Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/vy2Ebmu3-lbxNl6xWnPgGoYxTmU.roa
File: vy2Ebmu3-lbxNl6xWnPgGoYxTmU.roa (raw, json)
Hash identifier: rI7ZAX6jM1JNyk2f7Jqb6OEiX/1hON23P7UV1042o/k=
Subject key identifier: BF:2D:84:6E:6B:B7:FA:56:F1:36:5E:B1:5A:73:E0:1A:86:31:4E:65
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 018CCA2BB72FA448B1E97CEE7174F7281096
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/vy2Ebmu3-lbxNl6xWnPgGoYxTmU.roa
Signing time: Tue 02 Jan 2024 12:35:11 +0000
ROA not before: Tue 02 Jan 2024 12:35:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34342
IP address blocks: 128.204.220.0/23 maxlen: 23
77.79.225.0/25 maxlen: 25
185.2.112.0/22 maxlen: 22
77.79.244.0/22 maxlen: 22
195.167.156.0/24 maxlen: 24
195.167.157.0/24 maxlen: 24
85.232.248.0/24 maxlen: 24
2001:1a68:19:400::/54 maxlen: 54
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jul 2024 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:b7:2f:a4:48:b1:e9:7c:ee:71:74:f7:28:10:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 2 12:35:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf2d846e6bb7fa56f1365eb15a73e01a86314e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c2:1d:3e:00:b2:b8:e2:4e:18:89:b6:82:bb:
a8:20:f3:b9:60:93:5d:58:e9:67:05:f2:5a:7f:c7:
36:1f:d0:40:e4:04:b3:64:29:ca:f7:20:a5:48:b4:
1d:83:d2:e9:63:c4:1a:71:08:48:43:f6:a2:6c:57:
0c:0b:6d:ed:7a:1a:ab:68:45:23:68:cb:76:e9:95:
42:71:78:eb:70:df:0f:7c:37:49:c8:ca:ad:f1:78:
23:fb:0b:94:66:17:cf:1b:f2:19:8f:e4:63:ec:ac:
0d:d3:37:4b:63:ff:50:04:81:d7:93:15:5e:bf:40:
0b:d8:04:8c:87:a1:f7:34:86:69:db:1e:a0:74:83:
6e:44:54:f3:8f:67:8d:2e:0d:10:9e:fd:03:87:73:
8d:95:e0:bb:18:5c:6c:1e:52:cb:af:03:7a:1e:fe:
48:6a:53:72:95:5b:71:d4:e0:9b:ad:78:86:c2:1c:
54:e3:f2:9b:b1:4d:f5:8f:05:ff:19:1d:e0:b4:38:
15:70:0e:40:32:19:e3:d5:ac:62:5f:bd:65:73:eb:
04:ba:a1:01:04:3a:46:30:0b:63:58:3b:f3:70:eb:
24:f6:78:b0:64:5c:e3:e8:91:f5:7e:41:b0:f7:bd:
61:88:11:8b:2d:5f:55:72:fe:9d:39:11:ab:96:0f:
ef:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:2D:84:6E:6B:B7:FA:56:F1:36:5E:B1:5A:73:E0:1A:86:31:4E:65
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/vy2Ebmu3-lbxNl6xWnPgGoYxTmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.79.225.0/25
77.79.244.0/22
85.232.248.0/24
128.204.220.0/23
185.2.112.0/22
195.167.156.0/23
IPv6:
2001:1a68:19:400::/54
Signature Algorithm: sha256WithRSAEncryption
79:99:e3:c8:23:4d:15:65:54:20:2b:cb:44:c3:16:2a:2a:46:
6e:e3:78:d0:36:18:ca:7b:d7:ff:07:25:17:7a:a4:5f:d8:6a:
17:0e:91:30:61:96:d9:b0:f3:ab:eb:6e:df:eb:d4:24:ca:4f:
46:4a:35:a0:07:10:11:54:ea:91:25:38:09:16:0b:23:8b:23:
66:de:f4:2b:c1:c9:bf:28:70:38:b5:92:bc:1d:3b:fe:a4:d9:
cb:c3:a8:2b:2d:dc:7b:12:6a:29:df:8e:d6:34:cc:0a:8d:a8:
b2:58:4f:a4:b5:3b:81:96:23:18:9f:ce:55:42:38:be:a2:38:
b1:a7:2a:01:62:0a:6d:00:33:fb:15:89:20:75:7b:7a:f0:b7:
c3:46:85:a3:ae:43:87:0d:d9:ad:2e:ea:85:30:6f:6c:d0:47:
63:56:19:c1:26:2a:2e:f5:d5:76:05:5c:14:34:28:26:67:c3:
74:87:ec:42:2b:c7:27:f0:6d:ff:51:3b:00:c4:18:fe:4e:eb:
1d:d3:91:67:e7:2b:d4:67:65:7c:b5:bc:86:29:54:cb:40:18:
01:70:b5:41:88:75:c2:6d:bc:a5:5e:8a:bc:2e:81:c9:48:b8:
ca:fd:6b:84:ad:f3:07:9f:0c:2a:a4:00:84:a5:5b:f2:0d:4e:
9b:4b:64:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 09:26:19 2024 by rpki-client on console-ams.rpki-client.org