Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/vNJ-nZ3Xcjj1zn90-VrNADTETds.roa
File: vNJ-nZ3Xcjj1zn90-VrNADTETds.roa (raw, json)
Hash identifier: eZFa2IkCPin8e9194siXzRDQ2Ss7s6tzZ9T+H1j/f2s=
Subject key identifier: BC:D2:7E:9D:9D:D7:72:38:F5:CE:7F:74:F9:5A:CD:00:34:C4:4D:DB
Certificate issuer: /CN=1366b960a6f1f04439f09186f9ecf531a9ce2648
Certificate serial: 018CC801464EFF71C3C846244BF7A89C3FBE
Authority key identifier: 13:66:B9:60:A6:F1:F0:44:39:F0:91:86:F9:EC:F5:31:A9:CE:26:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E2a5YKbx8EQ58JGG-ez1ManOJkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/vNJ-nZ3Xcjj1zn90-VrNADTETds.roa
Signing time: Tue 02 Jan 2024 02:29:35 +0000
ROA not before: Tue 02 Jan 2024 02:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 193.109.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/E2a5YKbx8EQ58JGG-ez1ManOJkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 19:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:46:4e:ff:71:c3:c8:46:24:4b:f7:a8:9c:3f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1366b960a6f1f04439f09186f9ecf531a9ce2648
Validity
Not Before: Jan 2 02:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bcd27e9d9dd77238f5ce7f74f95acd0034c44ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ed:e4:03:56:a2:9f:f7:79:8f:3b:a3:d5:30:
5d:79:0f:51:ed:71:a4:a5:53:da:e2:9d:a8:c0:79:
0a:d7:7f:74:93:b5:35:ee:2c:b8:75:4a:4a:a5:e7:
29:3a:15:85:fa:96:4f:3d:a1:41:f4:47:1b:59:cc:
63:f1:2e:85:d0:d0:b3:01:42:3f:6d:9a:ea:f7:08:
f4:0b:01:fe:71:48:d1:ee:5a:40:47:ae:d4:75:f0:
10:a2:6d:ca:c7:5e:44:ec:6e:04:c0:78:f9:aa:07:
73:2f:58:31:bc:5f:69:17:a7:71:00:40:82:c5:98:
a7:4a:ea:98:6b:82:32:d1:62:22:b0:95:46:b5:6d:
f4:26:9d:6e:80:e5:dc:34:f0:67:1a:61:6e:92:37:
e1:85:c3:66:3d:be:5d:90:12:b1:55:2c:64:ed:4e:
1e:4e:76:d4:81:71:cc:99:ee:de:70:03:a8:c7:d2:
32:1b:4b:19:fb:d3:9c:a7:17:24:85:26:89:8e:c0:
9e:fd:f9:be:b7:c8:2f:91:e1:44:b4:4a:34:7d:a5:
24:ed:b1:06:8c:72:d4:72:12:f6:3d:7f:eb:1a:98:
97:2b:6c:e9:de:a6:fb:6b:df:e5:19:db:40:da:8c:
69:74:93:ef:d7:4a:7d:5c:fd:8d:e6:1f:bd:95:c3:
89:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D2:7E:9D:9D:D7:72:38:F5:CE:7F:74:F9:5A:CD:00:34:C4:4D:DB
X509v3 Authority Key Identifier:
keyid:13:66:B9:60:A6:F1:F0:44:39:F0:91:86:F9:EC:F5:31:A9:CE:26:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2a5YKbx8EQ58JGG-ez1ManOJkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/vNJ-nZ3Xcjj1zn90-VrNADTETds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.168.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:80:fb:49:97:dc:45:40:db:17:36:4b:06:6f:89:af:7f:fd:
a6:a4:9b:e1:e0:82:fd:09:da:6a:0b:8f:56:78:b5:ab:df:81:
10:d9:9b:2f:91:23:4b:65:de:b0:f2:10:d7:8b:19:92:7d:3e:
e1:00:d8:d4:a4:2c:ce:e3:72:72:00:c0:52:1a:0a:4b:d1:b6:
5a:c3:a3:b4:a3:69:0d:41:d8:48:ce:5e:b2:fa:3b:3a:af:77:
2d:0b:04:df:44:cb:28:c0:80:9f:b2:aa:04:b9:88:73:26:b4:
a0:f0:13:39:f4:2c:e5:88:ea:37:6d:cc:20:ab:f5:80:a1:04:
ab:7d:d7:4b:12:c5:50:9c:37:7b:78:46:9d:0f:e1:63:f1:b1:
36:23:fb:dd:d4:fb:ba:34:1f:bd:e0:e2:5d:79:03:46:58:f8:
34:12:7f:53:71:d7:4f:56:1c:e2:c3:00:c7:ca:9f:3c:e6:d0:
a5:60:7a:9a:eb:03:2b:e7:45:00:cd:75:eb:4f:ef:7a:f9:3b:
5f:ad:68:11:3a:0f:c2:c1:29:9f:60:69:df:df:28:04:65:6e:
4b:ee:36:af:01:76:ce:4e:56:33:ce:1e:ba:72:0f:65:69:22:
da:ae:2f:f7:59:b1:7e:53:94:f3:a5:6c:7b:d1:31:f4:15:c6:
1e:05:31:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 01:33:00 2024 by rpki-client on console-ams.rpki-client.org