Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/VBztEHNOJu9i_9mirhkNTqtlMSc.roa
File: VBztEHNOJu9i_9mirhkNTqtlMSc.roa (raw, json)
Hash identifier: C9riKjV7XKb/QKs4rXbSt2NIvRUT3MF5HPB+dW23pDc=
Subject key identifier: 54:1C:ED:10:73:4E:26:EF:62:FF:D9:A2:AE:19:0D:4E:AB:65:31:27
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018CC3B6C0A9E06EDA4F6F3FBDD4F810344F
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/VBztEHNOJu9i_9mirhkNTqtlMSc.roa
Signing time: Mon 01 Jan 2024 06:29:43 +0000
ROA not before: Mon 01 Jan 2024 06:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207236
IP address blocks: 88.151.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:c0:a9:e0:6e:da:4f:6f:3f:bd:d4:f8:10:34:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 1 06:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=541ced10734e26ef62ffd9a2ae190d4eab653127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5c:39:19:76:14:65:4e:4b:ae:16:4e:71:2e:
02:05:11:4f:10:96:9b:34:4b:14:a5:52:cc:96:64:
ed:77:41:fd:b6:3a:06:bb:df:09:d0:b6:01:ae:5a:
37:94:46:56:0b:79:d8:54:e6:d3:fe:7e:44:31:ad:
a0:49:5c:47:ea:e1:8d:0c:68:c8:3d:13:de:37:c6:
ba:60:c2:b9:07:9b:fd:fc:a2:6c:07:11:5c:8f:bd:
c9:78:93:fc:cc:88:ac:db:3f:2e:a9:c1:d8:71:0a:
9c:59:0f:63:94:f2:76:44:77:da:92:ba:74:8f:a0:
71:a8:bb:99:2b:5c:c4:e5:50:1a:1f:62:36:6e:13:
c4:54:63:c2:13:4f:4f:a7:98:06:4d:4a:30:c0:4e:
62:ba:fb:00:fa:41:96:d5:3a:8e:5a:8f:25:c3:20:
73:61:17:31:3f:a3:f9:ba:1c:17:92:8c:29:b9:36:
6f:60:d5:ba:97:fd:d0:96:df:89:11:a5:8d:60:fa:
a1:d3:2d:a4:9b:aa:1b:4e:a0:cc:68:e4:e7:58:c5:
8f:aa:1f:69:da:b4:5c:0a:0a:90:18:b5:37:55:1b:
4b:79:09:92:64:5c:81:09:6d:7c:05:fe:6f:01:8b:
01:78:95:14:e7:51:75:71:11:1a:32:fb:c4:3a:5b:
7d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:1C:ED:10:73:4E:26:EF:62:FF:D9:A2:AE:19:0D:4E:AB:65:31:27
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/VBztEHNOJu9i_9mirhkNTqtlMSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.60.0/24
Signature Algorithm: sha256WithRSAEncryption
31:f7:0c:9c:5f:6d:08:fb:4f:31:95:06:74:35:16:8d:51:04:
6b:68:5e:25:b4:83:84:f2:44:db:5e:6f:03:cf:a3:97:67:50:
33:aa:bb:8a:9b:40:58:19:4e:75:b8:41:69:4d:ea:a8:c2:b1:
9f:45:78:fc:ee:1e:bb:5c:7b:45:20:fa:58:c8:7a:e5:ed:00:
c4:d7:b0:dc:9a:66:09:a1:39:fb:98:3c:7c:e7:fa:4b:d7:9d:
f1:3a:38:86:d7:79:99:28:53:2f:6b:0a:42:58:f7:e5:be:78:
ed:a2:0c:0c:27:cd:2b:5b:bb:82:b8:df:4a:b6:73:54:4b:ad:
43:7b:f3:1d:c1:b4:c5:48:2f:d4:cb:ba:05:59:44:05:cb:d4:
e9:76:23:0c:97:8c:a6:36:41:d5:02:04:81:be:88:34:d6:90:
1b:5f:ed:72:19:ec:3f:20:7d:d3:aa:21:b3:24:2a:8e:c0:2d:
b2:f4:43:fe:f9:7e:d5:54:33:29:1b:4a:9c:f8:22:ef:fd:91:
18:3a:44:dd:8d:d6:b9:19:eb:8d:e9:9f:eb:dd:7b:2a:ac:9c:
df:58:96:1f:78:7f:d5:aa:12:a0:28:9c:cb:f7:cb:b6:0d:79:
7b:23:48:52:c3:6a:e1:55:6f:47:3b:b2:1e:20:81:8b:d7:07:
e0:38:cc:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:50:17 2024 by rpki-client on console-ams.rpki-client.org