Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/VznDPGAItU4YmHmE4qbuG1MnQks.roa
File: VznDPGAItU4YmHmE4qbuG1MnQks.roa (raw, json)
Hash identifier: TzyDCJG5/imm+IlhiVgAz4Thp575zGUmTc9/DtP/9to=
Subject key identifier: 57:39:C3:3C:60:08:B5:4E:18:98:79:84:E2:A6:EE:1B:53:27:42:4B
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 018CC26D5043596AAC417C4DC7851E4F39A9
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/VznDPGAItU4YmHmE4qbuG1MnQks.roa
Signing time: Mon 01 Jan 2024 00:29:52 +0000
ROA not before: Mon 01 Jan 2024 00:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25374
IP address blocks: 90.154.225.0/24 maxlen: 24
213.91.189.0/24 maxlen: 24
213.16.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:50:43:59:6a:ac:41:7c:4d:c7:85:1e:4f:39:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 00:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5739c33c6008b54e18987984e2a6ee1b5327424b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ce:d1:1e:3c:61:f0:c4:e1:56:a3:ea:c9:03:
af:59:71:9b:af:ed:72:e9:2a:f7:7a:a7:0d:cc:9e:
d6:47:32:f5:77:50:f3:ae:33:ba:49:62:5a:7b:28:
0c:bf:7d:6a:06:7b:da:23:63:3a:47:01:bd:c2:58:
7a:89:1c:4a:1f:27:c8:c6:fd:2a:21:0c:f0:e3:70:
54:b7:60:a3:4f:8f:d9:e7:c1:45:2a:b9:e2:42:aa:
f1:92:19:87:99:33:89:14:32:c8:bb:ab:8b:2a:16:
39:64:97:be:ce:0c:35:71:ce:c8:a7:e8:a0:e7:85:
e9:9a:89:e4:1c:e8:89:dc:2b:d3:16:8e:73:f2:19:
52:38:cb:9b:e8:92:21:5c:a4:c7:9a:1e:f2:09:6c:
d1:cf:45:c1:c2:c8:83:5b:3e:0e:cf:9a:67:db:ca:
04:59:f5:4f:bb:bb:05:fd:63:8a:1b:14:6b:0e:36:
58:e8:22:b2:d7:31:62:01:13:b5:d1:93:86:89:9b:
1d:f2:b0:bf:f2:91:ee:17:23:bd:e8:19:8b:53:01:
81:d1:6d:e7:31:ba:6e:3e:0c:eb:0d:92:c5:bc:56:
74:fb:35:46:ec:ed:fa:a1:23:2f:21:92:5d:23:14:
05:77:7a:54:c3:8b:1e:02:c2:f1:5a:09:20:a9:59:
cd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:39:C3:3C:60:08:B5:4E:18:98:79:84:E2:A6:EE:1B:53:27:42:4B
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/VznDPGAItU4YmHmE4qbuG1MnQks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.154.225.0/24
213.16.41.0/24
213.91.189.0/24
Signature Algorithm: sha256WithRSAEncryption
66:51:d2:06:5f:dc:df:5a:97:a4:01:3a:58:6e:55:ff:d5:e6:
1b:82:27:60:f9:dd:8e:e8:e5:84:7c:77:2f:df:90:03:c5:ab:
3a:e3:ac:4c:82:79:b2:87:f8:a6:f4:82:7f:e3:a4:7b:98:f0:
2b:c5:78:4d:16:70:ba:64:cd:74:c8:b0:fb:56:18:d2:ce:a9:
b3:ce:a9:63:5d:a0:9f:18:3e:68:09:60:ae:df:ac:e4:75:f7:
44:b0:12:cb:40:6b:a9:96:57:b3:1d:d2:eb:63:ef:de:1b:73:
0d:48:b5:84:c5:31:f2:5f:5b:db:45:fa:37:dc:97:cc:50:8a:
c6:44:f7:8e:29:2b:25:49:9c:e9:c1:70:ba:b5:f9:91:9e:5f:
92:16:a9:96:27:d2:c3:92:8a:f6:74:f8:21:cd:68:7f:53:3d:
0b:0c:9a:d8:1d:55:63:55:97:3a:f7:50:4c:6f:37:98:f0:8b:
f5:02:fc:f7:00:60:44:ea:cc:c4:bb:51:b1:87:a8:47:81:3c:
bf:f8:8d:04:c3:1f:e7:d1:2c:63:59:6b:5d:e6:00:55:bb:5d:
2c:7e:ee:78:7a:20:49:91:ae:c8:27:09:9b:dc:4a:40:2d:b2:
c8:22:fe:8e:02:d5:ca:da:94:72:eb:e8:f3:d1:01:f5:39:94:
e9:eb:0c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 11:03:52 2024 by rpki-client on console-ams.rpki-client.org