Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/VeUPu0UTIyaB2pgwAPbk8L6nmPM.roa
File: VeUPu0UTIyaB2pgwAPbk8L6nmPM.roa (raw, json)
Hash identifier: ELU9dorr5Lww60XMr/2aq6m9hWsVPaiNdhOXbWxCkUs=
Subject key identifier: 55:E5:0F:BB:45:13:23:26:81:DA:98:30:00:F6:E4:F0:BE:A7:98:F3
Certificate issuer: /CN=8e8b1071131763aadab1f294e37cd50adac0939c
Certificate serial: 018CC80263ED082BF469BBF06C25FB9CAA7A
Authority key identifier: 8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/VeUPu0UTIyaB2pgwAPbk8L6nmPM.roa
Signing time: Tue 02 Jan 2024 02:30:49 +0000
ROA not before: Tue 02 Jan 2024 02:30:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198949
IP address blocks: 185.55.132.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 01:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:63:ed:08:2b:f4:69:bb:f0:6c:25:fb:9c:aa:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e8b1071131763aadab1f294e37cd50adac0939c
Validity
Not Before: Jan 2 02:30:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55e50fbb4513232681da983000f6e4f0bea798f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fd:41:16:be:19:79:56:ab:1d:96:ea:52:8a:
4d:1e:ce:c8:62:4b:18:f7:c2:eb:15:0f:dc:d4:3f:
c3:e3:6f:99:1f:fb:65:e3:64:d9:0f:e8:9b:aa:2a:
ea:57:f9:2f:ee:59:e3:b5:ac:e2:fe:d4:6f:45:75:
67:b4:62:61:31:a1:c3:5c:ef:39:ea:b7:d2:d4:23:
29:4e:0a:fb:0b:38:30:65:f1:3b:31:3d:f9:e7:5d:
c6:6e:cb:39:da:af:41:cd:cc:66:dc:f2:63:e4:07:
49:f1:21:14:69:26:8c:35:b0:a5:17:ea:1c:e9:cf:
28:c0:47:61:ce:ea:7d:74:e7:c5:56:4a:31:b6:bb:
1b:28:7c:27:10:46:cc:79:f5:e0:98:3a:89:d5:b6:
fe:0f:86:96:d9:e2:fd:bb:55:49:de:34:cd:ff:63:
8c:7e:00:b3:6f:bc:38:78:33:13:cd:f4:c2:99:28:
8c:c3:cf:62:3e:5c:16:6f:bb:c7:a0:e5:a9:d5:16:
ee:e1:a2:24:63:56:96:d0:53:c6:7b:e8:5b:86:11:
e6:a3:48:28:8f:44:c9:d5:cc:0c:0c:4d:e3:ad:bb:
d4:73:71:71:34:cc:39:b1:19:8c:78:a5:7c:5e:92:
ad:f7:c4:50:1e:04:c9:d2:d6:f5:63:b8:09:b0:cd:
3e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E5:0F:BB:45:13:23:26:81:DA:98:30:00:F6:E4:F0:BE:A7:98:F3
X509v3 Authority Key Identifier:
keyid:8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/VeUPu0UTIyaB2pgwAPbk8L6nmPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.55.132.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:1b:4e:9b:1b:fd:c9:34:38:32:e5:c9:30:3f:55:57:8a:e2:
fc:d4:60:2c:27:2c:70:4e:73:e9:a9:1c:d0:35:db:ea:dc:61:
8e:2a:c5:48:5e:a5:44:32:ad:af:a2:c0:d8:8d:3c:d1:bf:8b:
dc:4d:5b:32:65:6f:74:1b:6e:6c:4c:80:a6:47:cc:99:e3:0c:
3f:a4:43:64:03:ce:c8:dd:1c:fb:da:33:ba:5a:bc:17:36:c4:
09:77:c3:f9:39:4d:7c:7a:c0:d9:52:3a:94:e9:a1:77:ae:3d:
b4:10:3e:de:a4:2c:c4:d7:30:fe:89:ad:97:45:3e:1b:1d:8d:
d3:01:a3:a2:17:38:a7:8f:e7:84:01:8d:ef:a1:21:41:9a:63:
7f:e7:ce:d7:86:e8:de:95:04:e4:54:b1:83:04:a3:a2:3b:54:
4e:4e:89:32:b5:75:5e:29:23:61:a5:a4:00:43:75:ac:32:84:
56:e0:85:a4:12:3b:bd:ee:d2:72:60:a5:c9:9d:77:ff:98:9a:
c9:e1:de:6a:1e:97:4c:04:20:66:1b:c9:97:be:e3:b8:c2:8a:
96:f7:01:47:e1:69:1d:3d:d3:5f:f8:82:5f:22:1e:9a:d2:61:
bd:49:a9:6b:94:f0:c9:78:d8:91:11:0e:bd:e2:aa:da:b9:33:
3d:2c:c6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 06:21:18 2024 by rpki-client on console-ams.rpki-client.org