Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/VFQr430aFS5L-xXuzb6hMxxnyuE.roa
File: VFQr430aFS5L-xXuzb6hMxxnyuE.roa (raw, json)
Hash identifier: VDMX9fgqh9XafK9ZAGwuUYTb+z0GVGqjyZpz7KLtVLk=
Subject key identifier: 54:54:2B:E3:7D:1A:15:2E:4B:FB:15:EE:CD:BE:A1:33:1C:67:CA:E1
Certificate issuer: /CN=f8f19e224c73f83c4fdd196d06608aeb3a881804
Certificate serial: 018D788592F10759A6868B7659AEDBE9F692
Authority key identifier: F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/VFQr430aFS5L-xXuzb6hMxxnyuE.roa
Signing time: Mon 05 Feb 2024 09:07:16 +0000
ROA not before: Mon 05 Feb 2024 09:07:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58350
IP address blocks: 195.150.48.0/20 maxlen: 20
195.150.76.0/23 maxlen: 23
2001:6df:fff0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:78:85:92:f1:07:59:a6:86:8b:76:59:ae:db:e9:f6:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8f19e224c73f83c4fdd196d06608aeb3a881804
Validity
Not Before: Feb 5 09:07:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=54542be37d1a152e4bfb15eecdbea1331c67cae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:92:a3:04:f8:55:6d:48:08:0c:20:02:02:1e:
ff:b4:17:9f:f1:04:bf:3c:29:35:b8:72:98:43:7c:
6c:61:11:99:1e:5b:de:cf:32:07:79:76:4a:a6:67:
fd:bd:04:df:37:4c:96:10:49:12:32:81:94:69:ef:
17:8f:98:69:12:fe:17:13:56:ac:7f:5e:a0:ab:72:
3e:ed:85:0d:6b:38:dd:ce:8a:03:58:75:c3:3f:44:
54:f5:96:7f:1f:66:b3:5f:b4:91:84:0a:5c:41:e9:
7f:14:f6:4c:1a:d0:f2:be:b9:ae:47:52:17:54:ee:
a6:07:b9:6a:97:6f:06:93:ff:7f:51:f6:be:be:92:
c1:1a:1c:c6:b4:86:cd:42:df:97:08:24:2a:f1:11:
c5:ec:2a:f3:af:eb:14:1a:40:8c:86:93:84:6f:57:
ec:7b:82:fe:5e:46:85:0d:b2:d2:29:27:7c:17:3a:
74:f5:44:09:d4:14:46:0c:34:c5:c6:2a:ff:81:8e:
50:e6:d0:c2:91:1f:9b:a7:b0:bb:9a:f2:c2:4f:b9:
8f:91:fb:76:33:bd:a0:77:e2:13:55:2b:de:62:45:
3f:49:4a:c9:ed:a1:90:21:79:cf:b0:d5:b8:87:8c:
ac:91:71:11:fa:b7:8f:49:35:61:bc:11:f6:f8:85:
a4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:54:2B:E3:7D:1A:15:2E:4B:FB:15:EE:CD:BE:A1:33:1C:67:CA:E1
X509v3 Authority Key Identifier:
keyid:F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/VFQr430aFS5L-xXuzb6hMxxnyuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.150.48.0/20
195.150.76.0/23
IPv6:
2001:6df:fff0::/44
Signature Algorithm: sha256WithRSAEncryption
10:ce:8d:04:32:7b:3e:a1:33:ec:41:bd:a0:c8:3b:98:8d:e6:
63:e1:05:59:e1:ce:29:18:50:7d:ec:9d:71:f2:3a:d2:07:b3:
c8:ba:5f:d3:ac:6d:ee:1e:7f:45:c5:99:42:8a:85:ef:36:9e:
79:0e:c3:75:fe:33:bd:7c:25:71:81:af:6b:1a:7d:61:89:75:
e0:62:b6:72:a3:98:85:04:d0:aa:06:db:77:b9:bd:8d:01:bb:
4c:fa:d0:b7:5d:9f:9a:ab:7f:37:31:ba:68:f0:1b:e7:09:c2:
1a:a1:d6:12:85:f4:43:83:98:1c:c8:b9:69:ee:cb:69:6f:5c:
a0:3e:f8:24:9b:43:38:bb:86:6a:50:13:f8:d8:02:49:2c:df:
b6:f6:ec:1e:a1:ef:be:a3:07:bc:9d:d8:7c:df:fb:a1:f5:cf:
1f:a7:f4:48:dc:69:98:95:c0:f1:10:ee:a7:b6:c7:02:fc:83:
83:a0:72:c4:82:0c:25:95:e6:65:9d:9a:66:9d:89:d7:dd:d8:
61:1a:9b:3d:4e:75:0c:7e:22:88:13:41:64:f3:64:89:5b:fb:
65:8e:68:48:64:a0:ef:02:38:96:e2:cd:2b:e2:12:df:d9:14:
0d:db:56:95:6d:7b:00:ab:33:2f:07:c0:ff:ca:34:98:d0:f9:
fa:49:0f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 15:05:49 2024 by rpki-client on console-fra.rpki-client.org