Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/VLcjwnjffB8wBheQHQjOT-Cu9v8.roa
File: VLcjwnjffB8wBheQHQjOT-Cu9v8.roa (raw, json)
Hash identifier: Y8BLBVpc2wHhnZWtFXpRHoAi0h/5LkA4V3cVx2W2GqA=
Subject key identifier: 54:B7:23:C2:78:DF:7C:1F:30:06:17:90:1D:08:CE:4F:E0:AE:F6:FF
Certificate issuer: /CN=6992125e3d53cc481336105483fcff701fda1bb3
Certificate serial: 018CC6B7C88B51B4C58B8D870C8D06ABE511
Authority key identifier: 69:92:12:5E:3D:53:CC:48:13:36:10:54:83:FC:FF:70:1F:DA:1B:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZISXj1TzEgTNhBUg_z_cB_aG7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/VLcjwnjffB8wBheQHQjOT-Cu9v8.roa
Signing time: Mon 01 Jan 2024 20:29:42 +0000
ROA not before: Mon 01 Jan 2024 20:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209761
IP address blocks: 213.226.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZISXj1TzEgTNhBUg_z_cB_aG7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:c8:8b:51:b4:c5:8b:8d:87:0c:8d:06:ab:e5:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6992125e3d53cc481336105483fcff701fda1bb3
Validity
Not Before: Jan 1 20:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=54b723c278df7c1f300617901d08ce4fe0aef6ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bc:76:aa:df:88:07:1f:3c:f7:19:7a:4a:ac:
9c:9a:77:fb:df:11:08:22:1e:65:06:ea:42:d2:7e:
8e:4d:17:df:61:a3:04:38:60:bf:c0:c5:cd:19:5f:
c2:2b:1c:21:2b:1b:bb:33:71:cb:35:51:73:9f:06:
38:10:2a:eb:dd:a1:e9:b2:b3:a0:82:79:ee:64:7b:
e7:e0:3c:f0:9a:de:e2:09:23:96:bd:1c:8a:8a:f9:
fc:db:4d:a8:12:fe:54:a0:22:ee:02:12:83:e9:09:
68:55:8a:d8:7c:60:ed:95:ef:ba:b5:c4:e7:93:24:
29:03:ed:37:24:9d:c5:b1:1a:c6:f6:56:2f:21:40:
07:4b:31:19:d4:35:8f:c7:bb:7a:32:aa:c1:92:4d:
22:17:1c:3d:99:64:c9:cd:ff:56:0a:37:0c:ff:0a:
07:e2:66:e3:50:10:49:1a:da:5d:ee:a2:b1:55:a4:
db:02:d2:8e:66:e1:dc:82:92:eb:9a:e8:77:e4:24:
5c:2c:3e:10:bd:86:30:56:8c:63:7e:e2:ba:e9:3b:
02:7f:d0:d9:90:b3:ab:95:1f:43:f7:c3:71:73:22:
4d:66:07:98:2e:f7:c7:42:7f:73:c8:b0:e4:86:b8:
72:75:46:1b:85:ba:0a:99:a5:5e:63:2e:70:ab:cf:
9c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B7:23:C2:78:DF:7C:1F:30:06:17:90:1D:08:CE:4F:E0:AE:F6:FF
X509v3 Authority Key Identifier:
keyid:69:92:12:5E:3D:53:CC:48:13:36:10:54:83:FC:FF:70:1F:DA:1B:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZISXj1TzEgTNhBUg_z_cB_aG7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/VLcjwnjffB8wBheQHQjOT-Cu9v8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.226.88.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:d6:9a:7d:92:31:fd:a5:88:a8:ca:da:ac:86:76:5e:5a:2a:
97:ca:46:0b:ee:66:a3:b8:43:f6:49:f4:45:a2:4f:05:e4:cd:
d8:b6:bf:77:9c:a2:24:38:e0:5f:3a:c8:e1:c4:6b:3d:6c:8b:
cf:7e:84:05:a7:41:76:e5:1c:41:2f:92:92:d4:a3:fd:74:18:
98:db:6a:9c:9c:ea:ca:21:1a:d5:ed:f8:b8:07:35:fc:21:4a:
b8:36:ba:d5:92:fc:e7:d4:2a:18:52:af:10:f9:c6:98:97:74:
11:f4:58:7a:bc:f8:8a:bd:ac:10:61:d0:c4:27:51:df:b1:ca:
b0:c7:da:ce:16:8c:37:6c:e0:33:ed:c4:4f:18:d1:3e:f3:0a:
24:14:51:f3:95:9a:21:71:e7:da:29:cb:20:5a:57:52:05:38:
50:12:86:55:65:21:d7:d9:65:15:00:e6:f9:8d:3b:a2:b4:53:
0d:2f:70:26:b0:28:54:81:df:fb:a5:da:07:23:4d:d6:ec:b5:
d1:67:7e:bd:52:ca:5d:ef:e3:dc:c6:ed:fe:75:95:01:0d:56:
e8:c7:34:d2:23:64:74:ea:65:a7:9c:d4:d1:b8:05:f9:e6:ff:
ca:30:1d:fa:ab:a4:6c:37:a0:bf:0d:d3:bd:8e:4e:c9:83:19:
8b:18:c5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:22:35 2024 by rpki-client on console-fra.rpki-client.org