Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/VSYhSp2Vn0teoWEaNvW1XD7_w84.roa
File: VSYhSp2Vn0teoWEaNvW1XD7_w84.roa (raw, json)
Hash identifier: jy0sUuCUdV+SNwxdjLKLr8zB2TWUh+l6+a+4avTtYGw=
Subject key identifier: 55:26:21:4A:9D:95:9F:4B:5E:A1:61:1A:36:F5:B5:5C:3E:FF:C3:CE
Certificate issuer: /CN=8e626c909eb4951154bcee8221e43951b4257624
Certificate serial: 018CC9BC395A3BB418160905BFA25451D8CA
Authority key identifier: 8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/VSYhSp2Vn0teoWEaNvW1XD7_w84.roa
Signing time: Tue 02 Jan 2024 10:33:24 +0000
ROA not before: Tue 02 Jan 2024 10:33:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14178
IP address blocks: 185.70.112.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 16:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:39:5a:3b:b4:18:16:09:05:bf:a2:54:51:d8:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e626c909eb4951154bcee8221e43951b4257624
Validity
Not Before: Jan 2 10:33:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5526214a9d959f4b5ea1611a36f5b55c3effc3ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:16:5d:56:7d:80:16:be:73:a4:85:79:9f:8f:
1a:17:f8:27:ef:d3:dd:46:00:bd:c9:70:74:e3:8c:
a3:10:47:72:48:c5:8b:82:0e:b3:5f:be:a9:9b:59:
b4:ea:fe:98:e7:15:3d:fc:bf:b9:da:c5:8f:c5:b3:
f0:dc:91:64:f1:e1:9e:5a:5e:ca:60:9c:92:4c:31:
07:c3:80:3b:12:ad:7c:17:98:f2:45:76:7c:b7:3a:
e3:bd:52:a9:00:79:c6:15:d0:39:fe:04:32:f7:3e:
68:29:d7:16:39:bf:9f:ad:c4:7c:d2:a1:91:b0:2b:
3d:94:6f:ee:58:2e:1c:c1:b8:d1:7c:29:bb:29:ec:
9a:14:82:c9:71:91:d9:60:40:a9:b9:a1:d3:02:42:
e0:a7:5f:2f:84:6b:c6:81:18:d6:49:3c:27:d1:cd:
c9:24:da:76:da:15:fb:c1:f8:3d:14:61:49:61:83:
7b:01:47:59:3a:84:fb:e7:92:4b:58:2e:bd:fe:83:
23:45:7f:fb:02:fe:a1:ac:91:b9:da:b5:91:e4:0a:
14:8e:1e:a7:59:34:af:90:43:78:f5:8c:00:b2:f6:
8a:c5:60:91:83:94:fb:7a:a7:4e:0a:5d:2c:cc:4f:
9e:6c:e6:5f:aa:fd:2c:ce:97:08:f7:18:0f:5e:e9:
45:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:26:21:4A:9D:95:9F:4B:5E:A1:61:1A:36:F5:B5:5C:3E:FF:C3:CE
X509v3 Authority Key Identifier:
keyid:8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/VSYhSp2Vn0teoWEaNvW1XD7_w84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.70.112.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:23:90:56:14:14:c7:08:d0:a6:0f:92:e3:fa:22:28:da:5d:
71:9b:1a:d4:1b:c9:58:d0:ad:57:30:fb:11:b6:fb:0b:90:23:
3a:60:e3:7f:cf:94:5d:51:e1:b6:04:98:64:1b:0d:6b:ea:3f:
03:63:ae:01:d8:a2:5c:48:8a:bb:76:f8:36:a1:76:6e:43:09:
0d:00:d3:3b:6a:d6:e5:48:f8:1b:0c:04:50:b0:1d:fd:df:04:
24:42:d3:96:56:34:0e:73:89:73:e6:35:b4:cc:e4:e4:1f:d0:
6a:7e:90:bd:48:88:ed:6a:9f:98:18:f1:15:9c:34:89:87:18:
90:44:d0:ec:58:a5:c4:f4:d3:5c:2f:d4:05:f6:85:b2:c0:02:
ca:f7:94:7d:69:c0:5c:47:3d:3c:ff:87:18:c3:c1:fa:5a:7e:
c8:6a:8a:15:2a:a3:9a:7e:2e:cf:63:18:b3:92:39:ca:41:87:
ea:b5:09:3c:1a:74:b3:57:ba:bf:13:e0:32:f4:81:08:bc:c9:
8c:42:00:df:0a:e1:44:39:5f:f1:d4:e5:6f:50:32:61:b3:8e:
4c:73:8b:84:98:bc:0a:30:62:7b:11:a8:da:f2:78:d0:67:d4:
ed:c8:2a:2d:fb:46:37:c0:6c:2d:04:03:75:ab:7e:c3:0e:43:
c9:55:95:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 19:10:02 2024 by rpki-client on console-ams.rpki-client.org