Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/VBB-86i3wcM4dIEYwaVKo6hvhoM.roa
File: VBB-86i3wcM4dIEYwaVKo6hvhoM.roa (raw, json)
Hash identifier: vlBAaqwg7FDFBCjcXaRiPAYMZu8ThT+K8yUo4hfv2k0=
Subject key identifier: 54:10:7E:F3:A8:B7:C1:C3:38:74:81:18:C1:A5:4A:A3:A8:6F:86:83
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 018D80FACAAF298C41EA130D08EFA24EEA26
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/VBB-86i3wcM4dIEYwaVKo6hvhoM.roa
Signing time: Wed 07 Feb 2024 00:32:16 +0000
ROA not before: Wed 07 Feb 2024 00:32:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213220
IP address blocks: 192.145.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:80:fa:ca:af:29:8c:41:ea:13:0d:08:ef:a2:4e:ea:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Feb 7 00:32:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=54107ef3a8b7c1c338748118c1a54aa3a86f8683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:4c:26:6a:71:06:3d:6a:39:33:1f:de:d1:ca:
9d:da:06:58:43:10:9b:a2:5e:fd:bd:37:cf:23:da:
73:80:12:11:f7:ca:43:e7:55:09:6a:b2:62:94:24:
7a:37:69:59:ef:b8:1e:c4:b7:54:af:1f:30:ae:0b:
5f:75:59:bf:de:db:8c:63:db:2f:c1:24:dc:f5:16:
1c:7b:a6:79:21:16:bd:69:92:1e:e1:8b:af:ff:ff:
bf:40:ae:4e:d4:9c:39:62:15:42:f8:a0:ca:87:ec:
84:8e:8e:6a:68:0d:57:d8:d4:ef:bf:bf:26:7f:cc:
37:5c:22:65:56:d3:4f:8d:29:d8:16:c1:1e:d3:3a:
14:ce:a8:65:13:ef:ed:1f:7d:cb:70:1d:80:00:31:
12:70:4b:e6:54:97:dc:a3:77:e0:0e:bf:df:95:37:
c3:f0:58:bc:88:6a:28:52:c4:21:7d:69:60:9b:c5:
65:96:00:6c:30:d9:dd:af:eb:47:db:b3:28:20:ba:
6c:16:2e:db:4f:69:0c:6f:4c:9a:a5:04:13:5d:a6:
32:a2:be:dd:ad:5d:c3:19:69:f8:c4:cb:b2:dc:65:
83:d5:c1:af:4c:4b:41:af:4f:22:0c:b8:9c:9f:6c:
2f:5e:78:6c:62:4f:8c:8e:90:b4:44:4a:6a:2d:dd:
d9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:10:7E:F3:A8:B7:C1:C3:38:74:81:18:C1:A5:4A:A3:A8:6F:86:83
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/VBB-86i3wcM4dIEYwaVKo6hvhoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.97.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:09:0f:93:9f:e5:bb:14:e4:9f:99:b7:f1:76:b5:e9:8c:58:
0d:af:56:16:f4:bf:d1:d8:51:51:73:00:5f:fe:01:7c:c7:58:
2a:f7:11:76:2a:21:d5:de:3d:92:11:d8:79:6a:30:ed:66:6d:
b9:05:bf:28:48:8e:9a:cc:73:c0:c0:51:e6:1d:2e:ee:cd:14:
bd:a5:8e:f9:9f:35:78:86:9f:c6:63:68:2b:8c:a1:2d:b2:d4:
f4:5d:1f:4c:f3:f9:68:59:4a:68:20:2d:72:2b:54:16:65:8d:
9e:ad:a0:81:f3:53:1f:b5:b3:6b:7f:bb:15:f8:32:86:07:19:
62:41:27:cb:79:71:b4:14:53:42:69:c0:b5:55:4f:7b:3a:19:
de:52:52:1c:f1:2b:32:f8:9b:a1:82:1e:42:97:50:b5:dd:94:
b5:39:a9:7a:c0:ce:bc:5a:9f:b0:2f:11:de:97:ab:24:19:99:
11:f0:1f:37:d8:18:8a:dd:ce:a1:fa:87:12:5d:ad:a3:d2:12:
59:c8:d7:69:db:62:d7:25:da:8e:5e:04:1f:72:f1:f8:4e:ad:
50:18:aa:97:3f:9a:3d:b2:bd:11:f5:5c:cb:c2:17:43:87:0f:
9f:1d:0d:b7:56:29:95:0f:f7:e2:ad:c7:f5:72:90:3f:18:89:
30:be:8d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:47:39 2024 by rpki-client on console-ams.rpki-client.org