Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/rVUY8n89COrSo3MOO0BpDB9bHTQ.roa
File: rVUY8n89COrSo3MOO0BpDB9bHTQ.roa (raw, json)
Hash identifier: dYXczOoGm+UUFjmvsMyO1jjcS1JnVNQgJpHJ4sF281k=
Subject key identifier: AD:55:18:F2:7F:3D:08:EA:D2:A3:73:0E:3B:40:69:0C:1F:5B:1D:34
Certificate issuer: /CN=b6380000fb7e45f8976261a698d418f08e8d67c7
Certificate serial: 018CC424B5D939D8A0C71AAE8FF7B17CE49C
Authority key identifier: B6:38:00:00:FB:7E:45:F8:97:62:61:A6:98:D4:18:F0:8E:8D:67:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/rVUY8n89COrSo3MOO0BpDB9bHTQ.roa
Signing time: Mon 01 Jan 2024 08:29:49 +0000
ROA not before: Mon 01 Jan 2024 08:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203
IP address blocks: 212.57.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:b5:d9:39:d8:a0:c7:1a:ae:8f:f7:b1:7c:e4:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6380000fb7e45f8976261a698d418f08e8d67c7
Validity
Not Before: Jan 1 08:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad5518f27f3d08ead2a3730e3b40690c1f5b1d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:94:ee:9f:82:f6:ce:5a:cc:09:68:d5:f5:23:
f4:c5:b0:68:a3:68:5f:35:37:fe:eb:a3:e9:45:c5:
67:c4:96:12:74:39:94:04:10:11:86:07:74:12:28:
61:09:1f:83:94:98:fd:2e:9e:b9:d4:d0:cc:6d:08:
10:2a:8b:95:c3:bf:4a:84:32:a2:36:b8:13:e8:d6:
f0:7a:cb:03:60:e0:71:c0:90:06:8e:b4:09:7e:f7:
af:d5:21:04:74:55:8e:3f:64:ed:d9:58:79:11:45:
50:44:fd:f2:0c:56:e9:60:f2:f6:cd:51:db:81:c6:
88:4a:de:f5:0b:64:9c:9b:96:6c:22:84:50:4d:33:
50:a8:cf:d3:20:e5:16:14:0a:86:10:ec:ea:c9:42:
ee:48:5a:2a:c2:01:34:9b:b8:ac:4d:ab:97:e0:41:
64:35:4a:91:ed:43:e9:d7:ce:b9:78:17:53:91:bf:
22:05:24:81:a7:90:2a:fd:68:ec:25:a7:f0:ea:6e:
73:4a:fd:ba:73:ee:91:20:48:5a:dc:04:b8:8c:05:
72:d1:bc:db:6c:53:ce:f1:9b:94:f8:11:90:74:c8:
16:84:46:63:9a:be:c6:0f:ba:cb:6c:81:97:80:ee:
8d:ea:b1:e7:27:05:4f:5c:f7:ca:99:f9:6c:e9:9c:
9e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:55:18:F2:7F:3D:08:EA:D2:A3:73:0E:3B:40:69:0C:1F:5B:1D:34
X509v3 Authority Key Identifier:
keyid:B6:38:00:00:FB:7E:45:F8:97:62:61:A6:98:D4:18:F0:8E:8D:67:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/rVUY8n89COrSo3MOO0BpDB9bHTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.57.192.0/19
Signature Algorithm: sha256WithRSAEncryption
8a:85:07:a3:74:59:5e:ea:78:ae:12:29:98:95:50:cd:f1:25:
86:78:50:47:65:b0:93:d4:a3:af:23:d5:d0:19:9f:28:23:53:
5f:1d:27:aa:37:f7:6f:48:11:e2:1d:dc:4a:c7:29:59:5f:3b:
35:48:3c:99:2c:81:a5:4e:48:88:ef:cb:09:9e:69:f9:32:6c:
78:9e:c3:e9:fc:6e:18:57:db:c7:85:37:6d:ae:48:fb:f8:15:
59:3a:2a:e4:c2:72:54:e5:75:87:fa:fd:28:0f:ce:57:33:76:
d6:bd:9e:a6:53:d8:84:d3:7c:2c:ee:98:91:bc:87:16:0c:99:
b3:ea:3e:26:b2:25:95:4f:0f:ed:31:c1:57:93:b8:e6:25:f6:
ee:62:95:25:34:eb:7e:d9:b9:5e:9c:e3:9b:61:5e:f5:f1:bf:
18:90:d9:8d:8a:02:ed:57:89:ba:6b:aa:ad:fa:67:47:ff:0c:
23:57:93:48:f7:d6:8a:ad:a5:4b:ff:bd:57:1f:d9:b2:06:ea:
af:6b:0e:29:b5:12:5a:9e:9c:d2:eb:34:ed:08:98:6c:bc:ba:
fc:b8:74:bd:24:47:9c:4b:fa:6b:97:24:5f:78:d4:35:5e:14:
ff:fe:f3:23:b2:d6:cc:bc:07:8d:da:6b:1a:e5:b1:32:c4:9c:
52:56:6a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:07:17 2024 by rpki-client on console-ams.rpki-client.org