Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VkZPKedOtHrcuDVy4ZrwyR6nd_Q.roa
File: VkZPKedOtHrcuDVy4ZrwyR6nd_Q.roa (raw, json)
Hash identifier: kLbxP6hPt6Ul0FDFpRfptZ74kIilMnW/RZspyBrT85c=
Subject key identifier: 56:46:4F:29:E7:4E:B4:7A:DC:B8:35:72:E1:9A:F0:C9:1E:A7:77:F4
Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Certificate serial: 018CC492C18831FF4EB52156F93A2E4129B0
Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VkZPKedOtHrcuDVy4ZrwyR6nd_Q.roa
Signing time: Mon 01 Jan 2024 10:30:01 +0000
ROA not before: Mon 01 Jan 2024 10:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34909
IP address blocks: 95.169.210.0/23 maxlen: 23
95.169.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:c1:88:31:ff:4e:b5:21:56:f9:3a:2e:41:29:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Validity
Not Before: Jan 1 10:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56464f29e74eb47adcb83572e19af0c91ea777f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:44:e3:7e:aa:f4:c8:84:93:b5:8c:6d:4d:b9:
c7:e3:b5:90:df:dc:f7:85:f7:81:32:22:e2:61:b3:
07:3a:63:e1:fe:e7:bf:9e:61:96:b5:4c:ff:dd:f0:
78:01:d7:be:41:8a:cb:9c:d4:9b:15:6c:d5:10:94:
55:e5:d7:3a:54:96:c0:9b:2a:26:89:bc:d0:3d:55:
c6:81:81:fb:0e:97:67:09:47:0f:5e:00:7d:f5:fd:
63:49:26:ad:2b:e3:0c:69:25:20:30:26:bb:33:ab:
ea:00:d3:ed:28:36:fc:c3:33:b1:2e:85:43:ff:e8:
fc:8c:38:3d:62:44:5b:c9:26:3b:91:cc:19:d7:e5:
bb:5f:ba:55:20:99:6b:5f:a2:96:6a:10:bf:f1:a4:
9c:43:8d:fa:a2:37:0e:0c:dd:b7:8d:c2:36:41:47:
bc:cc:7d:8f:0c:36:65:2c:fd:9a:3c:1a:a2:92:fd:
38:cc:02:71:0c:d5:39:d3:df:0b:83:f6:ab:6b:0c:
b5:68:ba:b0:0c:45:d5:0e:a3:d5:57:48:5d:10:cb:
e2:04:2d:5b:74:65:23:46:d0:b2:e4:60:28:63:2d:
1e:c7:08:1e:e8:d8:6e:68:d5:7a:62:e0:32:69:78:
eb:fe:2d:f0:a7:0d:4e:e2:ab:37:4e:8b:d5:24:32:
38:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:46:4F:29:E7:4E:B4:7A:DC:B8:35:72:E1:9A:F0:C9:1E:A7:77:F4
X509v3 Authority Key Identifier:
keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VkZPKedOtHrcuDVy4ZrwyR6nd_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.210.0-95.169.212.255
Signature Algorithm: sha256WithRSAEncryption
94:8b:65:c1:55:5d:27:11:e8:79:d2:ef:71:a0:8a:7d:05:ca:
65:c8:ab:bb:11:18:07:75:39:b5:79:8d:30:c8:17:c3:d9:9f:
41:4e:71:59:e1:9a:7d:88:d5:e4:1a:b6:3f:a0:b5:0f:05:f3:
90:42:a3:40:2b:d8:7a:6a:cb:14:5a:ed:cd:bc:58:a8:5d:61:
84:1c:26:1e:9a:ff:cb:47:c7:98:b1:ae:f0:60:5a:be:db:f9:
39:51:11:a9:42:5a:89:13:5d:ba:15:cb:35:39:a7:34:57:51:
e8:19:41:61:b1:ed:98:1e:a1:41:c9:7b:31:52:c1:31:76:52:
5d:ff:f9:d4:ee:ee:be:87:c7:a5:e3:a5:70:f2:c1:10:fa:15:
be:37:f9:c6:87:38:79:d4:6b:29:b9:40:07:85:eb:d0:1c:a8:
b7:ee:9e:4e:47:8d:eb:44:c5:4a:7a:0b:59:4a:21:27:c3:5e:
24:91:17:db:28:18:52:2c:52:3f:95:e4:db:b0:31:a9:1a:39:
37:a2:9d:14:a3:1b:da:90:9e:24:88:25:7b:48:07:ce:e1:45:
f6:9a:0f:ec:df:e2:d3:1a:3e:78:b3:9a:bb:c5:f0:44:f4:3f:
12:eb:a0:5b:b8:b5:c3:48:65:c2:d7:23:86:4e:d1:7c:7e:ed:
fc:7e:14:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:21:05 2024 by rpki-client on console-fra.rpki-client.org