Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/vS99QXBJt8P5ApGW6Dqxt4c25VQ.roa
File: vS99QXBJt8P5ApGW6Dqxt4c25VQ.roa (raw, json)
Hash identifier: 8PJYsiMYX8bZ2hjqMu9DEa5pKl+I+g+TmnsPLznLNMs=
Subject key identifier: BD:2F:7D:41:70:49:B7:C3:F9:02:91:96:E8:3A:B1:B7:87:36:E5:54
Certificate issuer: /CN=81fa48f40bc84540c46bd23be9b90897aa184f4d
Certificate serial: 018CC80154653B59E99BEB46F407C3A01D8F
Authority key identifier: 81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/vS99QXBJt8P5ApGW6Dqxt4c25VQ.roa
Signing time: Tue 02 Jan 2024 02:29:39 +0000
ROA not before: Tue 02 Jan 2024 02:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25082
IP address blocks: 45.91.216.0/22 maxlen: 23
195.64.248.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft
rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:54:65:3b:59:e9:9b:eb:46:f4:07:c3:a0:1d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81fa48f40bc84540c46bd23be9b90897aa184f4d
Validity
Not Before: Jan 2 02:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd2f7d417049b7c3f9029196e83ab1b78736e554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:64:41:bc:50:ce:85:a7:af:b0:ee:81:c5:36:
c5:c3:af:33:e7:7d:99:c9:0b:46:9d:d4:ab:d2:dc:
50:3c:7f:cd:63:e0:7c:37:5c:2a:07:89:82:e0:d8:
11:ff:b8:20:48:66:8e:ee:64:fe:33:13:b8:3d:18:
0d:10:89:78:24:72:9d:1d:40:c1:be:d5:92:9f:8e:
59:d2:51:da:3c:3b:24:ea:f5:6a:94:e6:77:a7:4c:
e7:66:ef:bb:0b:6e:9f:78:19:b4:3c:f4:80:dc:12:
9b:6c:64:93:b5:e0:26:33:90:84:c0:ac:97:e0:76:
e9:62:bb:1a:64:37:27:d9:68:45:67:d2:0a:8a:78:
cc:f0:31:69:fb:35:a3:4d:09:c3:b4:fa:1e:04:7f:
ef:c1:2f:b5:4c:44:6e:ce:0b:7b:b8:2d:91:bf:02:
48:11:0c:66:b8:5a:1c:2c:13:c5:fc:d1:3c:d3:c5:
c0:dc:ed:b2:01:88:a5:af:81:4a:7a:7f:e3:2a:77:
1e:c7:bc:f3:ff:4b:ec:1f:c8:5e:f7:a5:26:ef:0f:
2b:a8:1d:07:90:49:4a:0c:89:2d:96:16:25:00:91:
6d:2e:4f:48:44:8b:66:d0:d9:0f:54:0f:cf:c8:96:
b4:2d:65:6f:88:d7:5e:91:93:8f:35:29:d6:73:28:
0a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:2F:7D:41:70:49:B7:C3:F9:02:91:96:E8:3A:B1:B7:87:36:E5:54
X509v3 Authority Key Identifier:
keyid:81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/vS99QXBJt8P5ApGW6Dqxt4c25VQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.216.0/22
195.64.248.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:c2:fb:23:22:72:0d:28:a8:13:0a:51:93:29:d1:c6:b6:83:
13:1f:7e:2e:df:1d:76:44:c9:ce:0b:6b:b7:33:47:33:86:ca:
fb:46:cf:19:38:49:a3:11:ab:30:3d:52:2f:70:88:92:8e:61:
35:33:9b:1c:4c:6f:99:0e:84:15:d7:7f:07:17:e9:90:76:9a:
32:4d:8f:c8:d5:b1:21:46:fe:03:8b:ac:88:e5:74:bc:5b:71:
17:76:7c:59:20:76:21:e3:98:e4:d7:e5:e6:45:5d:ff:b9:fd:
d7:36:83:25:00:8d:5a:5c:62:f1:7f:27:f8:3f:cf:dc:f8:3a:
af:c7:27:69:74:b9:0d:a8:6b:b4:7c:8e:9e:20:16:cc:97:6a:
49:8d:16:5e:ec:b0:8c:13:3c:a8:f2:32:af:35:00:59:4c:87:
81:c1:fd:b4:40:fb:05:1d:72:c8:96:56:2e:fe:e6:bc:a4:bd:
14:f8:08:a6:24:e3:ad:8e:61:2c:c5:58:a9:91:3a:f7:22:de:
33:75:5b:5a:f2:4f:8a:79:a1:fd:b0:6c:57:9a:ec:4d:eb:d7:
3b:03:a9:11:83:69:c8:4a:af:3d:fe:b1:42:4f:3d:6c:6c:ea:
ea:cb:16:4d:2b:fd:bb:06:00:17:60:6d:0a:59:48:20:ff:b3:
ec:1c:c4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 08:55:06 2024 by rpki-client on console-ams.rpki-client.org