Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/VYVt0bxFTXxImrtu0uBV7EzLsOg.roa
File: VYVt0bxFTXxImrtu0uBV7EzLsOg.roa (raw, json)
Hash identifier: aRRTZ9cEWYyMhlWKGnd58DCK6V7dGT11w6+eg6n7GGA=
Subject key identifier: 55:85:6D:D1:BC:45:4D:7C:48:9A:BB:6E:D2:E0:55:EC:4C:CB:B0:E8
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 018CC86FF1C71FFA39141F230F1B595F9818
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/VYVt0bxFTXxImrtu0uBV7EzLsOg.roa
Signing time: Tue 02 Jan 2024 04:30:28 +0000
ROA not before: Tue 02 Jan 2024 04:30:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55002
IP address blocks: 213.14.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 11:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:f1:c7:1f:fa:39:14:1f:23:0f:1b:59:5f:98:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 2 04:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55856dd1bc454d7c489abb6ed2e055ec4ccbb0e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9e:b8:5c:e9:ed:5c:c5:92:ff:1d:52:db:1d:
19:64:4c:a6:f4:54:74:58:3c:5b:a5:1d:02:f7:12:
46:7d:3b:b0:15:92:20:01:ae:db:a7:f8:2b:d3:92:
99:41:75:30:f5:99:d6:b3:28:ed:87:0e:14:f1:43:
5f:10:16:ac:c4:83:c0:4a:ad:d6:3b:95:62:83:ae:
f2:5f:12:e1:a7:89:ad:d1:e2:59:d1:41:da:a1:6e:
a9:a7:16:0b:51:01:92:ca:9a:49:65:86:72:a0:03:
ac:00:af:a8:bd:e5:d7:de:b5:5c:59:7a:e9:5c:ee:
81:e8:ce:4a:f1:99:52:48:cf:14:b7:f8:b7:24:66:
d5:d3:08:5f:84:ed:32:1a:24:65:ec:55:f7:68:92:
6f:df:2b:81:ec:42:59:18:13:60:b9:dd:b8:20:ca:
86:77:41:55:f5:ad:fb:dd:50:94:75:47:27:70:7e:
fe:b6:5d:11:e7:ea:27:6c:4e:37:5f:64:0f:36:9c:
65:a2:8c:38:df:73:dc:00:3c:7c:fd:c5:73:d6:8f:
fd:a5:07:ad:1f:c1:ba:49:fc:f1:03:fb:de:93:41:
98:be:48:43:bb:c5:57:de:01:37:3f:e7:42:70:04:
92:2b:66:64:f0:bc:00:46:90:4b:59:18:4e:bc:84:
77:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:85:6D:D1:BC:45:4D:7C:48:9A:BB:6E:D2:E0:55:EC:4C:CB:B0:E8
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/VYVt0bxFTXxImrtu0uBV7EzLsOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.14.215.0/24
Signature Algorithm: sha256WithRSAEncryption
83:0c:62:89:01:48:ed:b9:15:7d:4e:fb:3d:d6:b3:72:3b:6c:
6f:3c:26:68:a7:a5:b0:f3:67:f4:d3:5b:0d:ab:2b:a1:17:fe:
4a:80:87:2f:78:dd:d1:0f:13:5e:49:6f:8e:1d:79:e3:ed:e2:
1c:a7:cb:9a:3b:15:de:ab:90:9a:c7:91:bf:52:1e:b8:8a:36:
2d:fc:10:03:8a:04:53:89:49:10:0d:3a:3d:18:56:49:ab:7e:
6b:e6:cf:7f:bc:46:54:19:04:ee:2f:14:9c:34:20:98:16:7a:
8a:d3:65:77:90:5c:e4:aa:e3:62:27:8c:7d:6c:8b:e6:48:e7:
00:60:f0:07:60:1b:bf:bb:89:3c:6f:2a:15:71:24:27:4f:b1:
c1:0e:7f:00:a5:92:69:be:4d:76:f5:4a:4a:5f:8f:84:d3:32:
28:46:63:e8:71:9a:37:34:73:03:c3:23:08:2a:af:11:8e:3d:
8b:d1:0d:ad:3a:f4:24:b6:fa:ec:97:69:22:bf:7d:27:9d:0a:
e6:98:cd:88:57:d2:f4:53:cd:e4:0a:6a:36:20:67:49:82:47:
35:ba:b0:59:cf:17:72:90:ea:b7:5c:ac:a3:ad:5f:f9:9f:d9:
5d:0d:4c:0d:96:25:f8:05:2b:e4:ff:1a:97:3f:dd:24:78:a1:
6f:95:f2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 15:57:52 2024 by rpki-client on console-ams.rpki-client.org