Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/12e9a0-9c58-47a2-baf1-38d33e6697fb/1/VdpU78xCQixOZA3Tl4FO-ihowDU.roa
File: VdpU78xCQixOZA3Tl4FO-ihowDU.roa (raw, json)
Hash identifier: F8j2v4LG0IelIqBfrQKiflCNRrK83JTdtSceIedHB+c=
Subject key identifier: 55:DA:54:EF:CC:42:42:2C:4E:64:0D:D3:97:81:4E:FA:28:68:C0:35
Certificate issuer: /CN=a8cee2f1ad419f7270a353840d0a4b83525cab5e
Certificate serial: 018CC7258F97ED2982455213CFCE27A4E2E3
Authority key identifier: A8:CE:E2:F1:AD:41:9F:72:70:A3:53:84:0D:0A:4B:83:52:5C:AB:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qM7i8a1Bn3Jwo1OEDQpLg1Jcq14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/12e9a0-9c58-47a2-baf1-38d33e6697fb/1/VdpU78xCQixOZA3Tl4FO-ihowDU.roa
Signing time: Mon 01 Jan 2024 22:29:36 +0000
ROA not before: Mon 01 Jan 2024 22:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24904
IP address blocks: 2.59.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/12e9a0-9c58-47a2-baf1-38d33e6697fb/1/qM7i8a1Bn3Jwo1OEDQpLg1Jcq14.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/12e9a0-9c58-47a2-baf1-38d33e6697fb/1/qM7i8a1Bn3Jwo1OEDQpLg1Jcq14.mft
rsync://rpki.ripe.net/repository/DEFAULT/qM7i8a1Bn3Jwo1OEDQpLg1Jcq14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:8f:97:ed:29:82:45:52:13:cf:ce:27:a4:e2:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8cee2f1ad419f7270a353840d0a4b83525cab5e
Validity
Not Before: Jan 1 22:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55da54efcc42422c4e640dd397814efa2868c035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fe:30:18:f9:38:22:59:48:91:1b:6f:e6:fb:
7b:99:2d:71:23:d7:81:64:a9:c9:ff:d6:c2:85:7a:
a1:bf:cd:62:10:86:04:d4:11:0d:ee:d0:59:d6:82:
30:af:98:25:f0:fd:eb:22:e9:4b:dc:89:80:a4:aa:
f7:3c:36:9c:08:ac:94:e9:be:7d:8c:08:1e:6a:e4:
4f:ce:05:c2:1a:72:46:1b:8d:89:22:da:2e:d2:29:
68:99:b8:0d:5b:38:55:20:a0:00:85:da:4d:be:f3:
18:8d:ce:36:fb:f2:54:a9:22:f9:a9:b7:4e:0b:12:
cc:b3:b8:9f:51:ea:a2:57:a3:79:bf:a3:43:93:bb:
5a:b6:06:cf:d1:24:64:c4:43:5f:80:52:54:19:5a:
0f:2e:15:d8:41:49:ee:c3:32:c6:9c:e8:40:a3:3d:
3e:33:a3:6e:17:5f:02:e9:69:b6:28:52:71:41:c9:
c9:97:26:eb:6d:b0:32:06:11:b7:6f:d2:8a:2c:3c:
5c:63:f4:26:2f:31:18:2d:cd:a0:d0:cb:bd:8b:81:
ae:56:3b:50:ff:ff:39:0b:6b:07:f0:3a:06:67:5e:
9c:d4:62:ee:a0:84:0c:d4:d8:c5:15:1f:3e:4e:9b:
b3:93:a7:a0:00:c4:ac:b9:f2:fe:22:ad:ad:b9:fe:
e7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:DA:54:EF:CC:42:42:2C:4E:64:0D:D3:97:81:4E:FA:28:68:C0:35
X509v3 Authority Key Identifier:
keyid:A8:CE:E2:F1:AD:41:9F:72:70:A3:53:84:0D:0A:4B:83:52:5C:AB:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qM7i8a1Bn3Jwo1OEDQpLg1Jcq14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/12e9a0-9c58-47a2-baf1-38d33e6697fb/1/VdpU78xCQixOZA3Tl4FO-ihowDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/12e9a0-9c58-47a2-baf1-38d33e6697fb/1/qM7i8a1Bn3Jwo1OEDQpLg1Jcq14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.236.0/22
Signature Algorithm: sha256WithRSAEncryption
43:95:3a:76:54:87:42:58:53:70:5d:37:ab:b8:f0:6b:45:ae:
7d:7b:97:78:88:1c:da:de:cf:fe:2a:4d:11:ff:cc:bb:2f:6d:
95:2d:1f:d9:ca:cb:62:e2:33:4e:9d:b9:28:ac:fc:c7:2c:b5:
b8:47:0b:2e:83:5c:74:18:fc:8c:a8:53:52:aa:90:17:53:83:
f9:82:77:1b:ba:ed:0b:b3:c4:e8:66:e2:b0:5a:36:57:dd:dc:
12:e7:71:ea:8a:df:0a:2e:71:76:c3:7d:4a:9d:9e:98:1f:15:
58:8a:fd:d1:f2:c3:41:1a:24:d8:c5:9e:c8:93:87:f2:c0:5e:
e5:a0:39:af:8f:ed:fe:58:6c:06:72:94:f0:79:b3:27:e4:b7:
c6:74:18:e8:c9:6a:c9:c4:f0:28:cf:9b:49:83:7b:3e:fb:9f:
f2:b5:d2:84:ce:d4:39:fd:f3:d5:d6:f7:34:be:39:00:a3:31:
49:76:be:91:ea:f7:bf:af:f2:c2:e6:bc:a1:2f:2d:d4:73:fb:
8c:5f:e4:64:8f:bf:f8:c8:ff:f8:0c:71:b1:84:21:0c:26:35:
f3:89:ec:62:7c:ec:83:a3:81:93:ab:27:ba:6b:8e:22:23:63:
41:b6:13:96:bf:49:bf:66:bb:98:96:f8:02:fd:e2:54:b4:c5:
66:31:44:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:55:27 2024 by rpki-client on console-ams.rpki-client.org