Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/VfH-jZ8cOKD7VbgrpYKaCm7sfwg.roa
File: VfH-jZ8cOKD7VbgrpYKaCm7sfwg.roa (raw, json)
Hash identifier: YKAGL5PCKD5l8c8jAf3LNU8r4oZFr4gcsZJNcdEIiLs=
Subject key identifier: 55:F1:FE:8D:9F:1C:38:A0:FB:55:B8:2B:A5:82:9A:0A:6E:EC:7F:08
Certificate issuer: /CN=3545a7200164912041bb931efb1feac123b43a18
Certificate serial: 018CC9BB918ED8A054B5D2E8FACC04ABA6FD
Authority key identifier: 35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/VfH-jZ8cOKD7VbgrpYKaCm7sfwg.roa
Signing time: Tue 02 Jan 2024 10:32:42 +0000
ROA not before: Tue 02 Jan 2024 10:32:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8426
IP address blocks: 5.253.180.0/24 maxlen: 24
2a09:58c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:91:8e:d8:a0:54:b5:d2:e8:fa:cc:04:ab:a6:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3545a7200164912041bb931efb1feac123b43a18
Validity
Not Before: Jan 2 10:32:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55f1fe8d9f1c38a0fb55b82ba5829a0a6eec7f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:84:4a:e9:1d:1b:4f:1a:d2:8a:5e:73:35:81:
f5:03:e1:15:5b:c2:09:c8:fe:c5:f3:57:92:1c:a8:
ab:fc:3f:7e:b9:ef:5e:46:67:78:2d:79:22:99:cf:
0f:03:98:c5:38:23:7b:cf:c7:b5:86:3e:d3:95:7e:
97:42:39:5f:ea:c3:02:03:f9:0a:6f:88:a6:1d:80:
b6:32:f8:f8:ec:7f:de:a3:fc:51:c5:28:1a:4f:79:
b2:8a:25:be:23:38:0f:0a:03:24:21:a1:3f:79:1e:
14:cb:79:f0:df:b8:06:32:e0:bd:70:eb:98:b8:2a:
14:c5:d7:5b:91:89:09:18:eb:8b:a0:80:d9:6a:b5:
bc:5f:26:78:0e:40:f9:71:c3:dc:cf:33:8f:73:c9:
29:ae:f3:68:90:01:ec:99:6d:16:ec:b2:e3:ba:54:
60:3d:e9:4b:cb:75:ef:66:b6:f3:ed:a3:d8:1e:a7:
f7:80:cd:52:5d:65:d8:42:5a:8b:d3:8a:ed:95:11:
18:ab:a1:eb:68:e0:f7:87:6d:ec:d5:40:80:42:a0:
f9:e8:db:2f:7a:ed:78:59:7c:e7:a0:7d:ef:63:4f:
f2:66:00:87:64:f6:15:0b:df:ee:7b:6c:c5:5f:38:
2a:a8:7e:95:84:af:2e:42:7a:ac:ca:22:59:9a:ca:
a1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F1:FE:8D:9F:1C:38:A0:FB:55:B8:2B:A5:82:9A:0A:6E:EC:7F:08
X509v3 Authority Key Identifier:
keyid:35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/VfH-jZ8cOKD7VbgrpYKaCm7sfwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.180.0/24
IPv6:
2a09:58c0::/48
Signature Algorithm: sha256WithRSAEncryption
25:d4:e5:58:5f:1e:4d:43:a9:55:75:a7:28:1a:83:bc:6b:34:
16:45:f8:98:75:b7:f8:4c:5c:51:d8:00:14:b7:ce:4f:f4:cc:
6f:a7:81:a2:e5:b0:98:27:a5:21:89:6c:7a:ab:3e:7c:0e:28:
84:07:24:b9:e5:39:c6:d2:62:62:a4:ff:08:a1:dd:34:e5:52:
3c:a1:2a:da:5a:5d:41:3b:04:cd:e7:9e:c9:41:4c:91:75:a1:
8f:97:56:50:53:94:bb:ed:4e:2b:76:16:11:65:9e:55:8e:10:
a7:02:78:b9:e7:08:ad:90:82:78:dc:c0:b3:d6:dc:0e:81:b1:
58:e7:ad:bb:76:79:d7:37:71:2a:19:9c:86:72:90:b8:cd:c3:
92:8f:11:04:05:22:3c:8b:9b:ca:e9:34:b6:0c:a0:aa:c7:2f:
00:60:41:ab:e7:3a:af:c9:8f:72:0d:8f:a9:3f:47:78:c9:32:
8d:47:d8:d8:b3:27:62:e2:bd:95:76:e3:f0:51:9d:83:a2:71:
76:68:67:77:8d:c1:ba:32:b4:c7:2e:1d:96:d4:9b:56:42:54:
d2:4b:8c:2f:78:bc:ec:36:1f:a5:d0:4a:2e:b7:d2:c5:cd:ba:
e1:d2:fa:1d:26:91:ef:85:3d:7b:d7:c5:dc:46:f1:7c:a3:09:
ef:87:a2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 17:58:01 2024 by rpki-client on console-ams.rpki-client.org