Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/VQxI2rYTwnOJsNLPubbk-LDSca0.roa
File: VQxI2rYTwnOJsNLPubbk-LDSca0.roa (raw, json)
Hash identifier: rOyUrfkJrgZALueMHmreZ4qlAVmnzC4iSOnbiuXLrS0=
Subject key identifier: 55:0C:48:DA:B6:13:C2:73:89:B0:D2:CF:B9:B6:E4:F8:B0:D2:71:AD
Certificate issuer: /CN=70847f8221897d6e952e86ea2c339abaacc131f5
Certificate serial: 018CC6B796E3F594A09F79447E256035ADDC
Authority key identifier: 70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/VQxI2rYTwnOJsNLPubbk-LDSca0.roa
Signing time: Mon 01 Jan 2024 20:29:29 +0000
ROA not before: Mon 01 Jan 2024 20:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60972
IP address blocks: 185.38.28.0/22 maxlen: 24
185.95.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:96:e3:f5:94:a0:9f:79:44:7e:25:60:35:ad:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70847f8221897d6e952e86ea2c339abaacc131f5
Validity
Not Before: Jan 1 20:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=550c48dab613c27389b0d2cfb9b6e4f8b0d271ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:70:06:af:2d:76:88:81:4a:31:50:45:e8:b0:
41:18:6d:85:88:37:85:61:4c:c4:e6:8e:44:fb:e8:
d1:35:a9:4c:75:72:0f:8c:3e:d8:75:04:e8:1c:4b:
56:5e:a8:27:36:b0:d9:9c:02:d2:d2:e6:19:cf:d7:
82:e6:b1:9c:f8:73:d4:e9:43:f2:88:10:46:f5:e9:
35:55:d5:b1:0c:8f:f4:aa:b5:5c:75:36:ff:bf:0d:
72:82:36:d5:0b:64:fd:22:ab:02:28:da:b3:ac:2a:
14:d6:b3:81:0e:36:28:f4:bd:d4:e5:e2:b1:a0:8c:
93:90:a7:e0:b5:46:7a:6f:42:8e:27:0c:d8:63:eb:
0a:5d:c0:0a:d3:e4:0a:d3:92:ab:ee:b7:c4:ae:1a:
5a:da:c7:b7:83:16:d6:9f:2f:3e:2e:99:c8:4d:e4:
c3:17:00:7d:c8:b0:6f:15:9f:b6:63:80:5a:b7:de:
af:70:dc:cb:d1:86:8f:0a:b8:23:50:e1:29:e2:71:
9f:b2:b9:89:99:bb:ad:ec:94:01:cc:da:40:ee:5c:
5d:bb:08:46:f0:de:13:18:c4:84:d5:73:ff:f5:97:
29:91:23:ce:35:f6:9e:5d:01:f3:ba:16:bd:38:0b:
d7:34:a3:2d:f6:6d:74:7e:3e:39:8b:43:7e:52:7f:
1e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:0C:48:DA:B6:13:C2:73:89:B0:D2:CF:B9:B6:E4:F8:B0:D2:71:AD
X509v3 Authority Key Identifier:
keyid:70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/VQxI2rYTwnOJsNLPubbk-LDSca0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.38.28.0/22
185.95.252.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:1d:c0:48:42:54:a1:a0:f7:41:ea:73:ee:b4:fa:76:1e:99:
fb:1b:e1:3b:b5:95:57:4f:32:d8:da:78:7f:0f:5f:3f:3d:2c:
16:ac:75:21:5b:50:ba:3a:b2:bd:2a:f9:61:23:8d:5c:9d:62:
67:19:42:13:f3:82:00:6f:eb:d9:c5:98:b2:42:ce:90:c9:5a:
f8:f7:65:b1:0d:f0:53:8c:0f:fb:e3:22:7e:e3:76:28:af:15:
58:f3:f8:12:6a:f0:0b:ba:78:6b:7a:1b:5a:0a:c6:94:f8:8b:
4f:6a:ff:fb:fb:16:dc:6f:1e:ce:90:fa:7a:31:c4:3a:a9:07:
f9:0d:cb:75:24:e8:68:78:14:29:24:bc:fe:42:41:60:99:c5:
8e:dd:15:23:6e:bc:5a:aa:14:fd:b4:98:5b:50:a8:27:e2:55:
e2:47:02:bf:b2:ee:cb:69:cb:b7:ba:42:fe:e9:c7:b2:b5:87:
5d:07:fb:06:8c:59:24:e1:e4:89:a8:81:48:8b:7b:f7:31:76:
47:bf:67:79:1a:40:9a:bc:e9:6d:b1:09:b2:3f:12:c7:68:b7:
73:3b:f1:2c:99:21:12:a9:a6:b7:e0:cb:9e:ea:d1:2a:b9:04:
c1:44:4f:16:19:8e:4d:1e:d5:3b:81:6f:7f:4e:8d:f7:e6:66:
1d:1e:71:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 17:32:00 2024 by rpki-client on console-ams.rpki-client.org