Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/VHxdsyvirmVSHnbK7kpWjAe4OI0.roa
File: VHxdsyvirmVSHnbK7kpWjAe4OI0.roa (raw, json)
Hash identifier: h757gk8dOsI32lPMO5qVCFB52N4KalEwPzd8L8JjtuA=
Subject key identifier: 54:7C:5D:B3:2B:E2:AE:65:52:1E:76:CA:EE:4A:56:8C:07:B8:38:8D
Certificate issuer: /CN=46369dc5da5e4e70c735b235704d9ebc58259349
Certificate serial: 018CC8DE7659315AF2F468BD913BE448B78F
Authority key identifier: 46:36:9D:C5:DA:5E:4E:70:C7:35:B2:35:70:4D:9E:BC:58:25:93:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/VHxdsyvirmVSHnbK7kpWjAe4OI0.roa
Signing time: Tue 02 Jan 2024 06:31:11 +0000
ROA not before: Tue 02 Jan 2024 06:31:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3332
IP address blocks: 193.203.196.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 09:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:76:59:31:5a:f2:f4:68:bd:91:3b:e4:48:b7:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46369dc5da5e4e70c735b235704d9ebc58259349
Validity
Not Before: Jan 2 06:31:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=547c5db32be2ae65521e76caee4a568c07b8388d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d8:ea:bd:5f:0a:3e:68:e0:bb:fa:86:91:8e:
31:25:f8:0a:69:9c:56:10:2d:35:48:64:05:d1:33:
6e:db:c5:cb:d4:0f:cf:fc:98:11:8d:fd:4f:f5:4f:
2e:77:63:94:51:87:6f:78:78:24:c1:54:96:67:7f:
83:84:2f:86:71:4f:6d:9b:15:c6:d2:d3:22:b2:cf:
87:d8:8b:b2:13:f0:78:d9:e2:6f:ee:a0:99:02:76:
97:2c:c8:7d:8b:11:3a:5c:14:eb:3c:41:1d:7d:d9:
f1:8c:3d:d4:3c:d5:49:76:62:7b:09:9b:9e:55:25:
d3:d6:9b:0c:c9:7c:a4:be:4d:e7:8f:d7:d7:c3:6b:
f5:0d:b1:fc:dd:0e:22:01:24:be:3c:ea:4f:81:4c:
11:3b:79:bd:ba:e7:1d:31:b4:1b:95:ea:fe:10:0b:
43:57:e7:5d:ed:a2:ac:ea:4e:cb:92:cd:1f:5c:05:
b8:a0:38:04:2d:e4:3d:11:c4:6b:ec:56:53:b7:e9:
89:06:7d:77:73:b0:c6:22:6f:09:c7:58:5a:71:8c:
76:88:1f:bb:22:03:bf:77:a0:fa:0f:7a:f4:df:b6:
fc:77:05:c1:52:e1:6e:56:31:0e:8e:c8:4e:ea:62:
50:90:76:2b:0f:69:39:ed:d8:53:16:75:19:07:ce:
4f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:7C:5D:B3:2B:E2:AE:65:52:1E:76:CA:EE:4A:56:8C:07:B8:38:8D
X509v3 Authority Key Identifier:
keyid:46:36:9D:C5:DA:5E:4E:70:C7:35:B2:35:70:4D:9E:BC:58:25:93:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/VHxdsyvirmVSHnbK7kpWjAe4OI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.196.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:3c:13:05:d7:32:24:71:9e:79:d7:05:bd:2a:2c:6e:cd:6a:
a3:90:a2:d1:23:40:e5:69:e2:f5:fd:26:b0:27:06:ae:53:8e:
ef:f1:7e:7f:24:a3:e7:54:82:df:80:a2:18:9a:c2:33:60:91:
d2:5f:d6:67:db:86:39:73:87:f5:d7:34:6c:30:9b:15:57:cd:
37:5f:e8:ad:fb:59:60:12:be:7c:03:c4:96:19:d9:8a:2d:65:
08:83:5f:0c:21:24:68:9e:b3:9b:57:da:31:ed:13:b7:6d:cd:
e9:c4:7f:82:2d:08:48:eb:37:ec:a2:9f:48:c3:df:de:3f:9d:
51:cf:5e:0d:54:43:97:7d:56:f5:e5:c7:56:45:42:2d:e6:10:
75:68:d2:9e:56:58:1a:c5:8e:16:e8:fd:c5:63:ee:41:a6:a3:
7b:e2:89:41:c7:5d:80:a5:91:3f:00:89:e6:44:0f:52:f9:ad:
81:84:b0:f8:a2:af:7d:0c:65:82:ba:38:c2:0f:86:66:8c:c3:
13:74:49:28:d2:9d:c0:02:d1:ce:a5:72:ac:40:e3:ba:e4:94:
53:16:42:6e:9b:41:f5:52:a3:2a:e6:ef:e6:e1:a3:31:90:7e:
5b:d0:ba:97:c5:7c:03:88:7a:4f:e9:5a:3c:33:a7:a5:61:68:
c9:bf:51:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 17:50:38 2024 by rpki-client on console-ams.rpki-client.org