Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/VVjILKvToePAj4liRlEP8KappoI.roa
File: VVjILKvToePAj4liRlEP8KappoI.roa (raw, json)
Hash identifier: n3xL2rXT8Sb3VULkKn08d6xx/UUjDrS1/FeJz4JqcKI=
Subject key identifier: 55:58:C8:2C:AB:D3:A1:E3:C0:8F:89:62:46:51:0F:F0:A6:A9:A6:82
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 018FDE0961B391CC83C2014D55E0C25E5F4D
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/VVjILKvToePAj4liRlEP8KappoI.roa
Signing time: Mon 03 Jun 2024 12:18:27 +0000
ROA not before: Mon 03 Jun 2024 12:18:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49478
IP address blocks: 45.95.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Jun 2024 18:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:de:09:61:b3:91:cc:83:c2:01:4d:55:e0:c2:5e:5f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jun 3 12:18:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5558c82cabd3a1e3c08f896246510ff0a6a9a682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d3:61:f3:df:cf:7d:c8:41:53:e2:a5:c3:ec:
1f:df:db:98:a4:e2:c4:f7:37:7a:9a:c3:16:ca:62:
41:4a:6c:a1:83:ac:f5:96:6e:b3:ad:91:77:84:00:
05:24:c7:00:63:be:14:d7:33:ef:1e:5e:20:a9:6d:
b8:42:54:ed:55:c0:8f:d4:57:fc:0a:2c:ba:c5:3a:
85:34:f2:f9:4c:90:75:9b:78:5c:28:60:8c:27:c4:
da:9a:fe:12:a9:f6:ff:d6:46:37:b1:13:d5:29:df:
6a:e8:4b:d7:10:89:30:8d:4c:2c:4e:c2:31:f8:b9:
2f:14:70:c7:e9:1b:5a:c2:4e:d1:fb:e6:25:eb:dd:
e6:ba:df:3f:98:82:03:4c:ac:9e:b8:81:0d:0e:02:
84:79:f1:fe:71:87:d2:b2:d1:a8:46:1c:89:5e:33:
fc:77:ca:3b:6d:d0:c1:22:c9:23:ae:0a:86:7c:61:
a8:ab:b8:14:b5:b8:73:ca:dd:23:73:3e:1e:d3:0d:
12:63:53:ee:00:6e:e7:05:29:8c:62:58:9d:fd:cc:
23:d9:9a:93:7b:bf:1e:23:49:fd:e4:1f:82:7e:20:
b3:86:ce:e5:9e:0d:36:1f:25:31:8c:d7:f3:84:c2:
65:a6:8b:63:18:c4:fd:23:6b:81:8d:ba:fe:2c:48:
27:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:58:C8:2C:AB:D3:A1:E3:C0:8F:89:62:46:51:0F:F0:A6:A9:A6:82
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/VVjILKvToePAj4liRlEP8KappoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.30.0/24
Signature Algorithm: sha256WithRSAEncryption
02:3b:cb:6c:cc:f9:f5:5a:0c:9c:57:82:ac:77:8b:6d:e1:96:
e3:28:0a:cc:ef:e7:71:05:75:d6:23:46:c8:53:8d:da:10:b4:
62:16:6a:42:9c:01:01:b0:8a:7a:c2:27:d5:c0:b5:e4:f8:e8:
34:17:58:dc:dc:75:f3:b7:fa:6d:0d:2b:14:e0:41:f1:3c:65:
8d:4c:7c:c1:8f:84:c5:80:a7:46:2d:dd:84:24:45:03:6e:39:
57:a9:05:25:61:31:47:8a:a8:b6:43:1f:3e:55:30:2f:85:29:
b3:d8:90:fb:cf:ef:1e:b5:15:c2:8b:53:8b:38:fc:7b:7c:f5:
c1:21:b8:e6:ff:0d:8c:3d:28:91:68:0c:52:5d:5b:47:8b:90:
e7:21:18:50:66:fc:fc:bd:c5:a2:07:1e:a4:c6:ec:f7:40:d1:
c6:fc:57:97:6d:41:6f:f5:d6:51:8c:34:d2:4d:23:25:c0:64:
56:db:78:e1:9f:54:2c:c4:3b:f7:de:b0:e8:3f:19:6e:e6:8f:
a2:46:71:56:0a:11:b9:d6:a9:24:a8:72:e4:81:13:5f:92:f1:
f5:21:6c:1c:31:b1:e9:ee:1d:82:16:ae:35:fd:d7:14:b8:c3:
a8:53:aa:39:15:3e:eb:14:11:62:9a:ff:9e:c6:6a:37:37:db:
bc:f0:cd:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 04:32:24 2024 by rpki-client on console-ams.rpki-client.org