Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/VlTYydzBeSh0HGitwbaqTu9341g.roa
File: VlTYydzBeSh0HGitwbaqTu9341g.roa (raw, json)
Hash identifier: hU9mIPU5QXzdh907gvAXotLBoj4DtVW9uI00X4Ud/sA=
Subject key identifier: 56:54:D8:C9:DC:C1:79:28:74:1C:68:AD:C1:B6:AA:4E:EF:77:E3:58
Certificate issuer: /CN=42f9a96952777f1074338303ecb65025c4e2b8b5
Certificate serial: 018F30BCC3A7127B479A9B9EF7DFEA888863
Authority key identifier: 42:F9:A9:69:52:77:7F:10:74:33:83:03:EC:B6:50:25:C4:E2:B8:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/VlTYydzBeSh0HGitwbaqTu9341g.roa
Signing time: Tue 30 Apr 2024 20:40:28 +0000
ROA not before: Tue 30 Apr 2024 20:40:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206260
IP address blocks: 83.223.208.0/20 maxlen: 20
141.0.128.0/20 maxlen: 20
143.110.96.0/19 maxlen: 19
185.13.124.0/22 maxlen: 22
2a02:f300::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 20:23:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:30:bc:c3:a7:12:7b:47:9a:9b:9e:f7:df:ea:88:88:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f9a96952777f1074338303ecb65025c4e2b8b5
Validity
Not Before: Apr 30 20:40:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5654d8c9dcc17928741c68adc1b6aa4eef77e358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ab:62:61:65:c4:19:b1:32:a4:5f:6c:0d:41:
a7:fa:80:ac:a7:ac:a8:10:79:04:18:85:49:1d:75:
11:d8:80:0f:3d:0f:a7:98:41:a5:a7:ca:b8:97:bf:
1b:ec:8e:3f:cb:ce:a9:e8:9d:a3:d6:ac:b2:12:40:
e3:7a:eb:9a:ed:12:b0:38:29:86:9c:55:3a:14:bf:
5d:8d:2f:37:ba:4a:28:b1:c4:b1:84:37:f2:63:93:
a7:2f:62:88:07:31:53:05:11:d6:95:68:f3:e7:c5:
81:89:19:1e:aa:43:b8:7a:5f:72:20:90:54:09:fb:
dd:42:5c:f9:a4:fa:5f:35:b6:69:67:0f:09:e7:24:
d7:0a:65:ce:24:2c:b7:f9:83:fa:d7:12:8e:f6:02:
3a:4c:1e:e0:71:54:d8:97:cc:2d:6a:56:fb:1f:9f:
64:8e:ce:7e:b7:e1:19:71:a5:6b:de:67:e3:c1:37:
a6:3c:18:05:77:ec:1b:f2:c6:62:78:69:fb:aa:c7:
bc:5e:11:5b:78:66:ef:a0:18:68:14:31:44:0d:97:
1e:35:21:0b:60:f7:ed:4b:60:97:27:04:9e:73:16:
2c:94:85:ad:e9:64:b9:3a:e4:09:21:49:84:0b:10:
74:28:a1:14:b1:28:2f:dc:9f:47:6a:17:f4:a8:73:
f3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:54:D8:C9:DC:C1:79:28:74:1C:68:AD:C1:B6:AA:4E:EF:77:E3:58
X509v3 Authority Key Identifier:
keyid:42:F9:A9:69:52:77:7F:10:74:33:83:03:EC:B6:50:25:C4:E2:B8:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/VlTYydzBeSh0HGitwbaqTu9341g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.223.208.0/20
141.0.128.0/20
143.110.96.0/19
185.13.124.0/22
IPv6:
2a02:f300::/29
Signature Algorithm: sha256WithRSAEncryption
6e:3e:2c:f3:be:80:45:3d:21:66:36:30:18:ba:b4:88:48:9f:
2b:9d:a7:87:d2:b4:e5:e7:4d:d7:12:29:9a:a6:41:8a:32:f6:
70:f6:c9:8a:05:90:2c:80:4d:29:41:d0:4a:a5:f0:8c:cd:38:
c2:c2:9c:31:2c:54:d1:67:ab:00:f6:9f:ad:4b:23:74:3b:4c:
bf:ad:57:45:9e:83:5d:3e:ae:81:15:b9:b7:03:ea:95:48:c0:
e6:eb:dc:ab:64:f1:af:00:2f:fd:0d:28:43:7b:f3:2a:81:f8:
f8:8f:96:eb:b8:77:f5:28:1a:f9:21:b1:bc:33:94:da:88:7c:
62:78:00:2b:ef:ab:3e:5c:cb:c1:14:a4:3e:3d:4d:a6:01:c2:
db:8b:57:52:9d:d0:c8:cd:f0:63:cd:e7:d1:91:0e:62:7a:a2:
67:38:92:15:83:aa:6c:05:b4:9a:f0:6c:c6:c1:24:89:f5:42:
c0:aa:5e:64:57:ce:c3:68:d0:e9:09:fd:32:8c:48:c4:eb:1b:
9e:a3:8c:ac:b3:8f:f6:0d:06:31:f0:a8:bf:55:91:8f:1a:cf:
5c:93:13:cd:ad:95:0d:91:bf:b1:16:5f:01:bc:6b:d4:4a:2f:
2e:5b:fb:5a:3e:7d:89:7d:f7:07:03:96:7f:62:20:88:1a:b7:
e2:16:5b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 03:55:23 2024 by rpki-client on console-ams.rpki-client.org