Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSlQiuNSOgRVrAhkUNTpKSuCLAw.roa
File: VSlQiuNSOgRVrAhkUNTpKSuCLAw.roa (raw, json)
Hash identifier: fN0c57n+Ss1nFLK3SE9ppJ8DVP85HhofcxeXgScdw2I=
Subject key identifier: 55:29:50:8A:E3:52:3A:04:55:AC:08:64:50:D4:E9:29:2B:82:2C:0C
Certificate issuer: /CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099
Certificate serial: 0192542E899F4772D50B1BDA7ACB5FFA1A8D
Authority key identifier: 55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSlQiuNSOgRVrAhkUNTpKSuCLAw.roa
Signing time: Thu 03 Oct 2024 20:59:48 +0000
ROA not before: Thu 03 Oct 2024 20:59:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207388
IP address blocks: 193.104.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 08:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:54:2e:89:9f:47:72:d5:0b:1b:da:7a:cb:5f:fa:1a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099
Validity
Not Before: Oct 3 20:59:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5529508ae3523a0455ac086450d4e9292b822c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a2:ae:f5:0d:47:ea:82:32:a7:a0:d4:1e:08:
71:f3:3a:9d:2b:86:af:da:0e:e1:66:0a:cb:7e:18:
5d:ab:f9:2b:a5:9f:67:e5:a7:f8:b2:cf:b8:e5:a8:
e1:fd:71:7d:fe:5d:0b:20:9c:6c:e4:f2:33:98:2f:
8a:01:81:8c:7d:a1:97:34:33:59:53:22:dc:f3:10:
43:f3:64:36:e1:79:5e:15:4c:8f:6f:e9:4d:00:fb:
3a:a8:2e:09:de:15:34:1d:39:df:6b:0e:b2:2c:16:
55:8c:2a:be:83:75:e0:87:30:ee:57:37:d6:0b:82:
89:08:e9:c7:eb:72:40:49:b8:60:ad:68:9e:67:17:
0e:7b:d9:6a:6a:23:33:4e:78:bb:ef:38:04:ec:37:
dd:7b:9a:9c:63:f5:63:c1:58:cf:54:47:5b:49:ef:
47:35:2a:4a:71:88:ab:5c:71:53:39:a9:15:be:59:
08:da:cf:d1:73:f3:d2:9c:70:24:f9:45:03:ab:33:
c4:59:be:a4:77:cf:a2:2f:d6:ce:20:7c:f7:09:18:
d5:ce:b3:9c:5d:63:58:ea:b8:a1:e3:63:c8:e4:5d:
32:cd:24:c4:42:00:c7:bb:40:be:f4:f2:c7:ab:90:
86:84:a9:91:e3:5f:ae:df:78:fb:4d:de:06:8b:ac:
c3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:29:50:8A:E3:52:3A:04:55:AC:08:64:50:D4:E9:29:2B:82:2C:0C
X509v3 Authority Key Identifier:
keyid:55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSlQiuNSOgRVrAhkUNTpKSuCLAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.245.0/24
Signature Algorithm: sha256WithRSAEncryption
66:58:27:d1:ba:0a:38:30:14:dc:02:3c:ba:32:55:85:f1:f4:
a4:d0:78:36:8a:5e:4a:5a:0d:d2:eb:cb:f2:ff:d6:f3:54:ff:
5b:df:3a:b1:e8:5e:0e:ea:ab:e3:a4:1d:49:0e:94:74:44:91:
78:52:12:dd:8c:08:c5:26:9f:e7:85:98:bd:aa:95:02:8e:fa:
52:b3:7e:43:75:3d:c6:81:5c:41:75:47:6c:af:a6:5a:29:9c:
d4:cf:f9:84:4c:f7:2c:7a:ad:97:50:b4:a4:1a:98:a9:60:47:
05:4b:c4:a9:1e:5f:28:7c:32:56:7a:95:a1:42:de:2e:5c:d1:
1e:49:f6:b8:e2:e6:b6:3b:69:77:0f:2c:57:5c:db:43:25:37:
f8:b8:0f:37:3f:4a:5b:b7:70:8b:69:52:37:13:75:47:a6:f4:
4e:35:ab:8b:d3:93:6b:e0:f9:7e:37:4a:9a:e1:65:03:a3:2f:
f1:27:0f:26:4a:23:f4:24:3c:96:cb:ed:ba:5f:df:13:6e:7e:
7d:3a:c6:f2:bc:3e:e2:19:55:ba:54:79:71:3a:a1:98:7e:9e:
9d:29:a4:6b:08:0a:59:b6:5c:b4:14:ce:50:88:45:37:0c:8a:
b9:6c:6e:38:ac:4a:ae:d1:6e:4f:b1:ce:fb:41:64:6a:99:a4:
22:69:78:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:07:00 2024 by rpki-client on console-fra.rpki-client.org