Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/vi0iJHb6a-rPJ91qysH7La4kajM.roa
File: vi0iJHb6a-rPJ91qysH7La4kajM.roa (raw, json)
Hash identifier: L2H1qNlgRY/usr7Hy+u7Gj+g1C9o+7tS8W3sPfJe8Ts=
Subject key identifier: BE:2D:22:24:76:FA:6B:EA:CF:27:DD:6A:CA:C1:FB:2D:AE:24:6A:33
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018CC501126581CB7C88A239E1D8C5355325
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/vi0iJHb6a-rPJ91qysH7La4kajM.roa
Signing time: Mon 01 Jan 2024 12:30:30 +0000
ROA not before: Mon 01 Jan 2024 12:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47392
IP address blocks: 93.115.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 01:03:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:12:65:81:cb:7c:88:a2:39:e1:d8:c5:35:53:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 12:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be2d222476fa6beacf27dd6acac1fb2dae246a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:3b:45:29:3a:80:5e:1f:9f:a9:f3:1b:b7:18:
b9:96:28:54:d7:7d:76:73:7c:a9:31:16:a3:c8:a0:
df:bd:8a:e1:7a:59:89:31:b5:54:37:fd:97:36:0a:
be:67:4d:d4:94:61:a4:99:90:69:3b:92:c0:79:62:
a0:e0:66:94:9b:e9:38:b6:88:39:bc:1c:d4:44:36:
a7:e5:54:30:74:93:e7:60:41:ad:1a:43:b9:71:82:
50:70:b4:1e:90:20:da:c6:39:a4:74:0a:75:f0:b7:
37:99:a9:aa:98:42:20:32:e2:f7:a0:b4:b0:4c:68:
02:01:a8:79:d3:8e:c2:03:f5:6a:0b:1b:55:a4:4f:
b1:6d:7d:02:aa:e7:ce:08:95:3a:bf:75:b8:05:07:
9d:b2:ba:3e:9e:f3:bd:bc:24:a2:9c:08:52:33:47:
7c:4c:b1:8e:d7:98:49:97:b5:53:3f:c5:a6:5f:91:
e5:75:39:b4:b5:78:9a:76:e5:97:23:c9:62:d0:19:
66:30:5b:bd:75:66:cc:13:6f:a4:08:77:55:01:f1:
ed:e8:7e:e0:80:98:32:76:32:91:3a:24:69:60:e8:
8a:5e:4a:5d:4e:22:d7:20:84:6f:4d:bc:9b:e3:d9:
74:97:5a:d1:e7:51:22:36:08:1c:57:38:fd:67:25:
03:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:2D:22:24:76:FA:6B:EA:CF:27:DD:6A:CA:C1:FB:2D:AE:24:6A:33
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/vi0iJHb6a-rPJ91qysH7La4kajM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.255.0/24
Signature Algorithm: sha256WithRSAEncryption
98:58:15:59:48:cc:bc:88:6a:8d:73:28:d7:be:e7:40:d9:62:
d5:e7:96:00:09:6f:59:d8:2f:0a:4e:d5:72:27:f2:20:e7:a5:
a7:d9:48:00:2f:9d:6b:92:e5:55:00:51:e0:b7:eb:68:d2:bf:
9b:5a:71:1a:3a:12:90:f4:9f:a1:52:3c:7e:c6:dc:ef:c8:7c:
fa:56:af:98:0b:53:5e:0e:f5:6e:ad:b1:9c:b4:b6:83:e5:e9:
51:83:34:94:2b:5c:73:d6:f5:c5:b3:1c:cd:d7:fd:48:fb:d2:
c7:d0:a5:e5:87:5c:90:21:75:30:39:5d:73:5c:ce:bd:a6:27:
fc:8f:d2:e9:41:4d:f9:87:2d:c1:dd:56:41:51:c2:ad:79:27:
7b:ab:8d:9e:92:b2:e6:ae:49:2c:3b:7c:d0:6d:ae:84:5d:e0:
eb:c5:2e:d3:04:e6:a9:26:5e:e4:a9:b3:3c:7b:58:be:3d:43:
3e:b3:68:2f:38:cb:b7:64:f4:58:08:7c:84:c4:d3:0d:1a:36:
01:19:b7:e5:86:a2:fb:aa:08:94:d6:0e:84:59:48:f6:d3:0b:
8a:23:dc:2f:e7:51:8c:44:62:29:13:c9:76:fc:77:6c:1c:4d:
f5:c0:bd:d6:6e:84:56:83:a4:f0:62:95:01:8e:42:8d:62:47:
3e:bd:30:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 04:43:33 2024 by rpki-client on console-ams.rpki-client.org