Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/vfLEJA6B-ywqzFnQSGRmtPEA7hg.roa
File: vfLEJA6B-ywqzFnQSGRmtPEA7hg.roa (raw, json)
Hash identifier: zYjIlSt+BzTpkxDLNgUZ1Hrm+Ivp0EjDRq+bpewI32s=
Subject key identifier: BD:F2:C4:24:0E:81:FB:2C:2A:CC:59:D0:48:64:66:B4:F1:00:EE:18
Certificate issuer: /CN=e518045cfbd96a376ec98e3f5e8b2afb14cca93c
Certificate serial: 018CC3491864F4C0D6EB6DF7CD70C7F1956A
Authority key identifier: E5:18:04:5C:FB:D9:6A:37:6E:C9:8E:3F:5E:8B:2A:FB:14:CC:A9:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5RgEXPvZajduyY4_Xosq-xTMqTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/vfLEJA6B-ywqzFnQSGRmtPEA7hg.roa
Signing time: Mon 01 Jan 2024 04:29:56 +0000
ROA not before: Mon 01 Jan 2024 04:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31374
IP address blocks: 193.200.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5RgEXPvZajduyY4_Xosq-xTMqTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:18:64:f4:c0:d6:eb:6d:f7:cd:70:c7:f1:95:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e518045cfbd96a376ec98e3f5e8b2afb14cca93c
Validity
Not Before: Jan 1 04:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bdf2c4240e81fb2c2acc59d0486466b4f100ee18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ca:76:4d:8b:7c:26:14:8a:c6:9b:f4:84:7a:
2c:69:31:05:3c:a7:04:1e:87:b8:79:11:1f:32:9c:
8f:71:0d:29:cc:51:5b:a4:35:6a:db:0e:96:ca:29:
45:25:f5:f6:6f:b6:78:58:db:06:f4:4e:63:6f:58:
15:d9:1d:bd:1b:5a:91:20:9b:0b:db:6c:3f:cc:6d:
b3:a8:c0:d7:65:15:83:14:07:a2:3f:aa:7a:50:09:
98:c7:41:c0:dc:c2:3c:72:81:cc:0e:f6:16:48:28:
26:35:75:0d:f7:f7:27:f3:8d:52:b4:6c:62:b4:ae:
18:76:65:55:40:fa:e5:4c:c9:de:b2:d2:94:32:95:
23:be:07:b4:82:0a:6c:3c:08:1e:17:50:e3:44:a0:
69:c8:74:10:0e:db:f5:0c:63:4b:74:28:60:24:19:
4f:35:13:ab:03:83:04:47:60:1c:62:58:a4:af:f6:
be:8a:cb:ab:a0:dd:dc:0e:5e:87:bc:65:45:26:22:
1b:e4:47:ab:3f:a8:7b:65:65:62:68:6c:bb:32:08:
44:e0:84:16:c0:f5:60:e3:58:41:d0:15:4b:2b:b0:
71:8a:f3:ac:5c:53:ac:db:fd:d2:60:42:d3:6d:be:
7e:58:7d:bc:9d:d9:b3:54:a4:35:7e:9d:a3:4a:71:
ed:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F2:C4:24:0E:81:FB:2C:2A:CC:59:D0:48:64:66:B4:F1:00:EE:18
X509v3 Authority Key Identifier:
keyid:E5:18:04:5C:FB:D9:6A:37:6E:C9:8E:3F:5E:8B:2A:FB:14:CC:A9:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5RgEXPvZajduyY4_Xosq-xTMqTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/vfLEJA6B-ywqzFnQSGRmtPEA7hg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.228.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:51:1a:24:30:be:86:8d:93:16:6d:0e:e4:3c:5b:59:71:11:
e0:5c:b8:2b:8f:5a:95:6a:ea:96:31:17:40:05:54:bd:f1:de:
d6:6c:71:2d:5c:de:74:d7:81:98:ad:c8:f5:46:f6:66:53:c2:
27:c2:4b:e2:35:17:47:79:01:e2:a4:2b:ef:51:4f:0f:d5:42:
7b:e4:d8:ab:16:fd:09:f5:37:4a:a4:06:ca:2c:0d:32:52:58:
8c:40:ec:b7:3d:72:79:28:6d:15:a3:5f:e1:0b:6c:91:b7:3a:
f4:95:b1:6c:b9:87:8a:89:8e:f8:0d:82:66:e4:74:fa:0c:db:
60:2d:b8:8c:ca:c7:29:cd:4e:31:17:67:7f:83:f3:10:97:da:
12:99:8b:a4:66:0f:12:2a:d7:9a:74:9c:12:5e:58:5d:ae:7e:
c5:65:3e:33:b4:d6:10:3b:50:f5:5d:6d:93:9c:d1:5d:4c:38:
42:46:33:60:42:83:6f:ae:33:5d:a2:24:cc:26:f6:53:e8:75:
f4:c7:67:5b:31:cb:cf:aa:bb:fd:79:08:c3:bf:d9:07:c7:38:
a3:14:d8:a0:ef:f8:77:34:80:86:d6:a4:57:ca:ed:dd:97:f8:
69:04:ca:ad:74:0d:6c:09:01:f2:7e:64:01:aa:2f:1e:d9:28:
20:cd:f3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 11:05:12 2024 by rpki-client on console-ams.rpki-client.org