Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/VKXCDH1qcPz2be3klo9idSH-8N0.roa
File: VKXCDH1qcPz2be3klo9idSH-8N0.roa (raw, json)
Hash identifier: kWfOQ+HfU20ZDDpaZIRrTn0eAnnPGHgxLUyd8sxk1Gc=
Subject key identifier: 54:A5:C2:0C:7D:6A:70:FC:F6:6D:ED:E4:96:8F:62:75:21:FE:F0:DD
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A3A53383222C934DAE31FE7013FB0
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/VKXCDH1qcPz2be3klo9idSH-8N0.roa
Signing time: Tue 02 Jan 2024 12:33:34 +0000
ROA not before: Tue 02 Jan 2024 12:33:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201591
IP address blocks: 93.171.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Jun 2024 14:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:3a:53:38:32:22:c9:34:da:e3:1f:e7:01:3f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=54a5c20c7d6a70fcf66dede4968f627521fef0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8f:8a:b1:db:a5:e7:cd:21:21:85:56:e1:f4:
de:13:da:1d:9e:f2:0d:31:07:d4:da:8c:54:bb:d2:
21:9b:52:f9:d4:25:93:e5:73:70:0f:79:59:61:8e:
31:4d:eb:86:3e:d5:c0:1d:07:f0:15:21:a7:a0:b1:
d4:21:19:ef:e8:85:11:6d:08:61:df:9a:ef:09:19:
a4:cd:24:62:a8:9d:1c:d9:5f:3c:88:dc:52:06:4d:
a5:65:d0:44:54:90:67:f8:d8:86:94:92:f3:22:ab:
fa:59:24:8e:38:b5:cb:99:f8:a6:b0:a1:bc:cc:45:
79:2e:05:39:75:c7:a6:8e:8f:28:a4:23:65:84:72:
6d:dd:c9:20:94:b4:c0:9a:5a:41:1d:5e:3e:86:3f:
f3:f4:f0:18:92:9e:4a:fa:a8:86:e3:36:08:34:74:
01:88:7b:64:3a:89:86:75:45:bb:2b:93:e0:91:82:
7c:a6:30:a6:9d:8f:f5:0d:76:10:c1:29:73:c5:ed:
d7:11:b7:c0:8a:2d:a0:9c:1f:99:40:74:c4:cc:19:
6b:2f:43:4e:8c:86:1f:c2:e5:8d:d3:c1:e2:d6:37:
af:5b:d9:88:38:7d:e2:76:01:8f:60:53:4a:cd:66:
a2:92:34:0a:fb:51:17:27:27:7b:02:0e:bc:98:c3:
7a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A5:C2:0C:7D:6A:70:FC:F6:6D:ED:E4:96:8F:62:75:21:FE:F0:DD
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/VKXCDH1qcPz2be3klo9idSH-8N0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.136.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:3b:c2:e6:12:97:32:b1:ca:83:6b:3c:d2:7d:1a:69:c7:4f:
3c:79:5f:a4:c3:fa:3b:47:7d:ad:f8:f1:30:3f:d7:7f:02:a6:
78:b0:59:56:15:d8:d7:22:36:a8:31:36:2d:4a:48:ae:f0:c5:
80:d6:6d:c9:13:6f:30:be:90:52:f7:9e:25:2f:bd:81:97:3d:
f4:f6:88:63:82:af:db:68:be:1e:95:c1:51:20:34:97:3d:af:
0c:32:92:99:e8:bf:da:a1:e6:b4:24:7e:26:bb:37:37:d4:9e:
f6:58:3e:ca:96:3b:11:05:c6:8e:e9:fc:2f:2d:b1:7f:6c:17:
39:43:1e:bf:aa:9f:03:1e:1d:df:31:d3:6d:e4:11:cf:36:67:
1b:7c:0e:0e:f9:3d:bd:6f:e0:60:34:5e:7c:11:f7:86:6f:55:
1a:52:3d:83:2d:3b:38:f5:79:9f:41:0e:ae:d1:74:10:dc:5a:
33:5c:26:6e:4e:46:a7:75:3b:83:34:28:1c:39:c2:a4:01:3a:
5f:15:08:85:dd:36:f2:0b:4d:fd:19:e4:97:32:20:28:7f:7b:
96:f6:69:c4:d7:e3:a9:70:8b:0d:9a:9e:a9:3f:21:4b:3c:c0:
dd:ff:94:ad:55:a8:75:71:76:7b:bd:ba:40:8b:74:f6:72:e6:
d8:2c:1e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 22:24:08 2024 by rpki-client on console-ams.rpki-client.org