Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/VPZTN-vneKZtBqoLiZfvkQiYqJE.roa
File: VPZTN-vneKZtBqoLiZfvkQiYqJE.roa (raw, json)
Hash identifier: sAEoFBnXT8Zv/5cGDDNWXZv6RdAdfNrV7+Pahdtbkj4=
Subject key identifier: 54:F6:53:37:EB:E7:78:A6:6D:06:AA:0B:89:97:EF:91:08:98:A8:91
Certificate issuer: /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9
Certificate serial: 018CC6499C00167E081A3F01ABD5CCBBAC8F
Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/VPZTN-vneKZtBqoLiZfvkQiYqJE.roa
Signing time: Mon 01 Jan 2024 18:29:22 +0000
ROA not before: Mon 01 Jan 2024 18:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206362
IP address blocks: 212.70.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:9c:00:16:7e:08:1a:3f:01:ab:d5:cc:bb:ac:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9
Validity
Not Before: Jan 1 18:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=54f65337ebe778a66d06aa0b8997ef910898a891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:fd:5a:6a:97:3d:5c:6d:7b:f9:9e:06:5c:3c:
0f:ec:3e:16:8d:9d:c4:c3:79:8f:d1:da:e2:6c:92:
4d:9c:6e:ff:a5:35:87:a5:dc:15:c7:ed:5e:bf:10:
ac:b8:5b:64:f6:04:ac:c5:ae:9f:ce:dc:7b:32:91:
3a:52:9c:3b:7e:04:2b:38:de:9d:94:1d:c5:9b:25:
01:2a:4d:a2:d5:93:ed:7f:12:df:b1:44:87:ec:45:
6d:33:96:a2:b0:51:da:e1:9b:25:e5:5e:57:b2:ff:
06:90:23:48:da:74:c5:3c:17:02:95:66:8c:29:38:
ff:56:4c:08:84:c2:6d:5f:46:f4:62:16:dc:83:09:
94:58:1b:25:f8:7b:ed:f4:85:bb:00:50:ff:ca:14:
52:01:65:4d:5a:b6:70:71:61:4f:ee:50:a2:a0:2e:
99:f4:79:2b:1c:40:3d:02:8a:af:e9:4d:25:f1:4a:
93:66:68:d6:8d:d3:b2:df:b5:43:3f:d2:6b:8f:b8:
f8:0b:c5:19:2d:b0:95:37:92:13:c3:ba:a0:ac:fd:
c5:2a:f8:9f:4d:96:c9:57:2d:46:c6:10:34:46:70:
f0:6e:58:76:8b:29:15:52:0b:52:73:d6:f4:e7:c6:
6a:64:05:28:c0:46:95:8b:bb:d9:8f:43:e4:00:d1:
e6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F6:53:37:EB:E7:78:A6:6D:06:AA:0B:89:97:EF:91:08:98:A8:91
X509v3 Authority Key Identifier:
keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/VPZTN-vneKZtBqoLiZfvkQiYqJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.70.186.0/24
Signature Algorithm: sha256WithRSAEncryption
46:f6:1e:b2:8f:6c:46:d1:35:30:0c:10:f2:6c:c8:bb:fd:ab:
71:1c:51:38:e3:82:62:49:f2:d0:9d:e5:16:c7:bb:88:bd:07:
2c:3a:61:9e:2a:35:43:ae:52:85:df:d1:ea:c2:f3:98:d4:93:
ed:14:b1:97:2e:47:81:30:d5:4a:38:fb:b9:d5:7c:04:07:14:
ea:40:dc:8b:4d:c9:60:87:ca:b0:4e:60:ed:6a:7d:b8:d2:7e:
16:58:4c:8e:a8:5c:13:84:b5:8a:59:8b:38:2d:2e:ed:5b:d4:
a3:e9:f2:e7:2e:5f:fd:15:5f:c4:fd:a3:6e:95:90:54:c2:c1:
c2:37:79:e2:cf:70:5f:03:da:43:04:b5:0c:07:a9:41:b0:f8:
1d:60:3f:85:c8:47:0f:a8:82:6b:da:35:c3:c1:99:59:e1:fd:
08:38:4c:78:7f:49:99:f1:4c:e6:cc:d9:6c:59:f0:04:b5:0c:
40:63:cd:33:b1:af:c7:58:82:f2:cb:cc:7b:d2:4a:31:90:b3:
de:60:af:5d:bb:0f:a5:22:ea:1a:8c:f0:c3:80:ef:32:5e:8f:
39:74:00:fe:90:3b:81:f5:24:e3:4f:06:8f:71:27:e5:90:f7:
26:6d:ce:26:b7:75:5a:15:72:f6:3a:8d:83:74:a2:02:a7:53:
71:a5:57:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:09:34 2024 by rpki-client on console-ams.rpki-client.org