Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ViNX3_WFvP5NzWsJ_n7SMfCfQaQ.roa
File: ViNX3_WFvP5NzWsJ_n7SMfCfQaQ.roa (raw, json)
Hash identifier: e7/XsqNOGSzlyHCcuORcwd4j3rewA4zwnKCKxJ027A0=
Subject key identifier: 56:23:57:DF:F5:85:BC:FE:4D:CD:6B:09:FE:7E:D2:31:F0:9F:41:A4
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018D508796C2A476B3407518F12D1AB914E8
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ViNX3_WFvP5NzWsJ_n7SMfCfQaQ.roa
Signing time: Sun 28 Jan 2024 14:44:39 +0000
ROA not before: Sun 28 Jan 2024 14:44:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 135073
IP address blocks: 2a0e:2240:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:50:87:96:c2:a4:76:b3:40:75:18:f1:2d:1a:b9:14:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 28 14:44:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=562357dff585bcfe4dcd6b09fe7ed231f09f41a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:58:02:16:b2:de:3c:ae:29:61:c8:4a:94:ba:
15:77:a9:24:9e:d1:83:81:eb:ee:bc:a6:76:a5:dc:
75:81:fb:61:b0:f4:db:b3:30:91:f3:2c:a7:63:b8:
5f:06:20:78:61:00:5a:1e:a3:f5:25:68:fa:85:75:
d5:5f:47:92:40:e3:2f:4f:2d:8c:c7:42:7c:21:64:
ce:a8:f1:54:18:12:30:9c:73:f6:7f:d6:1f:50:1b:
21:3c:2b:07:49:51:e8:b9:58:aa:d0:52:2e:d2:41:
39:f0:f8:53:aa:d1:a3:88:e7:15:17:3e:b6:34:3d:
22:7d:92:1b:08:fa:02:8e:ad:9c:ac:42:81:9b:c4:
c9:ef:60:07:86:47:a5:da:25:bf:0e:9d:ae:d5:71:
29:13:78:83:47:ef:a3:c3:f7:65:81:7b:1a:a4:8e:
e3:15:c6:39:63:85:d4:c1:af:45:bf:61:87:43:3e:
c6:1b:f2:5d:b5:df:2f:42:6e:7d:96:a0:02:22:92:
dd:0d:50:dc:de:93:98:8f:f5:f8:75:c5:8c:04:e5:
07:71:64:12:d5:2a:dc:94:d6:1a:62:24:c1:46:ac:
1c:cf:07:4e:45:32:fe:19:4b:27:31:12:be:35:32:
e9:a9:24:f0:83:45:ce:bd:ba:a5:13:3d:80:8d:e0:
ad:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:23:57:DF:F5:85:BC:FE:4D:CD:6B:09:FE:7E:D2:31:F0:9F:41:A4
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ViNX3_WFvP5NzWsJ_n7SMfCfQaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:2240:1::/48
Signature Algorithm: sha256WithRSAEncryption
6a:e2:ef:f0:f9:33:6f:74:9a:d7:06:97:28:15:b9:34:39:5f:
2b:85:52:df:42:23:32:90:18:6f:d0:e8:ad:2e:53:36:4a:63:
6f:64:f5:65:14:70:e6:e5:49:c6:ae:40:23:9f:be:d7:59:a1:
34:05:f7:18:7d:a3:31:78:f7:81:eb:ef:bc:dd:ad:c2:d1:76:
f6:69:ea:52:bb:b3:80:5f:1e:0e:09:1d:a7:11:dc:c5:62:63:
70:ae:2b:f8:36:03:bc:35:67:0c:da:ae:80:f6:c8:69:25:67:
25:f3:c6:d5:e7:5d:3d:99:6d:98:ee:01:5a:a2:f1:1f:77:84:
2b:9c:11:b1:d3:c9:3b:b9:82:ea:55:d5:f4:5c:0b:78:61:37:
6e:60:48:11:9d:17:57:b5:00:32:01:5c:91:03:e5:28:de:18:
6d:a0:f8:1c:9d:60:cd:34:d2:2f:77:3d:d9:c8:5e:0f:f1:e4:
5b:71:6e:35:14:b8:71:2f:4d:c4:89:6c:71:3b:f2:e2:98:39:
73:2d:9f:8c:ab:61:0a:f9:01:c6:9b:05:d1:37:c2:74:4f:a3:
0d:65:67:d1:07:28:8b:9a:13:28:f0:21:8c:d1:93:3d:84:9d:
9f:c3:39:24:50:79:25:64:29:ab:63:f6:d4:93:36:f8:47:ec:
b2:f5:1b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:56:30 2024 by rpki-client on console-fra.rpki-client.org