Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/VRdy28fn3CXd6piPe7d0UocJvmM.roa
File: VRdy28fn3CXd6piPe7d0UocJvmM.roa (raw, json)
Hash identifier: leFskh9Rye+JHyXfrc2EyZVZbJ738c8gKQjMbfyOclw=
Subject key identifier: 55:17:72:DB:C7:E7:DC:25:DD:EA:98:8F:7B:B7:74:52:87:09:BE:63
Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial: 018CC49239DE4A9B426FFAA266DB83B8B2EF
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/VRdy28fn3CXd6piPe7d0UocJvmM.roa
Signing time: Mon 01 Jan 2024 10:29:26 +0000
ROA not before: Mon 01 Jan 2024 10:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397219
IP address blocks: 37.209.192.0/24 maxlen: 24
37.209.198.0/24 maxlen: 24
37.209.194.0/24 maxlen: 24
37.209.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 07:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:39:de:4a:9b:42:6f:fa:a2:66:db:83:b8:b2:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Validity
Not Before: Jan 1 10:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=551772dbc7e7dc25ddea988f7bb774528709be63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3b:e3:61:77:0f:10:ca:ff:4d:6c:b2:f5:55:
de:13:6b:49:1f:d9:fc:5d:7b:77:64:5c:29:04:2d:
dd:3f:79:e7:cc:3f:f7:b3:c4:1d:01:a2:3a:d3:ee:
bf:f4:c5:30:18:eb:d3:14:7c:98:3e:2d:72:f0:38:
3a:e8:b7:5d:f2:d4:02:2f:8c:16:eb:76:98:c1:fe:
55:4c:9b:9d:06:84:ac:27:4e:dd:e7:31:74:13:37:
08:61:13:93:96:fc:65:1c:95:c2:51:7d:1d:ca:ec:
18:b8:3b:78:56:64:96:df:09:1e:27:cf:ff:ca:80:
b2:83:ff:68:ac:99:65:dd:17:75:fb:84:62:72:36:
72:2f:33:12:45:68:2e:f4:18:1a:b2:76:31:7f:bf:
e4:0d:6b:58:4c:1f:51:73:81:10:17:19:f0:40:ea:
d3:0c:2c:2a:01:58:21:4c:06:1d:9c:40:cf:3b:29:
09:a6:47:4f:b4:fd:85:48:97:d7:14:ad:31:9c:f5:
84:f7:fc:47:68:26:d1:c4:a1:e0:de:fe:62:44:23:
b9:15:94:18:cc:4c:81:a8:3f:bb:10:39:03:6f:44:
f5:27:e2:6a:cc:56:4b:3e:67:1e:f6:42:8d:d2:15:
8a:30:ec:7b:57:e7:97:ce:ab:a8:6e:90:3f:5b:27:
60:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:17:72:DB:C7:E7:DC:25:DD:EA:98:8F:7B:B7:74:52:87:09:BE:63
X509v3 Authority Key Identifier:
keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/VRdy28fn3CXd6piPe7d0UocJvmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.192.0/24
37.209.194.0/24
37.209.196.0/24
37.209.198.0/24
Signature Algorithm: sha256WithRSAEncryption
73:e4:65:3e:3d:18:43:d2:92:b9:90:36:bd:ff:ae:d7:63:cb:
ec:cf:60:bf:e7:f6:e9:16:5a:cd:81:09:83:7d:9a:62:10:df:
2d:83:e2:21:33:51:e9:fe:61:8a:58:20:f6:33:01:78:6a:ac:
69:5b:de:69:96:fd:4f:f7:66:40:7e:a9:1b:c9:1b:7a:ba:51:
e9:8b:b0:c9:28:b0:0b:4a:4a:53:50:14:8b:32:26:2c:0e:d2:
ab:92:d7:f3:8d:e6:5b:bd:d0:01:55:7c:05:88:6a:83:12:15:
69:2b:25:34:70:ca:bb:1e:d4:a0:3e:8b:3d:86:c5:ab:6f:ff:
b9:7c:9a:cf:76:1e:1b:67:bb:90:5e:de:b4:32:6f:b3:5d:a9:
ff:e5:e7:dd:37:a4:5c:fd:98:6f:0a:5d:4a:47:ec:45:2d:ff:
39:be:3d:e5:f4:6d:62:0c:7f:36:d3:8f:aa:64:df:08:71:51:
31:59:2f:20:19:c6:d1:82:e9:a1:42:16:7d:a9:a8:cd:b9:3f:
ea:29:95:d2:2d:8c:71:d6:4a:93:48:ed:1b:88:91:c7:8e:fc:
c1:5a:b8:f0:2a:e1:20:52:10:a6:7e:6b:f7:63:6b:d1:bb:52:
79:e1:90:b8:cf:0e:82:ca:09:ce:d9:2c:3f:d4:a1:77:e0:7e:
a7:22:5f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 12:16:39 2024 by rpki-client on console-ams.rpki-client.org