Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/VGXHAYnYw4P0CW2UNClbBzQixSk.roa
File: VGXHAYnYw4P0CW2UNClbBzQixSk.roa (raw, json)
Hash identifier: Ts5Bf7fMj1dxLowyY/QS6cpQRN4d5JLetbKVbgoEnKg=
Subject key identifier: 54:65:C7:01:89:D8:C3:83:F4:09:6D:94:34:29:5B:07:34:22:C5:29
Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial: 018CC6B91A7B0CFE1C6D68A200486FE0C9DC
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/VGXHAYnYw4P0CW2UNClbBzQixSk.roa
Signing time: Mon 01 Jan 2024 20:31:08 +0000
ROA not before: Mon 01 Jan 2024 20:31:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207633
IP address blocks: 2.59.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:1a:7b:0c:fe:1c:6d:68:a2:00:48:6f:e0:c9:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Validity
Not Before: Jan 1 20:31:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5465c70189d8c383f4096d9434295b073422c529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f8:36:4a:6c:20:8e:dd:a9:a2:a7:4d:d5:03:
85:ca:42:f9:c5:6d:65:63:67:fb:55:52:5f:4f:5b:
51:41:9d:88:7c:1e:7b:7a:62:01:20:30:21:8d:70:
4d:02:ed:59:3f:58:be:a9:74:69:6e:74:05:b5:71:
c8:a9:ed:e2:04:c4:89:8d:a3:9c:a8:14:be:0d:0b:
69:13:63:1b:81:2c:35:b0:cd:af:73:d0:65:df:e7:
4f:d6:59:d9:0b:2b:d4:ca:a1:96:c4:a2:c0:5d:ab:
eb:c3:62:20:a8:f8:c7:4b:5f:2e:24:52:69:b5:36:
a2:6b:e0:58:c3:f1:2c:62:b3:ad:21:ab:5e:f7:6d:
e2:a2:06:6f:19:cd:a6:b8:c1:40:a0:87:15:83:4b:
a9:8c:db:e1:6f:4d:c7:2d:d1:26:dc:a5:a2:de:cb:
79:c8:b9:fa:09:ca:92:2e:5f:6e:3f:f4:0d:b6:50:
41:78:b0:fc:fd:44:1b:08:39:69:17:b0:74:b5:cf:
8e:63:6c:ff:3f:c0:63:30:4a:28:9e:21:ef:2c:cf:
47:79:97:a7:44:10:aa:dd:4a:44:61:9d:8f:c2:04:
a4:20:80:5d:84:8b:c1:c1:56:7b:ea:56:ac:6d:0f:
88:42:21:48:c3:be:31:bc:7f:f7:25:6d:72:6e:a3:
79:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:65:C7:01:89:D8:C3:83:F4:09:6D:94:34:29:5B:07:34:22:C5:29
X509v3 Authority Key Identifier:
keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/VGXHAYnYw4P0CW2UNClbBzQixSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.181.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:11:a8:a5:dd:54:a7:5d:22:78:33:ad:af:89:78:3c:82:72:
9b:63:e8:46:fc:3d:21:b6:e5:65:14:a3:db:8e:91:ea:09:d2:
34:6a:b8:c8:82:31:b7:23:a2:87:24:85:d7:f4:70:0d:05:c6:
1d:2d:66:4c:33:bf:97:7d:96:73:db:d9:50:a3:bb:b2:ed:82:
9c:b2:e0:9b:9f:ec:bf:4a:1c:51:54:d4:72:53:29:3e:ce:21:
4a:86:42:2b:dd:7e:da:a9:72:f5:94:e1:bc:ac:2b:48:de:d5:
92:c0:72:a6:01:da:19:83:39:06:51:ba:46:8d:13:b6:d0:7c:
3a:27:9c:dd:ee:d5:7e:0e:d0:b8:bc:1b:8f:0b:30:db:d8:9c:
a8:30:c2:55:3f:44:4a:81:a8:27:b1:df:f5:0c:15:bc:ed:cb:
ed:c6:98:58:61:c1:14:69:dd:c2:75:2d:5c:bd:67:40:06:16:
da:3c:9e:8c:94:7c:3a:c6:f5:80:8c:9c:0f:b2:92:cd:67:72:
e0:5d:41:b8:cf:3c:e2:89:2e:3f:e0:1b:0f:0d:32:a5:ca:3b:
aa:3d:3e:52:e0:43:bc:54:ae:a5:fd:7d:bf:ea:84:e6:ba:0b:
ba:ba:02:b8:55:11:c8:f8:96:cb:85:56:64:f6:55:4c:c2:5a:
32:ce:67:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 05:00:37 2024 by rpki-client on console-fra.rpki-client.org