Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/VfcSF9_VVkuurOwshPRUZkgqYuA.roa
File: VfcSF9_VVkuurOwshPRUZkgqYuA.roa (raw, json)
Hash identifier: uyzyqCwA7gbxXV/bQBbYvVpDsSBNPASEWvvWx7wykyQ=
Subject key identifier: 55:F7:12:17:DF:D5:56:4B:AE:AC:EC:2C:84:F4:54:66:48:2A:62:E0
Certificate issuer: /CN=84bfc451fc4f2411addd00a9fbb17346ad6e8996
Certificate serial: 018CC649E91982C83C4BEB10C908722AD38C
Authority key identifier: 84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/VfcSF9_VVkuurOwshPRUZkgqYuA.roa
Signing time: Mon 01 Jan 2024 18:29:41 +0000
ROA not before: Mon 01 Jan 2024 18:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60405
IP address blocks: 37.156.69.0/24 maxlen: 24
37.156.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 07:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:e9:19:82:c8:3c:4b:eb:10:c9:08:72:2a:d3:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84bfc451fc4f2411addd00a9fbb17346ad6e8996
Validity
Not Before: Jan 1 18:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55f71217dfd5564baeacec2c84f45466482a62e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c0:59:4d:c1:58:5e:33:3a:0f:6e:e5:a8:af:
7f:ab:db:f0:9a:b1:3e:f1:a9:ea:7c:2d:f2:46:d4:
fc:5a:58:b7:2c:84:07:e4:d4:ee:b8:08:54:96:5a:
72:dc:9e:ea:02:74:c9:46:f0:a9:cc:a1:28:bc:3b:
be:01:8b:00:f7:a6:fb:51:c8:d0:48:79:fb:b9:60:
ad:86:64:b5:a8:47:21:2b:c2:e0:91:2a:7d:1c:fa:
2f:f7:67:54:82:f8:4f:ae:2e:69:d9:ac:8a:9b:59:
ae:a0:55:a0:70:06:99:e1:c1:5a:36:38:a6:bb:04:
dc:9e:1c:ea:be:8d:48:18:a1:47:3a:fc:da:27:a6:
91:ce:93:67:72:3d:6b:1d:e3:a2:e9:e8:f9:17:03:
8b:5a:15:77:53:fb:b5:42:20:fa:9e:c6:10:1f:ab:
85:15:6f:79:57:2b:b7:eb:0a:4e:db:aa:54:4c:50:
2d:b5:af:3f:66:2f:a5:62:06:0b:07:7f:d3:bd:4e:
b0:83:53:44:39:87:98:75:db:db:48:2c:eb:4c:2b:
0f:ef:cc:2d:28:58:89:2e:aa:f4:9a:1d:56:34:5d:
dc:03:53:d2:4f:3c:b6:02:5d:3a:fe:cf:6d:39:da:
79:21:66:d5:c0:fa:bd:84:b4:8b:6a:32:d3:aa:92:
95:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F7:12:17:DF:D5:56:4B:AE:AC:EC:2C:84:F4:54:66:48:2A:62:E0
X509v3 Authority Key Identifier:
keyid:84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/VfcSF9_VVkuurOwshPRUZkgqYuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.69.0-37.156.70.255
Signature Algorithm: sha256WithRSAEncryption
28:19:a1:74:66:0a:28:7d:52:70:ff:13:94:47:15:a0:e7:5f:
a7:04:bb:48:15:7d:6b:76:62:ec:29:72:b1:21:1e:f1:12:b6:
be:d0:64:04:eb:74:01:5d:fe:fb:48:4e:86:22:5b:e4:38:a7:
2a:35:52:e7:23:e9:18:48:2e:c9:81:5c:34:62:dc:a8:d7:b5:
c2:e1:bd:b0:6f:cc:2f:97:9b:59:46:a2:9b:55:50:ae:45:44:
a2:75:d1:b8:ee:79:34:fc:87:e9:46:68:38:b5:df:d9:b2:41:
92:1c:6d:4e:c5:ab:f9:bb:9b:eb:76:68:d9:cb:5e:5c:dd:f6:
b1:19:76:c4:54:40:00:94:93:5f:7e:9c:74:2a:dc:75:ab:c6:
5b:f0:81:0b:fa:48:99:3f:9c:ea:32:33:c5:b5:0c:71:04:95:
f7:0d:02:fb:7b:4f:0b:2e:52:b5:49:45:ec:74:2b:32:b3:95:
f7:c6:e8:c0:f6:14:88:0b:6c:5d:8a:20:e3:48:05:50:b4:25:
ab:d5:0e:7b:7f:80:63:2a:3a:28:24:2f:e9:f9:38:17:47:ee:
1f:c9:d7:cc:8f:72:ac:a4:43:c8:8a:09:26:ae:ce:93:da:5a:
87:50:27:32:2d:1d:9e:36:39:5e:f4:a9:bf:b7:4b:d5:0e:34:
f9:8f:3d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:52:18 2024 by rpki-client on console-ams.rpki-client.org