Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/VGBhdchmMynngOYRM_QqvCXT3qo.roa
File: VGBhdchmMynngOYRM_QqvCXT3qo.roa (raw, json)
Hash identifier: a34tEKy90PkCwCdZk5hxAtAiz4bDvbjbDg6yhaUw7kc=
Subject key identifier: 54:60:61:75:C8:66:33:29:E7:80:E6:11:33:F4:2A:BC:25:D3:DE:AA
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 019007CDED88D5755DD3C03F129D474102D4
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/VGBhdchmMynngOYRM_QqvCXT3qo.roa
Signing time: Tue 11 Jun 2024 14:57:34 +0000
ROA not before: Tue 11 Jun 2024 14:57:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5518
IP address blocks: 62.63.128.0/21 maxlen: 24
62.63.136.0/22 maxlen: 24
62.63.144.0/20 maxlen: 24
62.63.159.0/24 maxlen: 24
62.63.160.0/19 maxlen: 24
62.63.190.0/24 maxlen: 24
62.63.191.0/24 maxlen: 24
78.28.192.0/18 maxlen: 24
78.28.195.0/24 maxlen: 24
78.28.197.0/24 maxlen: 24
78.28.211.0/24 maxlen: 24
78.28.212.0/24 maxlen: 24
78.28.223.0/24 maxlen: 24
78.28.228.0/24 maxlen: 24
78.28.229.0/24 maxlen: 24
78.28.234.0/24 maxlen: 24
78.28.240.0/24 maxlen: 24
78.28.244.0/24 maxlen: 24
78.28.250.0/24 maxlen: 24
78.28.252.0/24 maxlen: 24
78.154.128.0/19 maxlen: 24
80.233.128.0/17 maxlen: 24
80.233.140.0/24 maxlen: 24
80.233.146.0/24 maxlen: 24
80.233.168.0/24 maxlen: 24
80.233.200.0/21 maxlen: 24
80.233.232.0/24 maxlen: 24
80.233.244.0/24 maxlen: 24
185.87.204.0/22 maxlen: 24
185.87.204.0/24 maxlen: 24
194.19.224.0/19 maxlen: 24
194.19.224.0/24 maxlen: 24
194.19.246.0/24 maxlen: 24
213.175.64.0/18 maxlen: 24
213.175.75.0/24 maxlen: 24
213.175.117.0/24 maxlen: 24
2a02:16d8::/32 maxlen: 32
2a02:16d8:102::/48 maxlen: 48
2a02:16d8:104::/48 maxlen: 48
2a02:16d8:107::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 15:27:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:07:cd:ed:88:d5:75:5d:d3:c0:3f:12:9d:47:41:02:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Jun 11 14:57:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=54606175c8663329e780e61133f42abc25d3deaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:46:d3:e3:ae:a8:19:2c:b1:04:ef:f4:8c:68:
3d:4d:ad:f3:c2:31:ed:34:d8:01:a4:14:b5:29:2d:
df:11:44:b4:61:fb:09:fc:c1:d3:1f:3d:a4:ef:37:
04:57:f6:d3:08:cd:b8:b3:6c:ee:78:b5:45:03:e3:
f9:fd:00:47:6d:e6:4f:14:3c:05:43:36:43:e8:38:
5f:46:31:c0:37:20:6c:a0:9d:ec:01:f1:b8:e6:cd:
db:f4:48:04:0e:ea:c1:00:07:9c:4c:37:93:95:4b:
da:c5:19:48:96:f4:0a:36:fd:a7:b1:00:8e:4b:2e:
9b:8b:ca:ea:d5:2e:73:45:58:fa:5c:f2:78:74:6a:
db:ca:0f:0b:77:9a:19:c6:9e:26:49:34:28:c3:c2:
ff:72:1d:2f:ac:06:ca:34:28:60:47:21:8d:5d:ad:
5f:9f:af:76:37:87:7c:66:e5:6e:c2:f0:37:36:98:
16:98:fd:ff:e1:9d:7f:10:0a:42:d1:3d:cb:e1:67:
f3:3a:59:e1:ae:6f:f1:fa:2f:7c:26:e6:f7:0b:be:
65:3e:9a:01:64:6d:a3:2d:a5:da:c0:a4:d7:87:bb:
52:19:a3:86:e6:d9:ac:a3:29:7e:dc:0e:68:db:ef:
82:84:b4:9e:38:9f:7a:22:a4:0d:c2:f7:5f:89:f5:
29:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:60:61:75:C8:66:33:29:E7:80:E6:11:33:F4:2A:BC:25:D3:DE:AA
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/VGBhdchmMynngOYRM_QqvCXT3qo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.63.128.0-62.63.139.255
62.63.144.0-62.63.191.255
78.28.192.0/18
78.154.128.0/19
80.233.128.0/17
185.87.204.0/22
194.19.224.0/19
213.175.64.0/18
IPv6:
2a02:16d8::/32
Signature Algorithm: sha256WithRSAEncryption
4d:85:ad:2e:81:81:89:49:8d:f7:57:50:46:9d:24:59:58:34:
b7:ad:fc:a6:d4:cb:87:ee:ec:fd:fa:c9:5d:5d:09:5c:6d:fc:
0a:c0:40:3d:42:5a:ce:05:1f:2c:bc:8a:f2:a8:fd:b1:3f:1b:
25:89:36:92:d8:8a:31:5c:9f:68:3d:7e:0c:95:ba:fc:87:79:
06:66:e0:a0:32:06:69:3d:6e:ca:64:f1:d7:29:20:52:72:73:
42:0f:4c:ba:b7:49:52:1e:19:36:6d:8b:60:8e:f3:3c:45:a4:
df:c7:6c:5c:6d:ed:75:41:1b:a7:79:a3:5f:0e:19:33:ce:cd:
e7:c6:21:89:98:0d:34:b9:e3:e3:4f:37:4b:4a:e4:c8:bb:0c:
11:3c:23:cc:8b:53:08:d9:87:a6:54:99:3d:cd:b1:42:2b:42:
48:75:f6:58:6e:fc:10:6c:56:0e:c8:c4:d0:8e:28:fa:b7:dd:
02:1c:70:48:d8:63:55:c5:99:9a:7d:a7:77:e8:52:3c:29:e1:
15:3e:96:49:6c:aa:01:ff:f7:ee:06:5d:9c:48:73:33:8c:e4:
dd:88:a6:20:fe:14:d2:5d:3d:c6:b3:e3:e1:06:fc:13:ba:f4:
37:f7:5d:2c:76:d2:39:eb:ff:b0:e9:f8:0a:e8:91:38:f5:1e:
cd:a1:ff:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 22:12:44 2024 by rpki-client on console-ams.rpki-client.org