Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Vco5cZNO78gQupFH6eT-OkX2l-g.roa
File: Vco5cZNO78gQupFH6eT-OkX2l-g.roa (raw, json)
Hash identifier: WNccT2z3Nk2ZL7986D3GDOuTgtZm5s909MwRXrszcHo=
Subject key identifier: 55:CA:39:71:93:4E:EF:C8:10:BA:91:47:E9:E4:FE:3A:45:F6:97:E8
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 018CC7941AD3CF8151F24C21079F37635B62
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Vco5cZNO78gQupFH6eT-OkX2l-g.roa
Signing time: Tue 02 Jan 2024 00:30:21 +0000
ROA not before: Tue 02 Jan 2024 00:30:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49490
IP address blocks: 109.248.232.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:1a:d3:cf:81:51:f2:4c:21:07:9f:37:63:5b:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 00:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55ca3971934eefc810ba9147e9e4fe3a45f697e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e1:6c:74:48:58:08:d0:ab:6a:e2:4b:10:f1:
77:d4:0e:92:57:c6:5d:70:d8:a8:8e:f3:8d:f2:de:
28:6f:d4:a4:19:e9:6a:fd:69:cb:8d:d6:bc:f5:88:
8d:d4:ed:ce:84:9c:06:95:9b:c2:e7:e4:28:50:49:
b2:16:bb:65:87:d5:1a:10:0a:a4:47:79:9d:9a:60:
17:f8:c5:e1:05:8f:bd:c8:93:5f:a5:05:3b:59:40:
3f:60:49:81:ad:0e:ab:c1:88:bc:61:53:74:39:7e:
ee:55:f7:09:0f:ba:b9:da:83:76:67:84:7d:79:7d:
2d:9d:ed:ad:1c:5a:ca:84:fb:70:2b:01:df:cb:8f:
72:0b:1c:57:79:29:8b:1d:e2:ec:30:59:fa:02:65:
70:82:91:e3:d3:ad:40:c2:ed:fc:5a:75:ae:01:30:
37:eb:49:75:eb:e3:6b:9b:f9:d5:1c:ca:34:ee:c2:
a4:a9:64:94:31:a5:a6:33:07:dd:22:77:8a:d2:71:
a7:97:98:ed:da:b7:a1:ea:dd:69:64:ec:ef:e6:a5:
3f:23:0a:4f:94:ba:9c:c9:65:df:09:6d:ac:ef:0c:
e4:f7:26:d0:d5:f8:22:ed:43:16:09:13:70:4f:5c:
37:41:9b:6f:49:bf:55:2a:8e:8d:f6:04:8c:ba:6e:
37:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:CA:39:71:93:4E:EF:C8:10:BA:91:47:E9:E4:FE:3A:45:F6:97:E8
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Vco5cZNO78gQupFH6eT-OkX2l-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.248.232.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:64:c8:0f:e1:16:46:d8:3e:52:99:c7:a2:5b:e1:80:ee:67:
68:4d:2c:9c:d9:ad:97:55:02:59:3d:f4:d3:03:19:af:67:b0:
a1:d5:cd:8d:69:00:a2:9a:d3:a3:b5:31:05:0d:8e:61:63:19:
cc:36:0b:a9:03:c4:14:df:09:d1:f0:38:25:55:09:71:d9:53:
27:0c:4d:25:44:dc:6f:08:3d:03:1f:09:02:91:30:ff:d6:b9:
9f:ad:e0:ba:90:e2:a2:86:a6:15:07:b7:c8:1e:9f:18:5e:7a:
8e:cd:d7:5c:04:e8:bc:10:70:bc:b0:4d:c0:1b:cf:69:f3:21:
6b:e4:e6:0e:ff:b1:ed:5c:d4:75:0e:00:6d:a9:8d:74:f2:dd:
d0:54:85:fc:d2:e0:6e:e7:91:18:02:7a:b9:fc:88:3f:bd:e1:
dc:e8:c7:c4:5e:05:d2:cc:4a:13:c1:1b:5d:9e:f5:8c:8e:b3:
6f:35:a9:e7:6d:81:69:f9:21:0f:22:e2:2f:16:d1:d7:c2:72:
63:bc:6b:79:d8:4f:7d:bb:c9:9a:41:44:ad:15:d8:d1:96:7d:
5d:b6:14:98:a8:32:e4:62:f1:81:a6:f5:0c:1c:00:32:19:1c:
09:f8:5e:8b:a7:fd:0f:2d:80:78:b4:74:94:ff:63:86:33:be:
2c:cc:db:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:04:38 2024 by rpki-client on console-ams.rpki-client.org