Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/iCG6Ft3mTKBJRHjFzRQdZI_XBdA.roa
File: iCG6Ft3mTKBJRHjFzRQdZI_XBdA.roa (raw, json)
Hash identifier: XSwv2iM8UChIllv/VKFe/dAKNwAf5eItjwotEkxw6sk=
Subject key identifier: 88:21:BA:16:DD:E6:4C:A0:49:44:78:C5:CD:14:1D:64:8F:D7:05:D0
Certificate issuer: /CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11
Certificate serial: 018F9FC1034DBB86B3B70E2F198A564942D6
Authority key identifier: 54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/iCG6Ft3mTKBJRHjFzRQdZI_XBdA.roa
Signing time: Wed 22 May 2024 10:02:57 +0000
ROA not before: Wed 22 May 2024 10:02:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43708
IP address blocks: 95.85.192.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 16:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9f:c1:03:4d:bb:86:b3:b7:0e:2f:19:8a:56:49:42:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11
Validity
Not Before: May 22 10:02:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8821ba16dde64ca0494478c5cd141d648fd705d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2a:dc:d3:52:51:14:ec:38:c0:a5:b7:d3:08:
0f:4e:1c:46:8d:05:d2:fe:f3:58:fa:05:84:ce:a1:
28:28:d7:de:a1:90:4b:23:d1:2b:45:0c:77:35:09:
0a:46:70:24:d1:31:6e:52:a5:ab:ef:d8:5f:03:cc:
bc:f0:91:bd:96:41:e3:40:d6:d0:cb:f8:3d:d6:42:
23:a4:23:76:55:40:4e:27:48:b3:f8:2d:37:6e:79:
4d:1a:2a:66:af:5b:ae:9e:cb:28:03:23:71:69:31:
60:c6:6c:6c:17:21:fa:c1:cc:35:9d:6d:80:f5:96:
40:cb:ef:5c:2e:e3:e4:73:08:77:0c:72:76:ea:51:
2d:d9:31:2b:4e:67:ee:e6:52:56:0b:f0:06:f7:5a:
6c:0d:42:83:52:bd:f9:50:90:18:91:71:07:52:6d:
fa:7a:6c:39:a7:71:10:1d:11:f7:1e:61:d5:f8:5f:
cf:9f:0c:e2:01:fe:78:69:3b:46:c8:71:4d:0c:5d:
e8:7b:99:40:b7:09:20:20:7c:a6:e4:d1:22:f0:26:
f2:38:fa:53:04:2b:ca:68:d2:60:06:6a:36:00:b4:
01:7c:d5:9c:b5:bd:35:2c:74:a2:cd:3d:ef:37:43:
5f:a9:58:e8:aa:6b:ea:b2:f8:9b:7a:62:8d:c8:89:
93:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:21:BA:16:DD:E6:4C:A0:49:44:78:C5:CD:14:1D:64:8F:D7:05:D0
X509v3 Authority Key Identifier:
keyid:54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/iCG6Ft3mTKBJRHjFzRQdZI_XBdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.85.192.0/18
Signature Algorithm: sha256WithRSAEncryption
a6:32:b0:36:29:e2:7e:be:33:e2:94:9a:7d:62:83:e6:74:1b:
b5:0c:59:ce:ed:6a:f5:63:58:92:fb:d9:65:f9:01:fe:26:3f:
35:22:84:a3:10:bb:51:fd:32:85:5d:60:18:8d:fe:cc:48:1b:
7c:eb:c8:e5:5c:53:ec:22:33:4c:21:a5:a7:b8:9a:82:35:72:
93:37:36:78:f3:a7:b6:12:fc:1f:5a:d2:e3:e8:39:9d:4a:a4:
11:26:21:86:38:3a:5f:e8:65:0e:e2:72:62:e8:ff:27:db:ec:
e6:c2:a7:b6:e3:97:5a:1f:53:9b:7d:f4:d4:65:f5:60:3a:4b:
53:e0:67:9e:5f:3f:49:a4:ba:7d:b1:ea:c0:2a:8d:15:9a:41:
e5:71:e7:3a:e0:43:f2:ba:fe:ce:6d:41:16:dd:b7:b5:21:98:
97:1f:cf:18:11:a7:55:f8:90:46:6a:39:f9:6c:f8:46:bb:7f:
d7:95:fe:a0:18:fe:1c:73:ca:9a:ef:e1:3e:7a:9f:40:08:ad:
47:08:c9:22:02:ce:e4:47:cf:ff:a1:a7:7c:b7:3f:c4:f1:92:
ec:94:35:56:18:1d:76:09:4e:fd:67:71:8b:42:15:d5:bf:3c:
9c:df:f9:d7:d5:28:61:ad:01:d4:e8:e9:6c:ad:bf:58:99:78:
ed:75:56:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:45:14 2024 by rpki-client on console-fra.rpki-client.org