Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/VjzZ-Gvn8WfHCpO87Nvu1bbOKvI.roa
File: VjzZ-Gvn8WfHCpO87Nvu1bbOKvI.roa (raw, json)
Hash identifier: bpC45RskT1x5+ikqAYv8NDNDNYuHuU1nDhKVxgU1AZs=
Subject key identifier: 56:3C:D9:F8:6B:E7:F1:67:C7:0A:93:BC:EC:DB:EE:D5:B6:CE:2A:F2
Certificate issuer: /CN=69737c6e0602be3804e277580bab7e21e6e33474
Certificate serial: 018EED0537D1D8BACD976E2E5C8D0F9161A3
Authority key identifier: 69:73:7C:6E:06:02:BE:38:04:E2:77:58:0B:AB:7E:21:E6:E3:34:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/VjzZ-Gvn8WfHCpO87Nvu1bbOKvI.roa
Signing time: Wed 17 Apr 2024 17:05:25 +0000
ROA not before: Wed 17 Apr 2024 17:05:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207590
IP address blocks: 146.19.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 08:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ed:05:37:d1:d8:ba:cd:97:6e:2e:5c:8d:0f:91:61:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69737c6e0602be3804e277580bab7e21e6e33474
Validity
Not Before: Apr 17 17:05:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=563cd9f86be7f167c70a93bcecdbeed5b6ce2af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d1:e4:5e:13:33:a2:61:0f:18:13:47:29:13:
10:b2:77:df:a6:e9:38:e3:9e:aa:c9:e1:a1:1f:9b:
7b:5c:df:ad:b0:a0:18:d6:1f:6c:d3:21:69:6b:45:
11:83:60:15:6e:c2:02:a2:b1:e8:ce:8d:ec:36:2e:
8c:eb:35:58:eb:92:d0:d3:3e:1d:cd:60:1c:f8:cb:
6a:0a:de:5b:51:95:d9:fe:53:2b:70:f2:ac:fe:77:
c2:f5:17:d9:a2:aa:a0:1c:61:9c:c5:fb:d8:93:0c:
67:0a:fc:46:55:c6:5b:75:db:56:25:b3:5c:2e:7c:
3a:97:c8:79:a9:4b:6f:ee:b0:2b:35:87:e0:0c:aa:
cb:f7:46:16:9b:ca:c7:25:f2:4e:9f:3b:31:f4:bd:
8b:f6:52:64:68:3c:92:18:ab:07:a8:91:07:a5:89:
9f:3c:97:d0:bb:5a:ce:66:29:95:11:91:75:56:cd:
d8:80:d5:90:27:aa:a8:0e:5d:af:31:d6:34:47:90:
34:6f:5d:45:17:e6:ab:b1:56:5b:31:37:93:52:ce:
01:16:91:35:bc:65:ef:d9:dd:3a:d2:8f:f5:20:04:
c0:c5:a8:d2:df:05:2c:e0:a5:b5:e9:c8:e9:03:36:
43:2c:06:e7:c9:55:fd:a0:7c:11:42:1c:87:e9:9b:
e1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:3C:D9:F8:6B:E7:F1:67:C7:0A:93:BC:EC:DB:EE:D5:B6:CE:2A:F2
X509v3 Authority Key Identifier:
keyid:69:73:7C:6E:06:02:BE:38:04:E2:77:58:0B:AB:7E:21:E6:E3:34:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/VjzZ-Gvn8WfHCpO87Nvu1bbOKvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.122.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:c3:2a:a0:77:f0:64:fb:b8:26:24:df:3b:a1:8d:3d:16:54:
fa:43:df:37:43:53:51:07:da:06:39:2c:91:e7:4c:54:0a:5d:
f0:fd:1f:69:fe:2f:34:d3:cd:91:2e:9f:ab:57:ce:c1:a1:95:
3a:36:1d:42:f3:81:a1:6e:c3:81:6f:13:27:b1:7e:e6:c5:8f:
f7:83:7e:93:48:15:12:2d:5a:1f:fb:51:5c:cd:2a:08:8d:b7:
54:34:3a:fd:e0:85:4f:a1:41:0b:10:ea:6f:be:be:6d:88:ca:
b1:5a:af:ce:20:e6:74:c9:3c:f8:a1:31:0f:1f:d3:f2:aa:ab:
91:2b:81:54:4a:1f:d8:60:49:b2:1e:bd:77:84:4b:c5:26:49:
1b:a1:53:a6:eb:fe:7d:e1:af:38:ba:87:d8:08:5a:9c:9a:9a:
9a:7a:0d:f6:9e:93:8c:23:20:f2:1c:f0:f2:33:7b:04:f1:c0:
42:70:fd:19:c4:6f:33:48:b6:25:5a:38:66:bc:57:21:05:1a:
2d:29:31:27:3c:d3:56:00:7f:d4:20:02:d2:76:fe:05:8c:47:
87:d4:17:f1:a6:4b:ee:6b:9f:de:37:61:1e:91:0e:c0:d7:de:
a2:d5:99:ea:c6:47:74:47:ff:ce:e5:a9:52:03:62:e1:8e:ec:
82:2e:c6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:52:38 2024 by rpki-client on console-fra.rpki-client.org