Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6b544c-50e7-4f96-8c8d-8dee1da10741/1/VcixcvtPDe1RhbB9xyMJm8-U2c8.roa
File: VcixcvtPDe1RhbB9xyMJm8-U2c8.roa (raw, json)
Hash identifier: 2KtVaiJC6H6BarrMa4UiUbA62/dDbOxZoL70uS+eIso=
Subject key identifier: 55:C8:B1:72:FB:4F:0D:ED:51:85:B0:7D:C7:23:09:9B:CF:94:D9:CF
Certificate issuer: /CN=ec7469c5428eef9ab768d9ed6c2c89443a6bb4be
Certificate serial: 019339FCD0FC3BE37CBD7F3B1D7C0A5B1C54
Authority key identifier: EC:74:69:C5:42:8E:EF:9A:B7:68:D9:ED:6C:2C:89:44:3A:6B:B4:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HRpxUKO75q3aNntbCyJRDprtL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6b544c-50e7-4f96-8c8d-8dee1da10741/1/VcixcvtPDe1RhbB9xyMJm8-U2c8.roa
Signing time: Sun 17 Nov 2024 11:58:10 +0000
ROA not before: Sun 17 Nov 2024 11:58:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44947
IP address blocks: 81.30.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/6b544c-50e7-4f96-8c8d-8dee1da10741/1/7HRpxUKO75q3aNntbCyJRDprtL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/6b544c-50e7-4f96-8c8d-8dee1da10741/1/7HRpxUKO75q3aNntbCyJRDprtL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HRpxUKO75q3aNntbCyJRDprtL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:39:fc:d0:fc:3b:e3:7c:bd:7f:3b:1d:7c:0a:5b:1c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec7469c5428eef9ab768d9ed6c2c89443a6bb4be
Validity
Not Before: Nov 17 11:58:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55c8b172fb4f0ded5185b07dc723099bcf94d9cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9d:91:c6:a2:d2:ec:37:b9:6f:dc:55:f2:ee:
61:a6:6b:e8:91:4b:e8:74:53:01:5d:83:df:74:ad:
2a:a9:48:d6:4a:2a:06:9f:c9:44:8e:fd:1a:87:d1:
fd:62:4e:dd:5c:58:ae:ab:4d:a7:3b:d9:08:33:e8:
6a:70:11:bd:03:a8:ba:5e:8b:b5:fb:61:1c:92:93:
7b:95:f6:24:bd:f4:a4:f3:50:f8:89:f6:02:1a:d4:
f2:e5:1c:80:4d:11:a7:22:05:27:42:44:93:45:f6:
84:19:2c:e8:3f:6c:83:b9:3a:47:d3:e4:3e:74:fc:
0d:a9:8d:2e:95:fa:67:e0:00:53:85:a8:9f:3b:ca:
e6:ed:3a:01:70:21:03:e3:8b:c8:55:a3:89:ed:e3:
58:77:7c:22:3f:5d:ed:2a:46:7a:ea:67:8d:d3:72:
42:1b:e8:26:e2:77:03:79:38:a1:35:ad:e7:95:90:
56:af:12:a8:45:3d:9b:f0:eb:b4:ce:a2:d5:a1:fd:
43:9a:41:a0:e7:39:21:cc:69:47:ea:c8:a8:36:7e:
9c:52:37:20:b3:88:0a:7d:e9:37:e2:33:ed:80:c7:
78:d5:1b:36:05:9e:3d:69:89:86:95:c4:04:d9:0c:
9a:d3:a0:9b:64:64:f7:9c:ff:43:2a:5c:2b:04:82:
45:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C8:B1:72:FB:4F:0D:ED:51:85:B0:7D:C7:23:09:9B:CF:94:D9:CF
X509v3 Authority Key Identifier:
keyid:EC:74:69:C5:42:8E:EF:9A:B7:68:D9:ED:6C:2C:89:44:3A:6B:B4:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HRpxUKO75q3aNntbCyJRDprtL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6b544c-50e7-4f96-8c8d-8dee1da10741/1/VcixcvtPDe1RhbB9xyMJm8-U2c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6b544c-50e7-4f96-8c8d-8dee1da10741/1/7HRpxUKO75q3aNntbCyJRDprtL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.30.107.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:77:ab:93:53:e5:57:3d:2f:81:ea:b3:78:eb:eb:b9:08:bb:
10:c1:f8:a9:52:63:5a:a4:2b:96:73:8a:59:3e:2d:8e:10:51:
3d:db:a3:93:e7:7a:7d:10:02:3a:2e:89:7c:57:d9:ba:d4:00:
6b:1f:b6:4c:43:2d:a2:d2:e0:ab:77:00:e1:38:5b:26:ed:e9:
f8:a3:cd:67:b8:7a:36:92:c4:36:c7:74:be:d5:6b:4f:38:ad:
76:28:bc:c1:8d:52:43:01:fc:6d:83:a0:84:b7:a9:c2:96:82:
43:0d:ea:be:a0:d1:c4:b5:bb:50:83:bf:ee:aa:82:d6:33:40:
5e:8c:1d:f5:84:4d:9e:2f:03:c1:b3:ac:4a:00:65:89:f7:4e:
22:d6:b1:15:6f:ac:5e:b2:4d:24:ec:a5:58:26:af:cb:5f:87:
b8:0c:11:18:7b:e1:9d:79:55:6a:7d:15:b8:94:ed:0a:3e:45:
63:15:3c:4b:45:3e:de:18:36:a6:c5:eb:4f:14:32:dc:03:21:
3e:b4:3b:bc:ae:e4:12:6c:3a:16:fe:fb:57:dc:49:4d:65:4f:
61:b6:25:31:b4:8c:a7:2d:c3:7e:bd:6e:ea:93:12:aa:4b:b9:
b0:e4:e7:d3:fe:0f:1a:30:cc:92:b5:16:d1:8e:c8:30:fb:91:
66:bb:3e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:44:42 2024 by rpki-client on console-fra.rpki-client.org