Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/Vv4qLwWrZeCjeqnYhSMW6eHQq-o.roa
File: Vv4qLwWrZeCjeqnYhSMW6eHQq-o.roa (raw, json)
Hash identifier: gpV9ocq4DFg7TBqenD0QenOolOAw3ImLgiCuQW0mVf4=
Subject key identifier: 56:FE:2A:2F:05:AB:65:E0:A3:7A:A9:D8:85:23:16:E9:E1:D0:AB:EA
Certificate issuer: /CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3
Certificate serial: 018CC4252E5A6F69C0C4C2738BA77EE18BD0
Authority key identifier: 30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/Vv4qLwWrZeCjeqnYhSMW6eHQq-o.roa
Signing time: Mon 01 Jan 2024 08:30:20 +0000
ROA not before: Mon 01 Jan 2024 08:30:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57809
IP address blocks: 109.74.84.0/23 maxlen: 23
109.74.91.0/24 maxlen: 24
85.14.166.0/23 maxlen: 23
85.14.174.0/24 maxlen: 24
85.14.178.0/23 maxlen: 23
217.171.23.0/24 maxlen: 24
217.171.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 07:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:2e:5a:6f:69:c0:c4:c2:73:8b:a7:7e:e1:8b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3
Validity
Not Before: Jan 1 08:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56fe2a2f05ab65e0a37aa9d8852316e9e1d0abea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7e:28:42:d5:4e:3e:36:6a:26:7a:c5:a6:48:
78:ba:c4:e6:35:57:98:a1:d7:d7:07:14:a6:38:42:
13:85:e0:ac:74:bc:e4:1a:8c:40:50:4a:c5:e4:f9:
f7:47:24:e5:52:fc:f7:21:c4:07:2f:60:d9:88:72:
41:d4:6d:ba:e6:71:aa:25:07:1a:db:5f:0f:ce:bd:
3d:05:fd:8d:9d:3b:da:b8:46:ec:6d:0e:e4:c4:91:
bc:53:51:51:28:7b:b3:15:9c:2a:97:0b:75:d1:a0:
5f:f4:37:92:23:7b:10:dd:3c:af:2f:bb:0d:25:b4:
51:3c:41:ce:4c:4f:ee:6f:4d:a0:8d:7a:a0:fb:11:
ff:13:a3:7e:77:e8:5c:54:3c:58:fe:63:8a:70:c9:
5d:c5:c4:05:d7:ef:9f:75:d4:00:36:7a:1d:90:9e:
5b:88:31:9c:ce:03:9c:16:2e:13:15:2b:37:27:8d:
48:f8:7b:b1:ce:97:1a:44:c3:1b:17:83:2b:54:af:
4e:94:7f:76:5b:f5:40:84:3f:e8:78:9d:8f:4f:09:
9a:49:99:63:11:33:19:ba:a0:25:d6:a4:ac:aa:75:
b6:51:f9:0d:6e:5c:09:d5:d0:3e:d5:b7:62:9b:02:
56:92:b9:56:be:41:b4:3c:5d:c0:9f:53:74:b0:38:
5a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:FE:2A:2F:05:AB:65:E0:A3:7A:A9:D8:85:23:16:E9:E1:D0:AB:EA
X509v3 Authority Key Identifier:
keyid:30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/Vv4qLwWrZeCjeqnYhSMW6eHQq-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.14.166.0/23
85.14.174.0/24
85.14.178.0/23
109.74.84.0/23
109.74.91.0/24
217.171.23.0/24
217.171.28.0/24
Signature Algorithm: sha256WithRSAEncryption
49:93:85:cc:07:cf:24:f9:a4:4c:80:9c:40:99:5d:76:a0:a0:
c3:7f:00:24:c1:47:10:26:c9:83:60:77:9c:b1:4f:14:42:89:
c0:ab:34:71:09:fa:7a:80:b4:c0:83:21:36:41:16:c6:eb:0a:
fc:cd:ec:4a:b4:7b:b0:dc:54:7f:04:4c:11:5f:c3:61:7a:f1:
95:40:2f:f9:7c:e3:b0:52:4d:54:10:02:07:e9:bf:a9:ae:2f:
93:7a:c7:7a:80:bb:14:07:8f:3c:b6:38:e7:07:16:ad:d6:89:
9b:f9:1b:0d:9f:2a:df:92:b9:ec:51:fc:9f:6a:ae:6d:d5:2d:
83:0e:42:8d:7e:2c:61:95:70:56:1f:38:e1:e0:d1:18:02:31:
f7:56:45:52:43:ed:13:5a:54:ea:3c:40:54:59:99:c3:2f:46:
85:63:0c:69:9f:77:04:87:68:ca:9f:4c:98:14:35:08:d7:ad:
f9:77:3f:47:b2:08:d8:93:27:d6:59:8f:00:48:29:d4:a6:38:
6d:bf:f2:76:91:6b:96:85:8d:ac:83:42:f7:0e:15:1c:f2:47:
00:a0:9a:bc:ef:5a:e1:38:a0:03:d7:de:54:60:2a:4c:24:0b:
fc:74:d2:05:ba:3a:92:ab:b7:8a:e2:34:55:8e:5d:0e:6f:3a:
1e:66:b6:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 15:54:49 2024 by rpki-client on console-ams.rpki-client.org