Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/vdykUT2Eb7H-Pn-y2d--5H9xQJA.roa
File: vdykUT2Eb7H-Pn-y2d--5H9xQJA.roa (raw, json)
Hash identifier: Zn8jP8rAzlL5vJpbJmV1PQmHmSMel8iWoQyhOpfNlwg=
Subject key identifier: BD:DC:A4:51:3D:84:6F:B1:FE:3E:7F:B2:D9:DF:BE:E4:7F:71:40:90
Certificate issuer: /CN=a1646d3f90758d8a3743f155f62bffff1bb6366a
Certificate serial: 018CC3494E9CB577F897D806AD326FA3CBBD
Authority key identifier: A1:64:6D:3F:90:75:8D:8A:37:43:F1:55:F6:2B:FF:FF:1B:B6:36:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/vdykUT2Eb7H-Pn-y2d--5H9xQJA.roa
Signing time: Mon 01 Jan 2024 04:30:10 +0000
ROA not before: Mon 01 Jan 2024 04:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62250
IP address blocks: 185.209.188.0/22 maxlen: 22
185.209.189.0/24 maxlen: 24
185.209.190.0/24 maxlen: 24
185.209.191.0/24 maxlen: 24
185.209.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:4e:9c:b5:77:f8:97:d8:06:ad:32:6f:a3:cb:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1646d3f90758d8a3743f155f62bffff1bb6366a
Validity
Not Before: Jan 1 04:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bddca4513d846fb1fe3e7fb2d9dfbee47f714090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:05:44:a9:91:6e:2a:54:12:a2:74:8c:bb:9d:
41:7b:38:eb:ac:bc:9e:15:9d:13:26:f0:e5:11:fb:
d7:cd:e8:78:0b:9c:a7:0f:34:59:5b:fc:3c:52:3b:
b0:d2:3a:11:5c:06:76:e9:58:6f:e8:77:65:33:7b:
92:21:0a:66:61:1d:b1:98:23:36:9f:97:07:15:1b:
23:3b:e3:1a:c3:ce:2f:6b:e8:69:21:9e:44:8c:63:
ce:bd:ea:35:9f:81:39:4f:dd:38:0e:0f:05:1f:7c:
73:9c:5a:0b:9b:2f:cd:a6:86:59:77:46:35:a8:f6:
10:b3:c5:ea:d1:59:d8:c6:ff:bb:7a:99:b0:3a:16:
35:ad:53:cc:5e:cf:45:cf:88:37:bc:1f:62:b1:a0:
bd:d2:87:0f:9d:72:85:ba:ad:05:76:2f:56:e9:64:
06:a4:fe:6e:b0:64:67:19:17:c7:35:df:61:36:96:
57:3a:a8:d7:2c:e8:05:5d:72:6b:2f:eb:ca:17:97:
10:05:e0:f1:b5:32:2d:97:41:7d:db:63:14:b2:f1:
23:02:fa:85:f5:f2:b6:36:a9:65:07:5c:01:64:f0:
ee:09:a4:ca:3c:7d:8e:96:0a:f9:58:ce:60:63:fa:
28:62:16:44:85:f1:e1:dc:39:eb:29:4a:e3:58:a5:
7a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:DC:A4:51:3D:84:6F:B1:FE:3E:7F:B2:D9:DF:BE:E4:7F:71:40:90
X509v3 Authority Key Identifier:
keyid:A1:64:6D:3F:90:75:8D:8A:37:43:F1:55:F6:2B:FF:FF:1B:B6:36:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/vdykUT2Eb7H-Pn-y2d--5H9xQJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.188.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:48:a1:76:48:c6:ad:7b:45:5a:3c:ff:0f:44:34:81:36:b2:
6c:db:6f:d5:da:6f:2c:61:46:e1:e0:26:82:99:05:15:4e:cd:
1b:76:42:97:d4:d3:54:83:8c:58:59:26:30:ea:7a:6f:ed:a1:
43:7e:b3:6d:78:91:20:2c:72:6a:58:19:65:3f:a8:56:fa:eb:
ea:df:4c:e1:81:72:5c:cb:79:b9:72:c5:28:d2:1e:b5:ee:0f:
77:24:d7:94:70:90:5b:a2:9c:d0:65:b6:1c:5e:de:bf:34:e2:
39:61:1f:f4:27:3f:5b:00:1f:c7:e9:77:8d:91:13:42:64:a4:
9b:3a:f7:80:47:b0:a6:a7:80:7e:7b:fe:09:9f:a1:83:3d:ff:
0c:aa:6d:ac:cb:9b:38:02:97:7a:ae:63:c5:a8:9d:79:d5:db:
8e:12:58:5d:54:f8:99:9b:a0:0c:40:a9:67:ac:3a:0a:7c:a9:
2b:8a:17:85:3b:b8:9c:51:f4:e0:c0:d0:6f:c9:36:0f:70:7a:
93:5d:52:ff:3f:64:d5:e0:6f:d8:f1:54:1a:79:78:36:2d:33:
6c:f3:74:33:54:f0:cb:c7:cb:dd:cd:0f:e7:8b:0d:bf:f5:fa:
d4:1f:b4:3e:75:0a:13:65:b0:3d:1c:d0:48:61:b0:9e:57:4c:
24:60:19:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:33:19 2024 by rpki-client on console-ams.rpki-client.org