Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/vgIt_iq9tk8qxfV4W9y72m3p1HU.roa
File: vgIt_iq9tk8qxfV4W9y72m3p1HU.roa (raw, json)
Hash identifier: 7WFvQ6efwirSO3JkbFiAbpThAv21zzWe2sNIe1tPU6w=
Subject key identifier: BE:02:2D:FE:2A:BD:B6:4F:2A:C5:F5:78:5B:DC:BB:DA:6D:E9:D4:75
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 018CC50035DE5089A49396C8D6C0C67E550A
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/vgIt_iq9tk8qxfV4W9y72m3p1HU.roa
Signing time: Mon 01 Jan 2024 12:29:34 +0000
ROA not before: Mon 01 Jan 2024 12:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212335
IP address blocks: 45.150.197.0/24 maxlen: 24
45.83.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:35:de:50:89:a4:93:96:c8:d6:c0:c6:7e:55:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Jan 1 12:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be022dfe2abdb64f2ac5f5785bdcbbda6de9d475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:79:a0:91:1c:e6:b6:d2:a3:87:a8:56:16:c5:
86:ba:eb:96:05:ed:cd:13:bb:4a:cb:e5:83:12:8a:
32:ad:fa:47:6d:d3:a4:64:9b:7b:ca:76:b1:dc:cf:
c0:78:0a:fe:2e:83:5e:e8:a0:0b:14:3d:1a:14:eb:
d2:d4:76:10:25:3f:a2:c8:6a:e0:8e:7a:33:c4:1f:
e8:19:eb:ac:e2:3c:ab:4e:87:03:f4:db:09:37:c0:
13:6e:c8:77:76:f5:7a:46:f8:d8:af:93:9f:23:b9:
95:5b:de:34:8f:95:d5:6d:39:71:fe:39:4f:5a:d7:
11:82:b9:f9:35:44:60:1e:97:9a:6c:a5:66:e8:c6:
25:5d:64:ad:e7:94:ed:78:9c:e7:5e:8d:b5:42:e0:
c0:fa:f1:50:3d:15:64:2c:c2:4d:ef:90:41:39:bc:
4a:a5:6a:d0:d7:d6:8e:18:9e:20:69:e1:6f:be:cb:
6a:b0:11:0c:d6:7c:57:ce:b3:02:df:2a:66:e9:3f:
b5:08:32:59:29:f6:de:85:53:e0:df:a0:ec:b2:9a:
cc:e6:bc:9d:05:29:70:21:53:a2:26:2b:b6:2b:9f:
0d:62:c1:51:68:d6:39:d4:03:fa:29:4c:ba:ee:44:
19:4c:9f:3d:de:a8:b0:4a:6d:92:5d:87:33:1e:e3:
bb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:02:2D:FE:2A:BD:B6:4F:2A:C5:F5:78:5B:DC:BB:DA:6D:E9:D4:75
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/vgIt_iq9tk8qxfV4W9y72m3p1HU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.239.0/24
45.150.197.0/24
Signature Algorithm: sha256WithRSAEncryption
94:ce:31:72:01:7b:aa:f2:49:c9:eb:6c:d2:e5:7e:c7:94:7b:
9c:bd:c9:0a:f4:96:08:23:ee:d8:89:9c:ee:0a:d3:05:d3:1a:
0d:fe:92:f8:9d:64:41:4f:60:04:ab:d8:7b:29:8e:bd:d9:c8:
cf:6a:c2:c9:da:96:f7:b3:93:c6:c4:a8:ba:55:64:7e:9d:84:
f3:3a:f2:ef:b1:46:17:f5:6c:46:91:1c:d4:4a:48:d6:3f:fd:
af:c5:59:c7:40:ef:4c:a8:76:24:b3:9e:bc:50:9d:e8:e8:01:
c1:4a:a3:16:74:5d:62:0e:bf:db:e8:bc:29:00:67:b2:68:73:
78:da:03:93:18:de:81:70:28:17:ea:df:d1:19:88:c9:c4:f2:
d3:63:57:cc:3b:71:f4:85:8e:69:06:fb:f1:a7:27:4e:21:68:
bf:69:6e:3f:8f:c1:bf:45:0f:e2:cc:38:e7:4b:7d:c6:15:1f:
a1:10:5e:2d:1c:13:a1:85:b7:0b:f4:91:ca:44:09:46:17:ca:
a8:47:6b:8f:3b:d6:9e:0f:d9:20:d3:f3:e8:93:6c:2d:82:48:
8f:f6:31:34:38:86:18:6a:75:ed:3c:88:0a:f0:46:51:21:89:
94:2e:8d:b1:08:46:4f:63:32:6c:df:7a:f0:4c:ad:37:18:9d:
d8:3f:d9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:23:43 2024 by rpki-client on console-ams.rpki-client.org