Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/vtoIR7CDCtVXVw7wK96OrlbNNis.roa
File: vtoIR7CDCtVXVw7wK96OrlbNNis.roa (raw, json)
Hash identifier: qT+0uKrha6zBoJqyq8roqNKesUB/TLEjJahRlCyKRFI=
Subject key identifier: BE:DA:08:47:B0:83:0A:D5:57:57:0E:F0:2B:DE:8E:AE:56:CD:36:2B
Certificate issuer: /CN=a124ccdd70f3ec762cbd65e04dd6f76be236a8a7
Certificate serial: 018F718CD3B0BD203F179888EE979F8DDD09
Authority key identifier: A1:24:CC:DD:70:F3:EC:76:2C:BD:65:E0:4D:D6:F7:6B:E2:36:A8:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/vtoIR7CDCtVXVw7wK96OrlbNNis.roa
Signing time: Mon 13 May 2024 10:43:25 +0000
ROA not before: Mon 13 May 2024 10:43:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214924
IP address blocks: 2a13:aac4:f040::/44 maxlen: 60
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:71:8c:d3:b0:bd:20:3f:17:98:88:ee:97:9f:8d:dd:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a124ccdd70f3ec762cbd65e04dd6f76be236a8a7
Validity
Not Before: May 13 10:43:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=beda0847b0830ad557570ef02bde8eae56cd362b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:79:b4:f0:ef:ce:cc:e8:98:12:81:b5:72:7d:
6b:de:ad:9d:09:8d:bc:7f:4a:32:31:3e:84:32:93:
28:58:5b:eb:0c:7f:95:de:37:c5:7e:46:a9:e1:2a:
d2:c8:ab:a6:87:b5:2c:21:7a:9c:27:65:7a:a7:ad:
44:7a:25:7d:16:70:cc:9c:79:3a:a0:6f:f2:ab:f8:
88:5c:a3:53:68:5b:38:7f:3c:0a:84:1c:af:04:69:
ad:f7:cd:e2:ed:43:95:d2:1c:dd:3a:85:f2:b9:50:
c5:9b:94:b6:59:ca:4e:e8:09:a0:81:3b:39:45:dd:
dd:f5:c2:4d:e6:e6:a9:e9:4f:0f:b7:d6:2b:8b:83:
d7:44:5c:ec:e7:a9:d0:4f:cc:95:52:bc:9a:2d:1b:
8c:b5:81:7c:bd:08:07:9a:83:74:1c:f1:ea:2a:51:
be:39:1c:72:1e:d6:b0:43:fd:6a:39:d8:61:d7:be:
57:b3:6a:5d:2c:e1:69:55:48:5d:e1:c1:4e:e0:66:
f5:a5:15:46:1d:27:17:9f:75:1d:83:f3:8c:9b:10:
02:e7:4b:db:ff:52:60:4a:c4:0c:14:ef:c1:94:0e:
cb:8e:d6:33:68:13:38:dd:b8:1d:16:06:36:1c:d0:
89:03:aa:72:6b:9f:32:77:8f:69:33:c8:84:f8:d7:
e5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:DA:08:47:B0:83:0A:D5:57:57:0E:F0:2B:DE:8E:AE:56:CD:36:2B
X509v3 Authority Key Identifier:
keyid:A1:24:CC:DD:70:F3:EC:76:2C:BD:65:E0:4D:D6:F7:6B:E2:36:A8:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/vtoIR7CDCtVXVw7wK96OrlbNNis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:aac4:f040::/44
Signature Algorithm: sha256WithRSAEncryption
69:c5:33:92:3f:7f:c3:45:e8:97:8c:e4:55:87:4e:cd:2e:e6:
e9:10:4d:c3:55:22:a9:59:a4:95:ea:16:e4:14:3a:2b:c3:12:
6f:9e:90:2d:67:73:b1:a3:25:e3:78:0b:a4:be:c7:87:e0:c6:
a2:e7:21:ed:aa:e3:db:7d:f0:6b:01:89:fd:31:ae:4c:41:22:
fc:56:7a:c3:37:34:2c:46:ec:67:bc:8e:19:36:96:cf:84:a4:
3c:97:c6:25:35:f1:90:07:33:c3:e5:31:c2:60:9b:e1:18:eb:
a8:3a:7c:43:9f:5f:12:8d:b3:a9:ff:c2:82:15:cf:af:9e:ee:
d6:a2:6e:b0:d2:c2:07:9f:84:59:c8:50:23:e4:77:0c:17:84:
96:64:1d:7e:eb:00:dc:06:51:f4:70:a3:cd:b3:9c:06:54:6a:
73:37:6a:eb:5f:aa:98:0e:4f:94:26:6f:23:51:86:07:2c:99:
c5:63:73:85:c3:52:9c:74:e9:1f:40:d9:f8:ca:72:52:fb:86:
ad:a2:eb:36:51:76:22:31:76:fb:60:e5:5b:e4:40:0c:24:6c:
a8:d6:c4:93:8f:a5:22:f3:53:fa:7a:8a:5d:6b:4a:10:8b:e6:
9c:aa:40:79:fb:2a:6f:5e:18:20:c1:99:94:cf:bd:7a:db:cc:
73:a2:0a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 14:04:01 2024 by rpki-client on console-ams.rpki-client.org