Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/vVA3v5Xva7WRyrEIDDUNs5AQ4YI.roa
File: vVA3v5Xva7WRyrEIDDUNs5AQ4YI.roa (raw, json)
Hash identifier: hAYdwCz621Msz/2JvhfTl8iiiwllmkHBofYph+W+rHQ=
Subject key identifier: BD:50:37:BF:95:EF:6B:B5:91:CA:B1:08:0C:35:0D:B3:90:10:E1:82
Certificate issuer: /CN=c011ee066641750a51147d8dc99a1b105658d203
Certificate serial: 018CC4939BDEFE89DAD46F5539EE8DFAC2AF
Authority key identifier: C0:11:EE:06:66:41:75:0A:51:14:7D:8D:C9:9A:1B:10:56:58:D2:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBHuBmZBdQpRFH2NyZobEFZY0gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/vVA3v5Xva7WRyrEIDDUNs5AQ4YI.roa
Signing time: Mon 01 Jan 2024 10:30:57 +0000
ROA not before: Mon 01 Jan 2024 10:30:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57184
IP address blocks: 185.128.200.0/22 maxlen: 22
2a03:9b60::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBHuBmZBdQpRFH2NyZobEFZY0gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:9b:de:fe:89:da:d4:6f:55:39:ee:8d:fa:c2:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c011ee066641750a51147d8dc99a1b105658d203
Validity
Not Before: Jan 1 10:30:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd5037bf95ef6bb591cab1080c350db39010e182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:78:78:7b:77:88:ce:53:86:d5:88:57:d0:31:
eb:cd:b6:62:6c:fe:c9:0e:d8:9b:78:e0:69:ce:24:
60:bc:0c:d1:82:4f:8c:6a:63:ef:c0:15:19:90:fc:
70:3c:39:18:d7:e4:a1:07:35:c6:4f:aa:7f:20:0c:
a0:b7:f7:ab:34:ff:2c:62:69:77:75:6c:4c:fa:34:
02:34:34:39:81:99:20:f9:59:b4:00:63:97:83:f6:
9e:0c:a2:66:19:f5:fc:f8:7d:16:85:f3:16:bc:a7:
4a:6c:38:ed:02:9f:3d:7d:99:b9:b5:1f:84:d7:0f:
8a:2c:34:33:1a:f2:0c:09:af:fd:f2:00:dd:5d:83:
f2:33:dd:64:fb:0f:f6:2f:01:25:19:da:6e:8c:a1:
1b:c1:92:75:3d:21:87:22:d0:2b:1e:80:a0:db:2c:
b5:21:ab:6b:86:d3:c7:7f:e0:cc:51:ca:00:65:73:
9d:9a:5b:eb:15:3a:89:47:9c:47:a9:5b:62:cf:4c:
a6:b8:f9:53:e4:ce:cf:05:f1:32:ce:d6:af:eb:08:
a0:79:b0:cb:95:80:b0:0b:6c:a0:56:7f:a6:52:d9:
1b:1e:d5:15:2a:86:cd:6a:32:94:a9:0e:0c:d7:e3:
b2:1b:e3:20:7b:1b:1f:ee:f4:55:fb:f3:41:c2:21:
c7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:50:37:BF:95:EF:6B:B5:91:CA:B1:08:0C:35:0D:B3:90:10:E1:82
X509v3 Authority Key Identifier:
keyid:C0:11:EE:06:66:41:75:0A:51:14:7D:8D:C9:9A:1B:10:56:58:D2:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBHuBmZBdQpRFH2NyZobEFZY0gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/vVA3v5Xva7WRyrEIDDUNs5AQ4YI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.200.0/22
IPv6:
2a03:9b60::/32
Signature Algorithm: sha256WithRSAEncryption
41:6c:59:96:5b:d0:14:d4:5e:bf:ef:35:36:2c:b5:ee:4b:ac:
80:eb:c9:ff:af:be:ff:6b:a5:99:57:2b:48:43:4a:2f:d4:07:
ce:8d:d8:14:33:53:04:54:84:93:7e:e8:8a:b9:de:0a:57:28:
ad:ac:c2:15:09:a3:0c:ce:d0:1d:ae:e9:91:a2:20:86:5c:3c:
e6:7b:4a:8f:63:ea:e8:1c:52:22:5d:34:6d:58:27:01:1f:c5:
63:6b:ee:c7:4b:a3:8d:75:f4:0d:64:6b:2b:c4:70:07:54:ab:
e1:ac:46:dc:33:0d:d6:be:3e:f8:a5:bc:4e:48:77:29:67:ff:
88:3a:0e:9e:a0:3f:fe:05:f3:09:9e:72:2a:de:ca:9e:b1:04:
c8:fc:0a:3c:ca:82:2f:9e:5a:91:24:92:43:a0:eb:36:56:70:
a1:14:13:94:f5:86:d6:3b:d7:24:d8:28:a1:9c:77:5a:44:bb:
a8:99:6c:b3:81:cd:cd:00:c9:26:32:73:ef:8f:bb:49:eb:28:
34:49:3c:1b:3b:3d:00:f4:96:64:74:a9:fb:13:69:20:e4:72:
04:75:f0:a6:6e:7b:78:3d:49:36:51:71:14:c9:ea:a8:0a:b5:
62:b6:6b:f2:c0:64:dc:2f:cf:8c:8c:ea:21:28:e0:3d:39:47:
6c:59:54:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 03:07:39 2024 by rpki-client on console-fra.rpki-client.org