Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/vdtBuAKo0tZiw7YOaIKogxH7Zvs.roa
File: vdtBuAKo0tZiw7YOaIKogxH7Zvs.roa (raw, json)
Hash identifier: 9CcKOj9BWnQxQmFh5NMq1wrSf2NnWANpV0htND5FpU4=
Subject key identifier: BD:DB:41:B8:02:A8:D2:D6:62:C3:B6:0E:68:82:A8:83:11:FB:66:FB
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 018CC64A85776FA24DD80CCC2F03EF54CEED
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/vdtBuAKo0tZiw7YOaIKogxH7Zvs.roa
Signing time: Mon 01 Jan 2024 18:30:21 +0000
ROA not before: Mon 01 Jan 2024 18:30:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204720
IP address blocks: 37.18.15.0/24 maxlen: 24
37.18.14.0/24 maxlen: 24
46.243.232.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:85:77:6f:a2:4d:d8:0c:cc:2f:03:ef:54:ce:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 18:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bddb41b802a8d2d662c3b60e6882a88311fb66fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:43:eb:87:ff:71:5f:4f:de:3e:da:0c:42:a4:
e9:02:85:6f:0c:74:24:2f:89:98:2b:ae:8a:e1:b1:
f3:28:6c:58:c8:17:40:94:b8:11:29:6b:30:c7:d3:
c9:54:45:48:19:32:00:21:75:c0:44:10:dd:e2:a5:
b9:56:a5:5f:27:60:41:b2:14:a0:e4:31:7d:bc:76:
a0:e9:28:cb:b9:6c:92:e9:1d:66:d2:72:64:6c:a5:
07:df:52:91:30:f1:cd:de:bf:ac:c7:ac:83:56:2e:
84:68:7e:cb:78:ce:42:ec:8f:b4:24:99:f1:5d:7f:
74:22:ee:b6:a8:07:93:df:7a:42:b6:f2:fe:87:5d:
f6:3b:91:e4:3d:1c:ba:b5:eb:de:40:e8:18:ae:14:
7f:62:f3:d1:fd:80:06:30:0e:33:47:ff:0a:41:a0:
d4:7f:7b:c5:66:f5:31:f3:7d:4e:41:d4:be:d2:e3:
52:25:be:fc:5c:59:9c:d8:48:e0:03:62:d0:80:fe:
32:d9:f3:a8:aa:c2:52:85:01:5a:ec:fd:2d:f2:04:
30:8f:3e:ae:12:82:6f:03:af:47:76:f3:e6:8e:ff:
8a:6f:aa:e2:c6:0a:2b:73:0f:0b:36:a4:31:ec:c8:
7e:4e:f3:a9:ca:8b:7b:24:36:00:ac:f0:fb:4e:30:
46:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:DB:41:B8:02:A8:D2:D6:62:C3:B6:0E:68:82:A8:83:11:FB:66:FB
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/vdtBuAKo0tZiw7YOaIKogxH7Zvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.14.0/23
46.243.232.0/22
Signature Algorithm: sha256WithRSAEncryption
13:7d:b7:34:e0:24:02:7f:29:59:5b:62:f6:d9:9b:93:9d:6b:
dc:d4:42:23:00:ba:4d:86:fb:03:90:b3:56:ce:38:82:1b:ec:
17:f5:34:e2:d1:81:fb:3f:7f:5b:33:95:b1:c3:4f:5f:82:3b:
98:07:1c:37:30:c1:03:ba:1f:8c:77:43:4e:5a:85:f2:04:ef:
d5:d7:1d:81:06:4c:3e:62:ce:c7:ad:18:fa:ae:ba:49:d0:99:
e3:96:37:27:e9:9a:f7:a8:cc:ba:2e:ba:f6:bd:5e:ee:d7:80:
7f:4c:8d:10:3f:7d:a5:5c:8b:14:d0:08:09:56:e9:64:67:cb:
83:1f:bf:90:33:bc:d7:34:26:89:c5:04:c7:19:c4:22:bb:4e:
ef:ea:3d:39:d8:7d:ee:c1:47:a8:eb:b0:5c:4c:cd:9e:2a:22:
d5:4e:69:80:01:12:98:56:94:60:ad:2a:8a:aa:37:b4:ad:22:
ac:06:7b:c8:07:4a:08:c4:30:9e:73:94:5c:a7:85:ac:8d:de:
c1:83:09:44:11:ba:03:cf:1a:6a:c5:5b:6b:e3:7e:a7:36:dc:
e3:11:45:91:7f:ad:ed:de:d2:42:29:a1:8c:9f:62:e3:80:cc:
57:f3:66:a5:41:cc:80:15:a1:d7:04:5d:ee:f6:f4:09:e1:03:
0c:96:31:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 10:34:53 2024 by rpki-client on console-fra.rpki-client.org