Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/VSGpnBd16uxBMxKMHFUULgNBXjA.roa
File: VSGpnBd16uxBMxKMHFUULgNBXjA.roa (raw, json)
Hash identifier: oA9r4+NP07hC1qDrKePYkNGdNIoaWz28lyxjZN2YsBw=
Subject key identifier: 55:21:A9:9C:17:75:EA:EC:41:33:12:8C:1C:55:14:2E:03:41:5E:30
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC802F8185910DBCDA4556F1C2DC178D8
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/VSGpnBd16uxBMxKMHFUULgNBXjA.roa
Signing time: Tue 02 Jan 2024 02:31:26 +0000
ROA not before: Tue 02 Jan 2024 02:31:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61102
IP address blocks: 193.182.144.0/24 maxlen: 24
193.182.145.0/24 maxlen: 24
192.71.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:f8:18:59:10:db:cd:a4:55:6f:1c:2d:c1:78:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5521a99c1775eaec4133128c1c55142e03415e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f6:01:3d:4f:ac:47:90:15:f5:14:85:4f:f3:
9c:18:df:6d:f3:91:4b:83:7d:37:9b:4e:e0:c0:cc:
86:a3:77:52:9a:d6:42:1c:f3:8d:de:7a:0a:25:04:
ae:5b:06:a8:0d:67:eb:05:ae:ce:75:e0:25:6d:7b:
0f:f7:f8:c4:7e:ee:2d:17:af:f2:7e:44:f6:3e:72:
e2:a7:ce:2d:25:fd:f7:7a:94:9e:6d:60:42:1c:73:
52:68:96:62:19:21:98:c0:2a:a0:12:8a:2b:2f:b5:
92:f5:22:94:55:6a:bd:38:d6:2d:0c:7e:2e:c7:f3:
b5:84:8c:b1:50:92:31:5b:85:a7:89:29:4b:4a:10:
bd:9c:ef:12:b0:9f:b2:db:66:90:18:0d:3e:39:6f:
99:04:8f:a8:8f:bd:c7:c5:b8:88:cc:08:02:f3:2d:
60:4b:4f:0e:84:fb:d5:dd:bb:f5:c8:09:77:7e:ca:
85:ab:4b:72:ed:e7:a4:9e:48:16:a4:cc:73:68:ef:
d7:83:64:10:d0:2e:b1:ba:b5:01:e6:1a:ec:20:4c:
8c:80:5c:61:bb:17:c7:01:27:ce:1b:9d:2b:c9:b3:
ef:d2:0c:19:19:41:7a:97:e3:38:6a:7f:a1:a6:89:
d8:e7:87:f7:03:c5:5a:9e:d1:83:be:4e:95:54:db:
88:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:21:A9:9C:17:75:EA:EC:41:33:12:8C:1C:55:14:2E:03:41:5E:30
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/VSGpnBd16uxBMxKMHFUULgNBXjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.27.0/24
193.182.144.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:c8:d2:30:0c:a9:84:e4:e3:d7:96:bc:f7:d4:b9:15:0f:87:
49:a3:92:20:93:73:26:54:4a:53:e3:2e:5e:87:68:b8:38:46:
d4:4b:1f:25:69:9b:26:f6:71:3f:0c:6a:6d:50:c5:0a:6e:08:
f5:3b:19:d3:9e:07:0d:aa:22:6d:1d:8e:df:62:8c:bb:20:48:
ce:a1:57:e8:e8:ea:38:e9:c3:d6:02:ac:47:8f:c0:c4:b4:dc:
52:39:13:0d:8b:2d:39:8f:7b:e5:d9:eb:bb:c7:55:37:3e:4f:
e2:e7:1b:25:d6:64:ea:2b:45:16:f8:80:b1:9c:96:77:26:1c:
50:d8:30:31:cf:6f:c0:09:94:8a:f9:80:0e:6b:9c:cf:a1:20:
8c:92:ad:90:13:30:bd:e3:f7:26:33:df:23:a7:50:ac:86:ed:
72:a2:3b:26:31:49:4e:18:a9:52:eb:84:1c:09:bb:3c:45:8e:
4e:a6:35:89:e0:b6:c8:6b:d5:64:cc:ec:f4:af:bd:2b:0c:13:
9c:f4:be:39:e4:b9:06:02:a6:5e:cf:ef:d3:7b:37:c1:a6:5e:
47:5b:b2:5e:5f:08:e6:ab:d5:9e:70:ed:10:7a:4e:5f:fc:06:
b3:8a:2a:50:98:7b:3b:0a:30:49:e4:8a:7a:bd:ca:4e:14:05:
ba:57:15:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 17:25:40 2024 by rpki-client on console-ams.rpki-client.org