Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/cVVEnqS169ARI415Jc96mFap50s.roa
File: cVVEnqS169ARI415Jc96mFap50s.roa (raw, json)
Hash identifier: SroHO0t/CRXl7IR0lvXCvCulmb3XqXlyHrA0F5R29JQ=
Subject key identifier: 71:55:44:9E:A4:B5:EB:D0:11:23:8D:79:25:CF:7A:98:56:A9:E7:4B
Certificate issuer: /CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2
Certificate serial: 018DAC923E95229A29A242BCAD69ACE5C0E2
Authority key identifier: 68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/cVVEnqS169ARI415Jc96mFap50s.roa
Signing time: Thu 15 Feb 2024 11:41:21 +0000
ROA not before: Thu 15 Feb 2024 11:41:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200555
IP address blocks: 2.58.188.0/22 maxlen: 24
31.14.60.0/22 maxlen: 24
89.39.216.0/21 maxlen: 24
89.42.120.0/21 maxlen: 24
185.58.208.0/22 maxlen: 24
194.146.55.0/24 maxlen: 24
194.146.63.0/24 maxlen: 24
194.146.70.0/24 maxlen: 24
194.146.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jul 2024 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ac:92:3e:95:22:9a:29:a2:42:bc:ad:69:ac:e5:c0:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2
Validity
Not Before: Feb 15 11:41:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7155449ea4b5ebd011238d7925cf7a9856a9e74b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:25:8f:f2:01:94:a2:ab:e8:07:59:22:8f:19:
64:34:44:c5:83:31:15:4f:d9:48:b8:89:7d:32:e3:
b0:dd:48:7c:78:ee:e6:7a:51:77:79:a1:6c:c3:d0:
bf:24:3f:26:db:03:56:15:f8:f8:77:1e:5a:e3:f1:
ad:96:99:93:c4:d1:d3:84:c5:15:5f:24:b5:ec:29:
c3:a2:b8:0a:c7:f6:f0:71:8c:d4:98:89:60:0f:c8:
49:59:54:31:4f:f9:37:d9:b1:ed:1e:58:f6:b9:02:
6d:96:55:13:b9:29:cc:2f:27:a9:42:37:e9:7e:4e:
13:96:15:41:f3:fd:b6:aa:be:a5:6d:d4:84:14:0b:
cf:40:72:da:c6:4a:32:a9:47:5a:a5:3c:af:d4:21:
3c:1c:77:8f:0f:6d:0f:a7:6f:96:c8:e7:44:09:5b:
0f:18:e3:aa:0d:95:88:6a:88:f5:7c:50:cc:bc:93:
46:be:34:57:c2:fc:e9:54:77:02:d2:22:59:e2:7b:
f0:2a:92:06:bc:db:83:4a:22:47:69:5c:8d:e8:a4:
68:01:cb:e1:28:35:44:16:02:6d:db:89:d7:46:ca:
15:c0:05:4d:90:71:b9:00:b1:96:73:7d:e9:47:ac:
7c:1d:3a:a5:46:10:fa:6b:dd:b1:77:2e:4f:19:a9:
d7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:55:44:9E:A4:B5:EB:D0:11:23:8D:79:25:CF:7A:98:56:A9:E7:4B
X509v3 Authority Key Identifier:
keyid:68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/cVVEnqS169ARI415Jc96mFap50s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.188.0/22
31.14.60.0/22
89.39.216.0/21
89.42.120.0/21
185.58.208.0/22
194.146.55.0/24
194.146.63.0/24
194.146.70.0/24
194.146.99.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:a0:b0:4e:b1:2c:00:ee:8a:71:94:82:09:9c:15:98:c8:fd:
43:dd:25:ee:11:93:dd:61:9b:38:03:ff:6a:2a:ac:0a:c8:13:
30:9e:3a:f5:06:52:fb:4c:c9:8e:5c:93:3c:dd:9d:5a:6f:a8:
83:cd:f8:67:3e:a0:df:2c:f5:9f:e3:33:ff:b9:61:82:ce:d8:
97:83:fe:9f:02:d1:b8:05:cd:8e:8a:0e:7f:94:08:67:cb:4b:
38:9c:d1:d8:5a:7e:b1:9d:1e:cf:8c:84:67:48:d9:0f:48:0e:
b6:de:5e:56:57:36:f0:19:4a:4b:09:19:5c:4c:41:0c:7c:c5:
f1:20:1b:38:68:40:67:6a:3d:09:22:9e:06:dd:71:fe:fa:68:
43:1c:e3:e2:1c:d2:a2:2f:f0:2d:b8:65:db:e7:70:e3:4d:af:
79:b4:7b:87:39:8a:ba:8e:c1:b3:39:9f:1d:9f:bb:87:c3:34:
a0:9a:0e:69:cd:ed:81:8c:50:7a:10:1f:45:72:23:08:e7:d5:
99:63:5e:ed:64:6f:3b:a9:be:00:c8:9d:a4:84:7c:1e:91:32:
fe:d1:17:c0:42:6d:db:6f:28:53:77:4b:93:f2:07:a1:30:d6:
56:69:8f:31:36:02:96:6a:c4:de:1d:35:0b:73:a8:d7:a4:54:
d4:93:7a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 6 07:57:00 2024 by rpki-client on console-fra.rpki-client.org