Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/VP1WhwbBlOVusKe895eSrmMT59M.roa
File: VP1WhwbBlOVusKe895eSrmMT59M.roa (raw, json)
Hash identifier: xtiYG6MINgcFzPCNh0uwAp/NIJexbXt5a97xvhNpYnM=
Subject key identifier: 54:FD:56:87:06:C1:94:E5:6E:B0:A7:BC:F7:97:92:AE:63:13:E7:D3
Certificate issuer: /CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
Certificate serial: 018CC86EF0AC633E3DAC909418B37F9776CA
Authority key identifier: EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/VP1WhwbBlOVusKe895eSrmMT59M.roa
Signing time: Tue 02 Jan 2024 04:29:22 +0000
ROA not before: Tue 02 Jan 2024 04:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204677
IP address blocks: 2a13:2200::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 01:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6e:f0:ac:63:3e:3d:ac:90:94:18:b3:7f:97:76:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
Validity
Not Before: Jan 2 04:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=54fd568706c194e56eb0a7bcf79792ae6313e7d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:0d:ff:bb:12:5c:19:e5:da:e1:31:ec:c4:0f:
ff:0f:69:32:54:12:33:de:d0:67:1e:4c:f3:de:bb:
b6:1e:5f:16:25:b0:5b:7c:ed:1c:50:59:a2:bd:66:
b7:93:c2:39:4d:f8:72:8e:92:ee:37:b0:aa:b9:0b:
5a:09:b6:a3:74:e4:0b:f9:43:b7:60:64:bf:96:cf:
ed:18:77:30:30:68:ac:88:a1:62:3a:a3:19:8b:6c:
17:40:a6:95:d1:23:6e:cb:50:71:13:fc:23:25:07:
50:b9:a5:da:c9:74:e9:6a:84:b3:db:e8:9f:0b:71:
49:39:f7:a5:39:db:d1:e0:a4:9b:db:3a:7d:cd:47:
04:9f:5d:fc:dd:7b:fc:49:94:1d:91:82:b3:1d:b4:
fa:57:f4:4f:60:1e:61:85:42:28:ff:d1:f3:2c:07:
bd:3e:d5:3d:29:31:36:e6:11:9e:e1:06:e6:bf:bb:
f1:66:54:f3:97:6e:15:4e:ec:c8:11:5b:5e:14:ab:
0b:6f:56:9a:77:2f:3c:82:5c:79:90:4c:8e:b7:d2:
3a:36:4d:90:ba:2e:fb:92:45:ee:c3:af:4c:7f:25:
d1:d9:3b:35:c9:03:8d:c8:a3:a1:28:50:19:c9:f2:
54:c6:3c:46:45:d4:04:f8:d3:59:8b:9a:bc:93:13:
75:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:FD:56:87:06:C1:94:E5:6E:B0:A7:BC:F7:97:92:AE:63:13:E7:D3
X509v3 Authority Key Identifier:
keyid:EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/VP1WhwbBlOVusKe895eSrmMT59M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:2200::/29
Signature Algorithm: sha256WithRSAEncryption
8c:80:c8:a1:4d:01:f8:cd:cf:e2:89:2e:81:d8:66:bb:34:de:
35:6a:cb:40:53:53:1f:69:8a:29:f6:e7:0b:2f:72:42:6d:98:
d7:41:3e:2c:81:33:f9:a9:1f:05:fb:1e:04:df:4d:c3:d9:19:
30:e6:b4:c0:49:9c:63:42:8a:79:a9:69:77:00:6e:dd:eb:f8:
f0:15:78:14:9f:7f:f0:8c:a3:b0:44:ea:7e:b0:ee:8f:08:81:
ec:fb:41:d1:10:41:bb:20:c1:e0:de:85:50:56:70:34:e0:33:
a1:80:83:57:9d:dd:ae:a1:b9:6c:e4:fb:d8:ff:be:a3:88:4a:
cf:60:0d:fd:69:99:aa:a0:b5:52:cc:f1:be:72:46:b6:c2:88:
4c:13:91:a2:84:18:5b:28:8c:9a:40:32:c5:e5:a5:7a:13:e8:
33:89:03:64:8c:4d:8b:92:46:22:73:cd:83:87:23:9d:5c:0e:
ee:cd:ca:f1:fc:81:3d:83:b8:c8:77:fe:81:ec:c3:9d:33:e1:
9f:c7:82:f4:da:9c:6b:ec:61:03:00:61:9f:7b:36:f2:ad:42:
ba:6d:2f:30:8e:c1:cc:88:d2:b7:f4:8c:64:2f:75:5c:af:69:
ac:46:c6:1e:3f:da:f9:3b:83:b5:ca:da:96:fa:63:48:8a:13:
5c:80:b1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 05:42:43 2024 by rpki-client on console-fra.rpki-client.org