Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/VTNWWfYgyBo_Wd63nP4fkIvYeOw.roa
File: VTNWWfYgyBo_Wd63nP4fkIvYeOw.roa (raw, json)
Hash identifier: fsfLulVXsuccpU5oIdYk+fXCYRr6f8WVRg6xfZETB0A=
Subject key identifier: 55:33:56:59:F6:20:C8:1A:3F:59:DE:B7:9C:FE:1F:90:8B:D8:78:EC
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018CC56E0B04277325EE39CCF17CEC63510A
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/VTNWWfYgyBo_Wd63nP4fkIvYeOw.roa
Signing time: Mon 01 Jan 2024 14:29:32 +0000
ROA not before: Mon 01 Jan 2024 14:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56541
IP address blocks: 5.8.80.0/23 maxlen: 23
5.8.84.0/23 maxlen: 23
5.8.82.0/23 maxlen: 23
5.8.86.0/23 maxlen: 23
31.44.176.0/23 maxlen: 23
31.44.178.0/23 maxlen: 23
31.44.180.0/23 maxlen: 23
31.44.182.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 May 2024 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:0b:04:27:73:25:ee:39:cc:f1:7c:ec:63:51:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 1 14:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55335659f620c81a3f59deb79cfe1f908bd878ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:25:88:80:b4:a2:f6:72:6f:c1:6c:1c:cc:e9:
2f:53:73:7c:97:e4:7a:94:57:4d:c6:7b:cd:8e:d4:
21:ca:aa:11:e5:43:f4:cd:76:11:42:8c:2a:22:3c:
94:2a:0f:fe:94:01:fc:b1:67:44:16:ff:75:d3:c1:
89:d2:09:af:2a:2d:27:7b:39:95:f9:51:3e:ef:8e:
ad:43:6c:8b:4f:a5:5a:d4:6d:36:2a:cf:d3:79:9d:
ac:05:f7:36:90:e8:78:41:b8:c9:b4:8a:e1:35:c8:
ac:df:e3:0c:a0:c1:d2:d0:22:18:f5:0c:35:79:80:
76:68:57:24:96:66:ec:50:75:6a:50:2b:43:43:b5:
94:99:5b:61:89:fb:2e:97:88:b2:91:32:e3:f0:53:
ab:83:0f:5e:41:fc:71:55:b3:8c:a5:85:2c:c4:58:
81:68:0d:45:d5:ce:8b:bd:5f:9b:7d:6c:08:d2:ad:
59:68:35:68:f3:a3:41:68:b7:23:9e:1e:15:f1:e7:
54:eb:5c:2c:33:dc:4b:4a:8d:0a:8d:83:4e:1d:a3:
80:e8:35:5a:1b:de:e6:84:5f:5e:f0:e7:83:45:a3:
08:3a:c9:1f:5e:56:9b:69:bd:e1:9a:25:50:6e:cd:
72:c8:14:92:ba:ff:26:d3:b8:7a:68:0b:a5:01:d2:
93:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:33:56:59:F6:20:C8:1A:3F:59:DE:B7:9C:FE:1F:90:8B:D8:78:EC
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/VTNWWfYgyBo_Wd63nP4fkIvYeOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.80.0/21
31.44.176.0/21
Signature Algorithm: sha256WithRSAEncryption
c3:1e:5f:1f:7f:60:18:9b:64:a9:c8:53:c7:db:f0:5b:3e:8b:
85:3d:3d:8f:77:76:5f:b9:5c:f2:3a:18:08:e4:7c:2e:47:d0:
46:3f:b0:3f:8d:40:57:19:5e:d1:54:6d:1c:8a:45:d0:aa:fe:
7b:e0:41:2d:1c:97:9f:ee:e4:ae:fd:b3:78:02:28:42:f0:71:
c7:92:29:ce:0d:6f:fc:8e:bf:e4:e2:07:cc:9d:6b:1e:a1:97:
68:15:4d:d2:0a:4f:ec:81:a2:80:c4:b7:3b:9e:a3:a0:79:e9:
c7:0e:53:e8:b7:3d:b7:16:6a:0a:48:3c:07:23:8d:29:5d:4a:
bb:64:5a:83:39:6e:36:25:a8:9f:b9:6e:70:2d:fc:84:85:65:
0b:16:73:17:95:69:25:ec:f7:7a:4c:a1:6a:ba:ec:dc:67:6a:
aa:18:7b:07:06:6f:97:f6:b5:f3:2a:3e:58:67:e4:c0:7e:c9:
46:6b:a5:52:e0:6e:f8:bd:c8:2c:7f:da:12:ea:cf:c4:ca:b7:
fa:5a:7a:19:44:83:5f:f6:96:5d:ad:83:6c:72:66:23:3c:bf:
36:f3:8d:2f:10:59:ee:fe:0f:07:43:d7:c6:e6:97:68:73:c1:
4e:7f:7c:19:5b:34:9e:2b:68:f4:eb:e9:61:73:ab:48:2c:58:
c1:72:9e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 09:56:38 2024 by rpki-client on console-ams.rpki-client.org