Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/A_VCVx-lK-anI7g92auCr_U9niM.roa
File: A_VCVx-lK-anI7g92auCr_U9niM.roa (raw, json)
Hash identifier: 79PPOetAm3EMZZ0JElCSeNOStOoBkCzEkzE79y0z/bs=
Subject key identifier: 03:F5:42:57:1F:A5:2B:E6:A7:23:B8:3D:D9:AB:82:AF:F5:3D:9E:23
Certificate issuer: /CN=9813e2f6351d3b4d1e61aa4016f1b2cfa62d7cdf
Certificate serial: 0192FE75BB75CAB8535FAD83C6F107C6CD7C
Authority key identifier: 98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/A_VCVx-lK-anI7g92auCr_U9niM.roa
Signing time: Tue 05 Nov 2024 22:33:01 +0000
ROA not before: Tue 05 Nov 2024 22:33:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201091
IP address blocks: 46.45.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:fe:75:bb:75:ca:b8:53:5f:ad:83:c6:f1:07:c6:cd:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9813e2f6351d3b4d1e61aa4016f1b2cfa62d7cdf
Validity
Not Before: Nov 5 22:33:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03f542571fa52be6a723b83dd9ab82aff53d9e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f5:f2:84:0c:e9:93:d1:59:9d:83:02:37:a4:
78:7b:70:59:d5:6a:87:11:43:24:f9:62:05:69:e6:
44:7a:16:71:ac:0a:68:1f:fa:b3:74:2e:9f:32:9b:
63:ad:27:45:e2:18:f1:1d:55:79:4f:9c:75:48:e6:
b8:7d:89:41:fc:f2:91:0d:e1:73:f8:53:40:46:d2:
5d:92:99:c2:b8:24:c5:a5:d3:60:26:e2:32:f9:09:
f1:e6:f4:ad:14:d1:d0:2b:ef:30:4c:22:cb:62:28:
a8:5a:08:76:92:86:d3:cf:71:24:e5:30:ea:5c:36:
e1:2a:16:bc:68:c8:c4:28:28:e4:45:6e:e1:68:a4:
47:dc:a5:f3:c4:c6:3e:82:ce:84:1b:3b:13:dc:37:
16:99:11:59:28:37:53:7c:b0:f5:68:db:97:1a:5f:
6b:20:21:4a:c0:7d:eb:33:e5:cc:04:d0:19:15:eb:
eb:c2:e8:6b:a6:58:0c:46:b5:e4:d1:2f:ba:5a:67:
16:2b:c2:78:b7:fd:3d:37:11:d0:ac:7e:d1:d4:7a:
f7:82:ed:8f:38:bd:19:9e:d4:a2:fa:68:77:a6:5c:
e9:16:dd:ce:4d:a8:82:1e:f5:58:00:45:1d:ad:cc:
86:b0:18:f5:8a:be:11:a5:56:11:83:76:71:86:47:
a3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F5:42:57:1F:A5:2B:E6:A7:23:B8:3D:D9:AB:82:AF:F5:3D:9E:23
X509v3 Authority Key Identifier:
keyid:98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/A_VCVx-lK-anI7g92auCr_U9niM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.45.116.0/24
Signature Algorithm: sha256WithRSAEncryption
68:68:34:bb:f5:e3:9a:10:a7:f5:5f:92:eb:95:b2:8f:22:d4:
8f:08:58:b3:d6:28:c2:42:f3:b0:b2:06:9a:27:6b:ea:5e:24:
a4:a0:2d:c0:41:61:03:c5:58:e5:ba:ff:c3:d7:26:8f:7c:85:
76:1c:b7:d7:4b:65:7f:39:77:86:27:cb:b0:41:16:02:d3:8c:
09:7b:4c:8f:57:d4:d0:8b:2d:fa:49:53:d8:b0:17:17:8a:05:
7a:8e:7d:e4:29:84:89:37:63:40:83:c8:d8:e3:62:1b:68:4d:
d4:80:3b:84:f1:ce:da:13:1d:c2:6a:d5:26:4d:e9:7f:1c:c6:
63:fb:f2:23:08:8d:da:1e:d9:14:82:60:c4:39:53:f8:ad:5d:
9f:6a:f5:e9:b1:10:45:15:37:ff:af:af:cb:1d:d8:a2:e2:5b:
c7:8b:48:56:b1:3b:47:7c:42:96:2a:df:5e:a7:d5:69:10:27:
a0:a0:ae:41:ce:2d:60:50:66:0b:b4:ff:77:a4:c3:8c:e7:9e:
42:d3:88:67:4a:57:aa:24:89:a3:09:d1:eb:ef:c8:75:44:27:
fc:72:5d:cb:52:9a:2c:6f:61:e1:bb:f3:9e:db:41:f5:df:27:
3b:4d:0b:c0:08:33:8c:75:0f:46:0b:63:0c:b0:81:46:75:ef:
37:17:38:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:04:05 2024 by rpki-client on console-fra.rpki-client.org