Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/986946-58b8-49f1-8bb4-7f955e68e693/1/V2zse88b-Ve5vNlIFYDL0G6zQP8.roa
File: V2zse88b-Ve5vNlIFYDL0G6zQP8.roa (raw, json)
Hash identifier: vsmTnI635JJ+P7SHyVmZRJldby9K2icjmeMmMdrHPx4=
Subject key identifier: 57:6C:EC:7B:CF:1B:F9:57:B9:BC:D9:48:15:80:CB:D0:6E:B3:40:FF
Certificate issuer: /CN=f03528a5045200f614da2bf3a5bcd2624c8f73ac
Certificate serial: 018CCA2911B52CA81203DBA8EC6AB49C9E27
Authority key identifier: F0:35:28:A5:04:52:00:F6:14:DA:2B:F3:A5:BC:D2:62:4C:8F:73:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DUopQRSAPYU2ivzpbzSYkyPc6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/986946-58b8-49f1-8bb4-7f955e68e693/1/V2zse88b-Ve5vNlIFYDL0G6zQP8.roa
Signing time: Tue 02 Jan 2024 12:32:18 +0000
ROA not before: Tue 02 Jan 2024 12:32:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56851
IP address blocks: 217.28.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/986946-58b8-49f1-8bb4-7f955e68e693/1/8DUopQRSAPYU2ivzpbzSYkyPc6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/986946-58b8-49f1-8bb4-7f955e68e693/1/8DUopQRSAPYU2ivzpbzSYkyPc6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DUopQRSAPYU2ivzpbzSYkyPc6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:11:b5:2c:a8:12:03:db:a8:ec:6a:b4:9c:9e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03528a5045200f614da2bf3a5bcd2624c8f73ac
Validity
Not Before: Jan 2 12:32:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=576cec7bcf1bf957b9bcd9481580cbd06eb340ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f9:c3:dc:34:cb:be:e9:f0:b9:5c:a3:22:30:
96:50:89:6e:16:7e:45:17:dc:9e:19:01:49:2f:62:
ac:52:dd:bf:6c:15:fa:29:29:df:07:9b:43:0e:09:
2a:16:b9:c1:03:5a:a8:f8:ee:4a:0c:93:fa:67:68:
6b:02:d9:5c:dd:10:0d:c3:fb:5c:26:f6:90:03:91:
5a:32:27:5a:fa:28:83:30:1b:62:55:8a:a7:a9:08:
19:d3:53:61:13:03:a5:aa:f8:b9:7b:1b:c8:83:cf:
f2:94:df:38:67:1d:7d:ca:9b:ba:db:21:ce:3c:ff:
63:02:12:f4:8e:bd:b7:5c:62:ac:85:5b:06:28:88:
ee:f6:9a:17:18:87:bf:b6:d1:76:c8:14:4b:47:f8:
21:d8:92:c2:fd:81:f3:b2:16:2f:8a:85:13:47:7b:
82:b4:71:f9:fd:a5:fe:a7:1d:ab:ad:33:e9:e3:94:
b8:0e:05:1a:20:6e:db:a8:9f:b9:80:1f:ae:f8:68:
10:4f:43:33:48:7c:27:ef:aa:a7:ee:2d:fa:95:19:
19:6b:43:ad:37:e2:be:3c:1a:6f:25:6a:53:b4:fc:
0c:c8:aa:83:de:68:d8:5e:52:3e:b7:66:49:b3:89:
11:d9:22:ef:82:2c:4d:dd:3e:4a:3e:00:1a:38:8f:
1e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:6C:EC:7B:CF:1B:F9:57:B9:BC:D9:48:15:80:CB:D0:6E:B3:40:FF
X509v3 Authority Key Identifier:
keyid:F0:35:28:A5:04:52:00:F6:14:DA:2B:F3:A5:BC:D2:62:4C:8F:73:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DUopQRSAPYU2ivzpbzSYkyPc6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/986946-58b8-49f1-8bb4-7f955e68e693/1/V2zse88b-Ve5vNlIFYDL0G6zQP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/986946-58b8-49f1-8bb4-7f955e68e693/1/8DUopQRSAPYU2ivzpbzSYkyPc6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.28.140.0/24
Signature Algorithm: sha256WithRSAEncryption
44:76:3e:dc:c4:76:2f:52:8b:dc:f6:e8:21:b3:73:ed:15:e0:
d9:0e:a1:92:90:16:cf:8d:19:10:75:ad:aa:d7:d9:4f:6e:25:
87:c1:70:a3:4f:23:ca:ae:0d:15:05:86:0f:76:cf:e5:35:a1:
1d:00:13:cc:d8:7e:65:a1:67:d3:cb:1d:b6:8d:29:49:46:70:
6b:50:ab:2c:49:5b:00:2b:f2:00:c1:fb:4c:6b:da:c6:bb:49:
eb:46:19:3e:70:64:71:6b:72:83:95:75:80:c0:cf:35:58:73:
07:7c:31:37:e6:d5:e1:2d:5f:73:fe:ce:fa:91:57:cd:7d:ce:
4b:6c:1e:60:65:91:f5:8a:9a:fa:02:7b:2e:cc:40:10:f4:5c:
ba:24:36:cf:45:5b:07:d8:0f:29:b0:9d:c4:08:81:0a:06:19:
e7:02:dc:11:d1:51:a6:1d:88:1c:7f:05:4a:dc:cc:03:6c:95:
37:b8:72:6a:64:85:62:1e:fe:7c:77:c1:d1:6a:01:89:e1:15:
5c:4b:b3:fe:2a:62:fc:3a:8d:5b:3d:ee:53:5d:83:2e:82:80:
ba:a2:25:15:1c:2d:26:88:69:76:60:83:d8:40:5a:9d:6e:b4:
33:31:7b:e6:53:c0:22:b2:2c:a6:1b:af:7c:42:09:25:da:b1:
85:46:73:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:03:57 2024 by rpki-client on console-fra.rpki-client.org