Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/VmFoo1_NaBt6goBTWk7CIF8_DRE.roa
File: VmFoo1_NaBt6goBTWk7CIF8_DRE.roa (raw, json)
Hash identifier: /wc6qQaFYSgwGkREUw1UMiUg7gaghWru9/mc/KQ22Yg=
Subject key identifier: 56:61:68:A3:5F:CD:68:1B:7A:82:80:53:5A:4E:C2:20:5F:3F:0D:11
Certificate issuer: /CN=955fcf92798a9dbb30abd2b9fa29bfa8804220f3
Certificate serial: 018CCA2A274EF4669D350ACCCAE1BA2FE43E
Authority key identifier: 95:5F:CF:92:79:8A:9D:BB:30:AB:D2:B9:FA:29:BF:A8:80:42:20:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/VmFoo1_NaBt6goBTWk7CIF8_DRE.roa
Signing time: Tue 02 Jan 2024 12:33:29 +0000
ROA not before: Tue 02 Jan 2024 12:33:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209433
IP address blocks: 45.86.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:27:4e:f4:66:9d:35:0a:cc:ca:e1:ba:2f:e4:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=955fcf92798a9dbb30abd2b9fa29bfa8804220f3
Validity
Not Before: Jan 2 12:33:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=566168a35fcd681b7a8280535a4ec2205f3f0d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6e:68:a4:2f:e6:4f:2e:54:c3:03:10:ed:dc:
78:0e:4e:87:d6:ce:39:8d:fc:3e:16:77:bf:e0:5e:
21:6d:34:69:26:0c:13:50:49:48:4a:3f:46:5c:d8:
6d:00:95:cd:35:d8:12:85:19:8f:4d:e3:d2:b1:10:
37:fa:81:5f:c4:e0:8b:2d:9c:2a:ce:54:39:81:cb:
92:b4:32:5c:02:2b:fc:87:f3:61:f8:c0:17:ce:03:
93:f8:99:26:1f:38:47:a4:fb:84:c7:08:f3:3a:40:
ae:a4:94:84:60:e5:45:f3:53:3e:a8:14:b6:9c:fb:
de:26:1f:8a:17:7b:33:5e:8f:d9:5e:62:f8:3f:9e:
ab:71:a6:62:01:75:06:e6:6c:d2:62:9f:27:9a:cd:
7c:34:e7:a0:16:c7:21:86:2e:29:c2:c1:79:71:46:
32:ba:01:75:2d:85:86:88:45:58:0b:fb:84:6e:c4:
1e:e5:c7:49:be:1e:ff:cc:ec:ff:2d:82:10:61:be:
fc:d8:dc:bf:31:f3:45:a2:9d:30:69:95:af:7f:58:
f0:5f:cc:0e:e5:fe:d0:2b:8e:c1:97:40:34:a1:08:
91:19:f6:fe:d1:28:91:cd:a0:aa:b6:c0:53:5f:3b:
a4:b8:7b:f0:37:ae:95:1b:8a:78:8f:2a:e5:42:4a:
1c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:61:68:A3:5F:CD:68:1B:7A:82:80:53:5A:4E:C2:20:5F:3F:0D:11
X509v3 Authority Key Identifier:
keyid:95:5F:CF:92:79:8A:9D:BB:30:AB:D2:B9:FA:29:BF:A8:80:42:20:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/VmFoo1_NaBt6goBTWk7CIF8_DRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.136.0/24
Signature Algorithm: sha256WithRSAEncryption
34:be:86:ec:b5:d7:f4:fb:79:ec:84:fe:71:74:29:d2:06:ac:
82:52:67:ce:1b:19:ce:4f:6e:29:97:89:61:a1:59:7d:2f:80:
86:4f:36:f0:10:b3:73:b2:09:d7:7d:57:e3:57:84:26:57:96:
fa:2a:6a:39:df:2d:e1:72:cc:bb:5c:83:f9:f1:82:2d:ac:11:
a2:7f:6f:70:cf:05:a1:05:42:92:12:80:4e:f5:0d:0a:3a:2a:
d2:bc:60:29:bc:ad:8e:d3:02:10:af:e6:3c:cf:c2:85:76:be:
cd:3a:ae:14:c2:ba:79:1f:9d:f9:48:df:b0:73:24:d3:e3:3e:
f3:e1:70:0e:f6:33:6a:1c:76:56:78:f1:f7:fc:86:24:ac:6a:
d5:63:ab:6f:aa:f4:90:19:1a:e5:f9:ab:82:56:2c:d0:f2:a9:
17:4f:cb:ec:9b:c3:9f:b1:4b:81:28:11:29:97:99:00:5c:15:
3d:df:ad:f7:d8:de:e6:e3:98:00:82:c6:07:94:49:64:40:08:
b8:be:30:6f:cf:dd:6e:4d:36:3e:76:1c:ce:90:f7:15:9b:dd:
d9:4a:bd:5e:5c:ba:e2:ec:65:1e:57:79:94:34:c4:9e:32:c6:
40:9e:b1:5a:67:54:35:d3:25:65:6f:b9:d9:b3:8b:84:73:e4:
00:23:ec:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:10:37 2024 by rpki-client on console-fra.rpki-client.org