Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/VbMCzOWg_tjs5CJOd6uBAGKftlM.roa
File: VbMCzOWg_tjs5CJOd6uBAGKftlM.roa (raw, json)
Hash identifier: aCH8drBAmMMKAFRZmXkEsPkoISsRfOSCmT/8ZzLP8Z0=
Subject key identifier: 55:B3:02:CC:E5:A0:FE:D8:EC:E4:22:4E:77:AB:81:00:62:9F:B6:53
Certificate issuer: /CN=1ac06cf2c9e957537439734f0584a8204a7b8311
Certificate serial: 018CC9BCACF91DD069C405ACD79D6BA9D363
Authority key identifier: 1A:C0:6C:F2:C9:E9:57:53:74:39:73:4F:05:84:A8:20:4A:7B:83:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsBs8snpV1N0OXNPBYSoIEp7gxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/VbMCzOWg_tjs5CJOd6uBAGKftlM.roa
Signing time: Tue 02 Jan 2024 10:33:54 +0000
ROA not before: Tue 02 Jan 2024 10:33:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 680
IP address blocks: 134.110.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GsBs8snpV1N0OXNPBYSoIEp7gxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:ac:f9:1d:d0:69:c4:05:ac:d7:9d:6b:a9:d3:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ac06cf2c9e957537439734f0584a8204a7b8311
Validity
Not Before: Jan 2 10:33:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55b302cce5a0fed8ece4224e77ab8100629fb653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b8:a7:06:d5:c5:fd:52:be:95:52:09:7c:41:
e1:56:74:9e:4f:77:82:af:87:28:56:b7:0a:d2:26:
9a:07:de:19:4a:e7:db:00:1e:d3:3e:f4:d4:90:af:
02:e0:c8:37:67:14:32:2a:6b:4a:e1:7d:31:aa:57:
15:a4:66:74:f6:ef:36:ee:3e:34:68:e2:0a:47:32:
cd:21:af:1f:d2:ac:39:93:ea:1e:18:dc:88:90:1a:
08:de:bc:15:90:89:58:96:9a:a2:ea:ce:b3:45:31:
5c:11:d3:38:dd:24:47:99:bd:49:eb:71:f9:9c:46:
e0:fd:30:b6:99:9e:aa:05:ac:2e:9c:2e:a5:63:b9:
2c:e8:ad:91:a5:f0:22:8d:67:3f:54:c7:d0:7e:bb:
34:b6:6f:99:16:12:be:0e:d9:81:5e:df:35:71:2e:
56:8b:cc:a5:6e:c2:78:31:85:f4:0f:cf:db:c7:13:
64:2f:57:f6:5e:1b:f2:65:4e:8d:dc:f7:9a:a1:f7:
f3:9d:b8:b4:cb:e6:65:31:e0:a9:24:6c:21:87:6e:
2a:ad:60:eb:33:58:cd:d6:f8:b9:1f:83:2a:bf:79:
4a:50:d6:44:77:67:33:6c:5c:ea:3a:6a:cd:b0:f9:
57:66:cc:ac:28:5f:73:1c:c4:7b:52:47:b2:79:bc:
fc:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B3:02:CC:E5:A0:FE:D8:EC:E4:22:4E:77:AB:81:00:62:9F:B6:53
X509v3 Authority Key Identifier:
keyid:1A:C0:6C:F2:C9:E9:57:53:74:39:73:4F:05:84:A8:20:4A:7B:83:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsBs8snpV1N0OXNPBYSoIEp7gxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/VbMCzOWg_tjs5CJOd6uBAGKftlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.110.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6c:15:0c:d9:fc:fe:3c:b8:cb:b1:fb:59:25:a5:67:05:ac:0a:
13:1d:92:7b:1d:b5:39:07:59:1c:e3:07:53:40:a4:66:2b:f4:
09:00:51:ca:23:fb:00:b6:df:3b:3c:3d:32:4e:74:7e:1d:e5:
0c:a8:12:e2:5b:df:ff:40:40:89:c0:b5:72:a3:60:6c:51:b1:
db:eb:7f:e4:4b:da:bd:48:87:ac:dd:e1:dd:a9:36:80:f4:09:
84:fa:b5:4b:da:4f:51:3d:19:c3:32:4f:89:26:23:df:6d:d8:
28:0d:88:6d:67:35:8f:a0:d5:4c:bc:7f:ef:19:47:ec:2b:23:
ba:21:59:f7:d2:84:81:ae:41:b7:be:cd:5b:25:a2:14:b9:22:
5f:6a:dd:7e:c4:2a:3f:1c:3e:18:07:98:05:18:62:1c:c2:10:
1d:eb:b6:88:2e:91:16:c3:b9:bb:72:fc:63:08:2b:fd:f3:59:
53:2f:5d:4d:38:85:21:93:29:11:e3:7d:a5:84:1b:31:0f:aa:
bb:6e:84:79:06:13:63:6b:5e:ad:de:eb:f1:ce:12:92:e2:8e:
4c:6d:66:e6:29:53:f9:64:3a:a7:21:4e:f4:88:15:24:7f:8b:
09:ca:23:25:4f:be:9e:6f:9d:72:00:04:62:0a:bd:95:b4:aa:
c7:80:66:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:14:26 2024 by rpki-client on console-ams.rpki-client.org