Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Vzgy6wBuWhX_vNldFLC3FcdfEIQ.roa
File: Vzgy6wBuWhX_vNldFLC3FcdfEIQ.roa (raw, json)
Hash identifier: Q5Kc0YOh4TikzoSbaRENDb8OsLz9imbz6xYie8QV2ME=
Subject key identifier: 57:38:32:EB:00:6E:5A:15:FF:BC:D9:5D:14:B0:B7:15:C7:5F:10:84
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018CC56DE62D45BA08CFE86DFB5FBECB1C6A
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Vzgy6wBuWhX_vNldFLC3FcdfEIQ.roa
Signing time: Mon 01 Jan 2024 14:29:22 +0000
ROA not before: Mon 01 Jan 2024 14:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35000
IP address blocks: 195.144.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:e6:2d:45:ba:08:cf:e8:6d:fb:5f:be:cb:1c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 14:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=573832eb006e5a15ffbcd95d14b0b715c75f1084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:67:36:34:47:b4:84:63:5b:4d:e4:e3:5f:a2:
d4:6a:7b:de:78:dd:c7:6a:3c:7a:d5:0f:9c:c3:a7:
e6:2e:bb:83:1c:0b:1c:14:7d:36:77:da:7b:c3:a1:
0f:c6:7c:1a:fe:12:5e:b0:cc:7b:88:f6:4f:d7:9c:
0f:ec:b5:02:78:76:12:37:dc:f9:e2:50:8c:62:b6:
4c:ab:d5:55:c6:13:a4:9d:b5:65:08:ab:9f:2c:ec:
32:e5:0b:82:2f:22:ad:55:da:30:a5:ce:5e:a2:35:
26:68:a6:d0:e2:e7:c8:ff:60:3d:b7:fc:f5:b1:f8:
0e:04:2b:c3:62:c6:b6:0a:de:ac:9c:12:a7:16:d0:
ca:d3:e6:2f:d3:8f:c3:11:95:d5:ab:d2:92:f1:12:
dc:83:a0:aa:42:e1:e5:ba:e2:a6:28:e5:19:98:4a:
50:4c:c9:ae:80:b9:47:aa:e6:d7:a1:ba:3e:5e:6f:
9c:09:c0:a0:38:ba:77:08:c9:3a:71:17:18:35:d5:
73:f6:59:15:f1:27:75:c6:94:5a:b7:bc:cb:fe:a9:
61:28:a6:e4:6f:8c:d7:b0:80:d0:1c:ab:ba:9e:68:
78:8f:81:3e:c7:8d:e9:73:c6:05:30:01:fc:b9:6b:
be:3e:41:4b:56:ac:a4:52:43:76:45:10:86:75:11:
c4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:38:32:EB:00:6E:5A:15:FF:BC:D9:5D:14:B0:B7:15:C7:5F:10:84
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Vzgy6wBuWhX_vNldFLC3FcdfEIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.144.243.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:fe:9e:54:11:2e:e7:8c:4c:fd:d5:8e:a1:43:a2:11:63:09:
72:26:58:ce:f2:29:be:de:46:01:59:de:da:a2:8f:23:10:2d:
fe:16:71:95:c1:20:44:d1:20:33:28:e3:63:43:1e:c6:10:30:
16:73:77:81:b7:29:86:da:54:4e:b6:70:d7:0d:be:5b:26:2d:
fa:9c:d3:f8:81:85:da:35:8f:67:cf:08:4e:d0:5e:a7:a0:a1:
58:36:c5:1f:a4:22:f5:cd:0e:5d:3b:f2:6c:f2:74:49:db:d4:
f6:f0:e9:01:96:11:cb:28:47:9a:2a:06:f2:fd:01:24:f7:40:
8c:14:ed:83:c9:b5:27:68:1c:64:de:46:b7:0b:0f:e2:72:10:
3a:3c:f1:f4:68:5c:77:02:c4:d3:60:d2:bc:5d:c0:2c:df:47:
8d:91:6f:72:1d:3e:f6:66:0f:84:16:ac:bd:e9:a1:f1:12:65:
6d:a2:37:86:31:2e:40:03:ea:aa:ad:68:f0:2e:09:f3:7a:33:
f4:1c:60:83:35:1b:02:2d:33:04:dc:0c:7a:8d:c0:b4:dd:39:
cd:30:0d:ec:6f:d6:4f:90:bd:62:e7:6a:1d:49:b4:22:65:35:
b5:10:1f:b6:27:1c:e0:46:75:ff:bb:22:86:99:d0:16:3a:6d:
9c:5c:18:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:14:07 2024 by rpki-client on console-ams.rpki-client.org