Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/vey_ONkZ3aVOyxco4MAJ-NX9Ceo.roa
File: vey_ONkZ3aVOyxco4MAJ-NX9Ceo.roa (raw, json)
Hash identifier: CqBK9firX/o3pGHCgxpxx2dTRc+ylzfx5XNlHdDEdjA=
Subject key identifier: BD:EC:BF:38:D9:19:DD:A5:4E:CB:17:28:E0:C0:09:F8:D5:FD:09:EA
Certificate issuer: /CN=59fad388bea71da2f43f39a45e10141d6f29c428
Certificate serial: 018CC64B2742474613DD7F910D744E1DF47C
Authority key identifier: 59:FA:D3:88:BE:A7:1D:A2:F4:3F:39:A4:5E:10:14:1D:6F:29:C4:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfrTiL6nHaL0PzmkXhAUHW8pxCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/vey_ONkZ3aVOyxco4MAJ-NX9Ceo.roa
Signing time: Mon 01 Jan 2024 18:31:03 +0000
ROA not before: Mon 01 Jan 2024 18:31:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21171
IP address blocks: 152.90.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WfrTiL6nHaL0PzmkXhAUHW8pxCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:27:42:47:46:13:dd:7f:91:0d:74:4e:1d:f4:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59fad388bea71da2f43f39a45e10141d6f29c428
Validity
Not Before: Jan 1 18:31:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bdecbf38d919dda54ecb1728e0c009f8d5fd09ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:21:d8:62:7f:77:55:e3:e8:c2:68:8e:8a:fc:
52:e7:31:6e:b7:d9:a7:2e:d0:f2:4f:10:c2:85:a8:
c1:c2:1b:1f:e8:97:34:b8:03:3b:5d:bb:45:2a:40:
78:3b:7c:47:52:23:85:00:b6:41:5f:38:33:71:b2:
1d:2d:bd:9f:15:33:81:b7:6d:80:d8:48:d8:88:7d:
7f:e6:a5:e8:e2:33:de:fe:25:61:43:42:12:27:2d:
54:ae:dd:e5:3c:de:2e:96:24:25:9c:21:d7:a0:ba:
4d:bc:50:33:ac:7f:84:e3:23:24:7c:82:b6:2b:a8:
82:4c:67:fe:1e:f4:28:58:97:fc:fc:d2:c4:e8:f8:
bb:7a:5e:44:88:0c:34:92:b6:29:7f:5c:9e:a0:97:
19:0c:7f:85:c1:76:06:a4:18:08:bc:b1:05:7b:62:
d0:52:f7:69:b6:e3:36:08:ce:55:d5:00:8a:da:04:
46:5a:c6:2b:11:56:ad:32:74:44:a8:d8:f3:80:eb:
7c:1f:23:68:78:37:87:c2:53:51:14:76:31:8f:90:
da:d9:9f:c2:26:52:8d:f4:67:71:66:5b:23:09:83:
30:ed:1b:0b:37:ae:bd:6a:eb:c4:a2:0d:7e:29:7e:
ea:b5:83:6a:b3:58:7b:ea:96:95:41:93:cf:67:df:
80:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:EC:BF:38:D9:19:DD:A5:4E:CB:17:28:E0:C0:09:F8:D5:FD:09:EA
X509v3 Authority Key Identifier:
keyid:59:FA:D3:88:BE:A7:1D:A2:F4:3F:39:A4:5E:10:14:1D:6F:29:C4:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfrTiL6nHaL0PzmkXhAUHW8pxCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/vey_ONkZ3aVOyxco4MAJ-NX9Ceo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.90.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2d:68:00:d7:3a:5a:e3:a5:b7:89:dd:e7:76:ae:4c:13:d5:68:
70:b7:46:72:8a:5d:37:fa:7a:d1:32:be:e2:56:cc:2b:9a:bf:
b7:6e:3d:40:4b:85:03:d0:00:7f:03:34:d2:77:fb:95:43:4e:
d1:34:a7:1f:42:55:f5:2c:0e:92:04:31:ab:67:35:40:59:e6:
4c:3d:0a:8a:9f:cc:92:11:27:86:87:1e:7e:b2:22:ef:d2:9c:
91:de:37:82:4e:5b:96:e0:6d:dd:ab:ab:30:2e:11:ae:9f:c9:
f3:74:9a:2b:b9:12:a5:d9:36:e9:e9:48:4c:83:24:1a:3b:58:
35:69:69:21:4e:de:fc:0a:dd:f4:59:a1:bd:8a:e2:cb:98:d9:
3b:b1:06:f8:5d:81:ee:33:af:d3:3d:5f:78:c6:aa:a6:39:04:
9d:98:e4:6f:0a:fe:41:ed:7d:8b:d6:c8:c1:51:0f:1d:7a:f9:
58:ed:f4:be:f4:0c:e0:ad:32:db:86:2c:3e:8e:f3:6a:8f:d3:
0c:3e:46:bd:9d:d7:34:0f:f6:96:98:b1:22:6d:3c:5e:7c:c6:
15:23:aa:f9:be:60:09:44:7b:57:5e:d1:59:e1:2c:1b:d2:cf:
39:5d:db:d5:aa:f8:98:e3:62:97:9c:d7:e6:ab:ca:55:1b:31:
e6:6d:31:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:36:55 2024 by rpki-client on console-ams.rpki-client.org