Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/Va-HEIEr0SpcOQ08O06Y4SjVWYQ.roa
File: Va-HEIEr0SpcOQ08O06Y4SjVWYQ.roa (raw, json)
Hash identifier: mu9wfWioH8H8XA18JGa81Ot/WCYms2KdjUH/C081OLY=
Subject key identifier: 55:AF:87:10:81:2B:D1:2A:5C:39:0D:3C:3B:4E:98:E1:28:D5:59:84
Certificate issuer: /CN=f5f80738351dcfc75af996993a2929c37134a208
Certificate serial: 018CC56F00AE3178D350D475EDB3976072CD
Authority key identifier: F5:F8:07:38:35:1D:CF:C7:5A:F9:96:99:3A:29:29:C3:71:34:A2:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fgHODUdz8da-ZaZOikpw3E0ogg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/Va-HEIEr0SpcOQ08O06Y4SjVWYQ.roa
Signing time: Mon 01 Jan 2024 14:30:35 +0000
ROA not before: Mon 01 Jan 2024 14:30:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39497
IP address blocks: 91.198.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9fgHODUdz8da-ZaZOikpw3E0ogg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6f:00:ae:31:78:d3:50:d4:75:ed:b3:97:60:72:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5f80738351dcfc75af996993a2929c37134a208
Validity
Not Before: Jan 1 14:30:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55af8710812bd12a5c390d3c3b4e98e128d55984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:69:1b:ee:45:8c:49:30:19:55:bd:f6:69:38:
63:5b:e0:7f:8b:08:d0:fb:07:a2:84:6d:f9:b9:15:
72:d0:8c:c2:43:93:7d:75:87:7a:b9:80:58:3f:33:
b6:76:67:7d:fa:38:d0:a8:42:b5:b8:78:cd:16:98:
a4:e3:10:25:b4:ee:e3:b7:e9:2d:be:29:bf:65:2b:
2f:3a:7f:00:ff:67:92:0f:cd:7c:ff:b4:be:57:e8:
91:08:b3:8b:34:3a:c1:01:0c:46:f8:00:90:c9:ae:
02:b6:97:94:97:78:60:bc:73:8b:21:53:24:d5:95:
77:70:20:0a:98:20:6f:da:28:59:98:fc:75:3d:81:
16:4f:36:cf:a7:bf:0f:03:4b:ba:3b:6c:92:22:84:
1f:42:50:7f:52:d7:80:57:24:94:a5:aa:0f:60:5f:
f6:d4:41:61:23:27:5c:e9:bc:d5:13:fa:d5:e0:fc:
0d:a1:fe:8d:a6:3e:83:c4:c3:9e:7d:4a:9f:fa:4c:
cf:55:e3:65:c5:04:cd:1b:f8:a0:3f:c1:b3:37:37:
88:30:a4:98:70:18:63:dc:f1:eb:93:62:31:24:dd:
43:51:d0:1c:ca:6f:9a:bf:63:60:a7:06:15:1b:96:
8c:b3:72:68:d4:87:53:dc:2a:da:7b:da:f6:5a:63:
c5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:AF:87:10:81:2B:D1:2A:5C:39:0D:3C:3B:4E:98:E1:28:D5:59:84
X509v3 Authority Key Identifier:
keyid:F5:F8:07:38:35:1D:CF:C7:5A:F9:96:99:3A:29:29:C3:71:34:A2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fgHODUdz8da-ZaZOikpw3E0ogg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/Va-HEIEr0SpcOQ08O06Y4SjVWYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.52.0/24
Signature Algorithm: sha256WithRSAEncryption
87:1e:de:52:10:c4:15:6f:c2:1d:28:d1:28:29:34:ae:e4:a4:
09:bb:63:07:0c:bf:a9:78:d1:c8:02:c1:4f:77:cd:f3:e1:ee:
9d:ef:11:0d:ba:f2:89:7a:87:4c:14:08:33:ae:2c:7e:89:4f:
66:26:cb:f4:34:28:d0:f5:d7:f7:5c:8c:ca:1f:af:33:ef:b4:
68:e9:a4:d9:3c:9a:da:bd:3e:14:99:b7:cf:b4:71:09:6c:a4:
32:ae:9d:b6:46:ff:ae:1c:f4:52:78:28:13:58:84:30:f6:0a:
3f:61:9c:b7:11:a8:1f:95:f2:57:22:9d:73:ae:76:12:a9:95:
4e:ba:27:0b:3c:1b:87:79:5b:56:09:19:16:93:46:de:c3:81:
23:18:4b:5b:a0:4a:1e:ca:80:65:ff:78:96:f9:b7:ad:ea:37:
5b:d4:26:5c:b2:bc:31:74:41:6c:24:95:2c:39:ef:8d:31:1f:
e0:fc:72:cc:f6:d7:29:9e:87:a8:61:1f:01:2e:c7:9a:96:10:
a8:50:b1:5a:da:44:22:fa:7d:38:8b:f9:8c:59:ce:1d:fa:01:
25:64:dd:00:a8:8a:e3:cf:f3:b8:f9:72:86:a1:71:6a:d7:1f:
a2:92:36:20:06:b2:dc:40:9f:f4:05:c9:35:b2:be:e2:7b:2c:
f4:cb:70:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:11:42 2024 by rpki-client on console-fra.rpki-client.org