Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/1-VLU_Rt6cZYtHPtknwLeVyO0muc.roa
File: 1-VLU_Rt6cZYtHPtknwLeVyO0muc.roa (raw, json)
Hash identifier: fgg8HyRa5IPQ0F6yP1i/aVx2TzPXmilOa7OMBpJAqpc=
Subject key identifier: F9:52:D4:FD:1B:7A:71:96:2D:1C:FB:64:9F:02:DE:57:23:B4:9A:E7
Certificate issuer: /CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Certificate serial: 018CC7946AA837CA7B8F3FB9A2AEAE90327F
Authority key identifier: 31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/1-VLU_Rt6cZYtHPtknwLeVyO0muc.roa
Signing time: Tue 02 Jan 2024 00:30:41 +0000
ROA not before: Tue 02 Jan 2024 00:30:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57844
IP address blocks: 85.153.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft
rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Jun 2024 19:19:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:6a:a8:37:ca:7b:8f:3f:b9:a2:ae:ae:90:32:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Validity
Not Before: Jan 2 00:30:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f952d4fd1b7a71962d1cfb649f02de5723b49ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:12:b4:61:9e:b3:c8:b9:db:7b:65:c7:c5:13:
b2:61:f7:1c:62:91:d0:50:c4:7a:9a:cb:a2:14:33:
a6:8f:64:fa:1f:82:42:dd:92:c7:e3:13:34:05:fc:
24:4d:01:bb:eb:c4:74:57:02:7f:e7:08:a9:44:59:
16:ab:55:cc:93:d0:f1:10:35:41:7e:4f:b1:98:f2:
ed:90:df:9a:0f:1b:dc:98:97:38:c9:b5:a1:d7:c8:
e9:5b:69:28:86:5b:f6:0e:f3:a4:c9:2e:ab:fd:d5:
f1:7e:de:b4:33:e6:fd:9d:30:df:bd:ef:e8:5d:80:
8d:53:6f:7e:2d:69:de:32:be:1d:6f:cf:49:84:56:
c1:b8:5e:a7:4c:9c:12:5b:92:65:49:9d:f5:4f:d6:
dc:be:99:d8:69:9d:09:ba:07:90:27:c3:b0:dd:28:
9c:e1:2e:e7:6a:9a:a7:2a:2f:4f:39:26:8b:70:be:
98:6e:4c:d4:e8:0e:d0:f8:41:32:a2:c5:67:71:3a:
72:b9:9c:c0:72:4c:7b:ee:38:05:3b:28:c7:d9:f7:
03:f9:66:a3:32:86:ec:8e:be:0a:9a:be:ec:d1:67:
df:96:8a:a3:36:d3:62:99:af:81:73:96:ce:f7:7f:
a3:1b:3c:a6:1f:a9:6d:f4:ec:26:c0:ba:5f:27:97:
0b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:52:D4:FD:1B:7A:71:96:2D:1C:FB:64:9F:02:DE:57:23:B4:9A:E7
X509v3 Authority Key Identifier:
keyid:31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/1-VLU_Rt6cZYtHPtknwLeVyO0muc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.153.9.0/24
Signature Algorithm: sha256WithRSAEncryption
99:3d:86:a5:74:9b:9c:73:26:3b:08:ad:8f:54:ef:33:8a:27:
4b:4f:f8:ca:73:e1:7b:26:8d:e9:f1:b9:99:88:de:fe:25:37:
cd:52:25:62:3b:92:3a:6b:c8:f7:de:7c:ee:9e:4d:fa:86:ac:
b5:45:b6:65:53:59:98:d9:a6:11:bf:d7:14:e3:1b:ab:35:fd:
aa:e1:04:c5:38:53:6f:08:70:fe:f8:df:b3:d0:d0:9d:c0:f7:
28:b6:5a:a0:1a:bb:9e:81:b6:c8:f9:4e:4a:95:6a:8c:81:aa:
48:2e:8a:05:64:03:f3:9b:65:61:d3:cd:69:5a:17:74:fc:d0:
ed:b0:7f:22:9d:82:09:00:ef:81:31:90:99:fc:73:11:52:8e:
bc:5e:0b:c2:8f:5f:21:52:ec:07:54:b2:38:bb:fd:01:f4:60:
df:3d:17:e6:85:eb:e7:65:01:4c:76:fa:61:2b:c6:55:18:00:
f2:fc:97:7c:be:1e:c4:0b:5f:68:b7:61:a9:0a:0f:4a:52:1a:
41:b9:7b:f6:29:5f:40:d8:00:28:b4:af:ea:db:e6:15:b0:b1:
52:88:1b:00:d0:97:6b:f3:a8:b8:70:6e:ab:c3:98:31:a3:d5:
89:cf:17:b1:98:e4:ea:4e:48:a2:76:93:bb:5e:7e:95:f9:85:
56:11:04:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 5 00:17:11 2024 by rpki-client on console-ams.rpki-client.org