60:1b:61:e6:0d:fa:1e:91:89:
90:ac:56:d4:b3:ff:97:c5:4d:5b:96:61:1e:42:59:
86:f3:c7:32:e5:5c:4a:de:52:ad:e3:b8:e8:fe:30:
ce:b7:05:53:73:e0:2a:7a:e9:c0:3b:a3:2f:6e:c2:
ce:63:82:75:41:e8:1f:81:0c:d1:d5:87:38:98:90:
87:e2:38:ac:d8:74:81:d1:f0:88:ee:32:b7:06:61:
7b:ca:04:55:8f:9d:9f:c3:d7:97:c3:a4:40:8f:ea:
26:f7:6f:80:a2:12:00:49:e6:89:2c:3b:88:4d:c2:
a3:fe:9b:35:b6:bb:74:68:75:ed:a5:6c:40:53:2a:
22:5c:81:91:0e:6e:0b:14:1c:cd:c2:3b:d5:51:79:
78:c3:71:39:3b:53:ae:c3:ef:e1:c9:34:f6:70:2a:
c9:f7:6d:b0:72:25:54:f7:84:6b:fe:c4:62:fa:ca:
2c:86:d8:7d:bb:3a:37:cf:e6:b9:fe:a9:4e:20:f1:
d2:3e:08:14:5d:59:65:15:97:e9:bc:c8:10:e1:f2:
0e:40:c7:34:b5:83:a9:5a:2b:b7:77:2f:d1:8d:e1:
45:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D6:F5:45:BD:98:66:7E:CD:D2:22:2C:9B:72:CE:13:56:2F:74:A8
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/Vdb1Rb2YZn7N0iIsm3LOE1YvdKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.113.8.0/24
Signature Algorithm: sha256WithRSAEncryption
03:ba:b6:96:f5:00:e9:a6:85:5d:0b:04:6b:03:1c:d2:45:dd:
45:18:e1:9f:ac:a1:63:05:fd:0d:5f:31:8b:ef:f1:5c:70:47:
5d:6e:8b:31:78:79:d6:ea:33:fa:9d:30:06:cd:12:46:1e:4e:
2f:f5:aa:48:7b:b1:3c:f7:d3:21:52:12:5d:e3:cf:af:7d:6e:
2b:d0:e6:00:f7:da:9f:ee:60:d4:dd:91:88:66:06:ad:55:b8:
5c:e7:a2:c6:34:f4:36:5a:1a:3c:3c:ea:21:b2:dc:93:d9:c7:
99:7e:01:d1:0b:46:14:d4:0d:da:20:8a:44:97:0c:a0:81:c1:
9e:79:5c:2d:ff:3f:cd:de:c0:c3:fb:87:9e:8d:45:9e:b4:c2:
1e:ae:31:71:1a:a5:d8:72:42:fc:31:a7:f7:01:eb:64:b1:26:
4c:cf:91:d3:0f:db:8b:9e:1a:98:d8:46:00:43:40:9d:07:a0:
38:e4:e8:c1:6e:28:88:2c:d5:a1:6f:f4:3e:00:b4:f9:4f:9b:
01:14:fd:23:49:7e:63:7d:f5:65:91:87:21:f5:24:b4:a2:2f:
c1:76:97:db:ea:97:28:7c:76:25:2c:1a:2d:80:a5:8c:c9:69:
42:74:8b:9b:cd:f3:8c:46:65:02:fe:ac:80:ee:f8:33:79:ad:
de:71:fc:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:21:32 2024 by rpki-client on console-ams.rpki-client.org