Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/vZ34TokIZhUtfkCiy8q1r7BLpGM.roa
File: vZ34TokIZhUtfkCiy8q1r7BLpGM.roa (raw, json)
Hash identifier: Mx6EElDlWV0XJffXXemD5LigiH8e0AzqM3ih25rDArk=
Subject key identifier: BD:9D:F8:4E:89:08:66:15:2D:7E:40:A2:CB:CA:B5:AF:B0:4B:A4:63
Certificate issuer: /CN=c85d01b442946e1924313d564f31b7e42e2455e7
Certificate serial: 018CC5DCE8901D904B8BB3711734C2450039
Authority key identifier: C8:5D:01:B4:42:94:6E:19:24:31:3D:56:4F:31:B7:E4:2E:24:55:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yF0BtEKUbhkkMT1WTzG35C4kVec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/vZ34TokIZhUtfkCiy8q1r7BLpGM.roa
Signing time: Mon 01 Jan 2024 16:30:38 +0000
ROA not before: Mon 01 Jan 2024 16:30:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201416
IP address blocks: 178.211.152.0/24 maxlen: 24
2a0d:2540::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.mft
rsync://rpki.ripe.net/repository/DEFAULT/yF0BtEKUbhkkMT1WTzG35C4kVec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:e8:90:1d:90:4b:8b:b3:71:17:34:c2:45:00:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c85d01b442946e1924313d564f31b7e42e2455e7
Validity
Not Before: Jan 1 16:30:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd9df84e890866152d7e40a2cbcab5afb04ba463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:30:58:b5:95:98:72:0b:86:58:9c:a1:4a:39:
2d:36:55:71:c4:9b:34:75:3d:87:45:a3:e2:80:54:
98:5e:fb:23:07:a7:82:d5:89:44:4a:8a:15:7b:aa:
14:cd:d4:41:ec:5c:82:64:fb:cd:e5:69:f3:f8:77:
e0:f2:e5:0c:6a:3e:c9:3a:e7:da:17:2a:5b:86:6f:
42:77:eb:b1:68:4e:38:ab:f0:06:09:01:17:07:ce:
1d:75:76:1b:1c:d9:4f:e8:95:e0:84:2f:68:5f:66:
79:50:32:f3:43:1e:8d:22:0f:49:09:cd:57:b5:d5:
9c:84:df:89:be:4f:ab:b8:9d:0f:19:5d:a2:5f:f3:
e5:4a:26:5f:a5:14:67:63:c3:56:3e:4f:e4:40:26:
75:a7:ff:95:ce:f2:10:b0:be:f1:f5:40:ca:1b:5a:
d5:24:77:df:72:a6:c4:3d:52:30:1a:18:7e:7f:d4:
a1:fc:cb:08:80:61:8e:f5:a3:83:b3:4d:9f:77:07:
e7:f5:07:fe:e9:04:91:55:eb:88:28:6a:54:1d:eb:
cd:b6:50:75:99:0b:ae:b2:21:14:e7:01:61:87:b0:
e2:da:c3:ed:02:94:27:dd:3e:69:a3:95:26:62:41:
77:82:52:ba:be:04:34:86:ce:9b:18:de:13:94:31:
f7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:9D:F8:4E:89:08:66:15:2D:7E:40:A2:CB:CA:B5:AF:B0:4B:A4:63
X509v3 Authority Key Identifier:
keyid:C8:5D:01:B4:42:94:6E:19:24:31:3D:56:4F:31:B7:E4:2E:24:55:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yF0BtEKUbhkkMT1WTzG35C4kVec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/vZ34TokIZhUtfkCiy8q1r7BLpGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.211.152.0/24
IPv6:
2a0d:2540::/29
Signature Algorithm: sha256WithRSAEncryption
c6:0f:05:f6:9d:3d:28:60:70:e4:c1:ca:66:3c:75:44:67:58:
f0:06:b8:ad:f6:b9:a5:c7:ac:41:67:6c:70:ee:b7:e1:ac:41:
6b:d3:03:e2:2a:05:4e:21:70:0c:a2:41:79:c9:e0:b6:44:06:
bd:5a:4f:77:60:eb:b2:76:b4:ef:1f:3f:4d:f7:e7:7c:3e:9d:
da:fa:29:38:f8:a5:32:67:f2:77:6a:d4:da:dd:4b:8d:73:03:
89:de:e0:89:2c:56:68:4c:38:de:e5:c0:fd:02:87:51:c6:3a:
57:63:50:b1:cc:2e:40:98:33:35:2e:41:aa:86:26:f8:b5:5c:
89:68:10:9c:90:b3:7e:70:0d:92:bd:5a:ff:e5:af:65:04:70:
f1:9e:88:2a:a0:d1:b2:39:cb:f0:e5:ad:4c:74:2f:02:5b:be:
9a:98:a1:19:9c:cd:64:dd:e1:c2:c5:65:75:bf:fa:f3:be:6f:
8b:40:3e:7c:ae:d5:61:f6:68:07:b5:89:d1:da:83:fd:c8:91:
57:6d:2b:7d:ce:fb:2a:7c:aa:f2:44:b3:09:0e:15:98:99:62:
1f:03:0a:5d:33:8d:1c:71:dd:95:79:57:f3:88:1b:13:8b:be:
18:56:a2:bf:11:7d:d6:1f:91:70:1a:8c:bb:eb:97:fd:4b:ff:
f6:cd:95:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 14:09:38 2024 by rpki-client on console-ams.rpki-client.org