Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a665d6-b605-4de8-82ca-9c0e646b6881/1/VZwiBrDHZnxFeoy-6tvze3e1C3M.roa
File: VZwiBrDHZnxFeoy-6tvze3e1C3M.roa (raw, json)
Hash identifier: exA8ig1wNCfJbJ9F5yhtBLqOVdRKhOdknjq/kKbf4Ro=
Subject key identifier: 55:9C:22:06:B0:C7:66:7C:45:7A:8C:BE:EA:DB:F3:7B:77:B5:0B:73
Certificate issuer: /CN=a0415b6357b1eb232821091fd4f26879540e6857
Certificate serial: 018CC500FD72414D802B4BF1F8B421EA4336
Authority key identifier: A0:41:5B:63:57:B1:EB:23:28:21:09:1F:D4:F2:68:79:54:0E:68:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEFbY1ex6yMoIQkf1PJoeVQOaFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a665d6-b605-4de8-82ca-9c0e646b6881/1/VZwiBrDHZnxFeoy-6tvze3e1C3M.roa
Signing time: Mon 01 Jan 2024 12:30:25 +0000
ROA not before: Mon 01 Jan 2024 12:30:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51815
IP address blocks: 195.190.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a665d6-b605-4de8-82ca-9c0e646b6881/1/oEFbY1ex6yMoIQkf1PJoeVQOaFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/a665d6-b605-4de8-82ca-9c0e646b6881/1/oEFbY1ex6yMoIQkf1PJoeVQOaFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/oEFbY1ex6yMoIQkf1PJoeVQOaFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:fd:72:41:4d:80:2b:4b:f1:f8:b4:21:ea:43:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0415b6357b1eb232821091fd4f26879540e6857
Validity
Not Before: Jan 1 12:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=559c2206b0c7667c457a8cbeeadbf37b77b50b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:db:df:4b:22:f4:62:ad:9f:33:e7:8c:b9:bc:
a7:bd:c6:77:80:79:40:2f:12:bf:66:55:6b:30:c6:
80:fb:96:d3:6d:ba:bc:5c:d0:87:20:d2:3d:11:d4:
96:16:0a:60:e3:bb:3d:60:90:f3:f4:1b:c1:4a:e3:
08:92:7c:67:ae:d3:bf:44:1e:5f:1c:87:df:48:9d:
3c:31:16:99:d0:fe:59:0f:04:e0:f5:5b:69:2e:59:
57:58:0b:69:c8:70:20:79:76:2c:e5:31:8e:8f:c2:
3e:5a:1e:41:ab:56:2a:fa:d4:3b:4a:90:38:3f:eb:
cc:69:98:5a:73:c0:b4:8f:42:75:a2:0a:92:da:ca:
e7:c6:6d:c3:21:fe:19:1f:79:d6:80:0f:b9:2c:85:
30:b4:3e:62:9d:1c:a7:82:3b:3f:20:4b:af:cc:da:
77:6a:8d:8b:a4:af:07:97:bf:77:85:f7:3d:30:f9:
87:fb:b9:8b:9d:6e:ff:be:ec:23:19:01:5c:fe:00:
bc:c4:79:84:6b:e9:4b:d2:c4:89:20:b6:18:37:c1:
a4:1b:f3:63:15:8d:4b:cc:33:7e:08:d6:17:7a:fe:
39:bf:7e:3d:30:97:71:c3:2c:4c:47:a3:63:c4:e7:
db:13:9d:33:33:51:f7:c3:66:61:42:5e:d4:35:17:
4b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:9C:22:06:B0:C7:66:7C:45:7A:8C:BE:EA:DB:F3:7B:77:B5:0B:73
X509v3 Authority Key Identifier:
keyid:A0:41:5B:63:57:B1:EB:23:28:21:09:1F:D4:F2:68:79:54:0E:68:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEFbY1ex6yMoIQkf1PJoeVQOaFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a665d6-b605-4de8-82ca-9c0e646b6881/1/VZwiBrDHZnxFeoy-6tvze3e1C3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a665d6-b605-4de8-82ca-9c0e646b6881/1/oEFbY1ex6yMoIQkf1PJoeVQOaFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.190.133.0/24
Signature Algorithm: sha256WithRSAEncryption
68:fe:22:90:08:a2:45:e5:4c:3b:5b:16:c5:95:c2:c8:cc:93:
1e:95:ab:ff:3d:6f:a7:ef:28:e5:e3:77:41:c8:f2:7f:b4:67:
12:33:1d:75:92:91:27:ed:9b:52:da:9e:18:13:ca:7d:3c:ca:
a6:36:c3:b3:db:08:d4:67:22:59:39:7f:4c:ea:0f:44:8f:04:
eb:2f:1b:89:fb:11:73:4f:13:61:83:33:09:c4:90:b2:a5:ed:
b5:e9:f6:d8:b9:aa:0d:a0:94:46:53:e7:83:5c:2f:10:ca:5f:
df:d3:a9:8b:2c:25:b1:12:7c:d2:f0:10:ea:8b:34:10:7f:40:
a0:89:ea:9d:fd:05:4a:86:2f:1f:8a:3b:34:8f:a4:95:78:7c:
03:42:f6:3e:2b:b5:e4:b1:5e:05:40:cd:75:ad:20:c4:af:e8:
e3:8d:cb:93:0b:9c:d6:59:1d:a1:a1:4a:06:c3:be:09:22:cc:
c2:d7:a1:96:87:92:d5:99:7c:db:4b:f7:c3:f2:e0:3d:89:f1:
a7:9f:7d:17:74:f9:5d:12:b8:56:c4:c9:10:a5:35:f3:5c:29:
d4:66:a3:0c:ad:53:16:2d:e2:e2:f1:30:71:4a:87:e1:48:d4:
e9:8a:0e:be:36:9a:d0:d5:18:c5:aa:89:26:15:1c:70:bc:24:
53:2c:df:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:34:22 2024 by rpki-client on console-ams.rpki-client.org