Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/vNQVdMwPAO5ygIObkqfLXfiPCjE.roa
File: vNQVdMwPAO5ygIObkqfLXfiPCjE.roa (raw, json)
Hash identifier: Miq6HSFmeLsmlG4mPmec3/uU67j7fYPl3vVRn5hF7xk=
Subject key identifier: BC:D4:15:74:CC:0F:00:EE:72:80:83:9B:92:A7:CB:5D:F8:8F:0A:31
Certificate issuer: /CN=e6e4687ab8b1eb6de1abd04a07617c86d118518d
Certificate serial: 018CC5DC2E011ADBA4391D2550AC087FD86D
Authority key identifier: E6:E4:68:7A:B8:B1:EB:6D:E1:AB:D0:4A:07:61:7C:86:D1:18:51:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5uRoerix623hq9BKB2F8htEYUY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/vNQVdMwPAO5ygIObkqfLXfiPCjE.roa
Signing time: Mon 01 Jan 2024 16:29:50 +0000
ROA not before: Mon 01 Jan 2024 16:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54133
IP address blocks: 176.125.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/5uRoerix623hq9BKB2F8htEYUY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/5uRoerix623hq9BKB2F8htEYUY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5uRoerix623hq9BKB2F8htEYUY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:2e:01:1a:db:a4:39:1d:25:50:ac:08:7f:d8:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6e4687ab8b1eb6de1abd04a07617c86d118518d
Validity
Not Before: Jan 1 16:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bcd41574cc0f00ee7280839b92a7cb5df88f0a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d7:cf:b1:d6:bf:a8:44:b1:41:1d:ce:de:d9:
ef:96:1b:db:7b:7f:23:b8:52:b9:97:50:09:86:7d:
ce:82:75:70:82:87:0a:ba:1f:16:e0:25:37:d8:87:
8d:d5:a1:d1:40:42:ca:2f:06:c0:b7:74:c0:b1:75:
38:5c:4a:aa:3c:f9:11:ad:e1:2c:40:2d:a7:c8:fa:
5e:8a:f3:af:49:38:ae:92:45:d7:fe:fe:bd:a8:0a:
85:e7:7a:75:f3:6e:a9:a1:f7:ca:32:e4:97:d7:83:
39:b4:14:ce:35:fb:34:20:b2:e1:ae:81:ce:f4:70:
d4:b5:f5:cd:9f:e5:81:20:bd:66:a9:a7:fd:23:b0:
fa:33:8e:33:61:06:ae:18:2e:a7:4f:72:07:b3:59:
d3:72:b8:b9:8e:9c:ee:8f:df:45:b9:77:8c:d3:aa:
68:7a:f1:9d:5e:1e:7e:86:01:25:5a:b4:20:c4:3c:
ec:4c:e1:a2:bf:cb:ee:5c:f6:57:8e:c9:74:6e:ca:
d7:c5:fe:e2:73:e7:db:a6:91:ca:e9:3d:af:51:94:
1e:58:c6:6c:e6:4c:b8:0d:72:f9:2f:ec:6e:cc:cc:
86:0a:f3:ef:6d:47:be:5c:fd:90:b2:d5:ff:9c:bd:
b8:60:4e:03:14:9e:cb:2d:37:25:2b:7f:d8:81:10:
c7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D4:15:74:CC:0F:00:EE:72:80:83:9B:92:A7:CB:5D:F8:8F:0A:31
X509v3 Authority Key Identifier:
keyid:E6:E4:68:7A:B8:B1:EB:6D:E1:AB:D0:4A:07:61:7C:86:D1:18:51:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uRoerix623hq9BKB2F8htEYUY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/vNQVdMwPAO5ygIObkqfLXfiPCjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/5uRoerix623hq9BKB2F8htEYUY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.125.236.0/22
Signature Algorithm: sha256WithRSAEncryption
65:8f:d6:56:1e:c5:20:5d:e5:fa:92:e9:bc:44:37:12:c2:db:
f6:97:e6:1f:7c:83:cf:65:de:ab:57:b2:9e:53:67:ac:f7:06:
2c:32:a2:63:c7:bc:15:66:8c:75:b7:61:ad:82:63:9c:bd:3e:
9c:01:d2:9f:5e:5e:63:ef:6b:98:83:44:7e:6f:aa:13:53:11:
75:95:7f:87:1e:2e:5e:5e:e1:2e:63:15:37:17:e0:6a:b0:2c:
f3:e4:f0:32:53:68:d9:b6:d4:55:3a:3e:b0:a2:8e:8e:68:c3:
6f:ef:af:4c:38:c8:4c:4b:04:4f:56:98:3f:9f:83:d3:38:e4:
4f:a9:bd:c8:9a:e9:5a:f6:90:02:9a:13:a7:fe:e1:f0:fd:30:
9a:c5:a8:37:01:8e:ba:45:7f:c9:04:f5:1b:a3:19:8f:2a:48:
c3:21:9c:24:bc:b2:38:dc:22:07:f6:d8:2a:e4:59:07:aa:a8:
3d:c7:db:2d:9a:0d:63:f4:62:53:b3:1a:ea:74:3f:44:52:a9:
23:41:5b:3c:d5:b0:9c:43:4d:e5:55:d8:68:4f:0a:05:06:8d:
d2:ad:43:96:e5:4a:b5:ef:a0:c6:28:92:b7:20:81:0c:ba:22:
80:f2:f4:f4:dd:af:7e:f4:ab:f1:35:48:5a:83:f8:f3:1f:01:
5a:71:3b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 10:09:26 2024 by rpki-client on console-fra.rpki-client.org