Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/Vp6211fIU30mI_Ut7qlE6UATA_I.roa
File: Vp6211fIU30mI_Ut7qlE6UATA_I.roa (raw, json)
Hash identifier: kb511HLZZkuEuiRPKRHyXOX0IljJBtlSH5ouYiQIev0=
Subject key identifier: 56:9E:B6:D7:57:C8:53:7D:26:23:F5:2D:EE:A9:44:E9:40:13:03:F2
Certificate issuer: /CN=a98cfb9b5f445fd2f6ccfa179c37c53449b2af06
Certificate serial: 018EBDA29529FCC61A9F5049E3157325E479
Authority key identifier: A9:8C:FB:9B:5F:44:5F:D2:F6:CC:FA:17:9C:37:C5:34:49:B2:AF:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYz7m19EX9L2zPoXnDfFNEmyrwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/Vp6211fIU30mI_Ut7qlE6UATA_I.roa
Signing time: Mon 08 Apr 2024 12:15:32 +0000
ROA not before: Mon 08 Apr 2024 12:15:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48091
IP address blocks: 185.140.236.0/23 maxlen: 24
195.93.216.0/23 maxlen: 24
2001:67c:256c::/48 maxlen: 48
2a05:37c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYz7m19EX9L2zPoXnDfFNEmyrwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:bd:a2:95:29:fc:c6:1a:9f:50:49:e3:15:73:25:e4:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a98cfb9b5f445fd2f6ccfa179c37c53449b2af06
Validity
Not Before: Apr 8 12:15:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=569eb6d757c8537d2623f52deea944e9401303f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7f:56:e0:db:dc:6a:57:0f:3a:9e:9e:67:f0:
c6:28:0a:22:3a:1d:a9:ba:db:c0:06:2c:c9:a3:59:
60:e6:20:36:e4:9f:94:0d:16:db:6b:98:b5:9d:ab:
21:b7:bc:e0:4d:1c:1d:4b:f1:5e:33:cc:c6:5e:57:
37:c5:46:bd:97:42:75:2e:fe:09:c5:1a:a4:b4:04:
b5:73:55:dd:2d:b5:f3:51:c9:f0:b7:3c:fb:6b:26:
cc:2d:50:bc:17:76:e4:ff:a9:7f:be:42:00:3d:50:
17:50:ed:ff:da:94:51:3a:52:6b:e8:2c:b5:34:b2:
29:a2:32:30:f8:ed:28:e2:32:20:fd:45:83:48:ba:
b7:2c:ad:ed:c0:a8:d7:f9:f4:71:90:f2:b4:bc:f5:
ad:7b:ce:f6:f6:51:fe:d5:b9:e5:1f:e1:a3:46:fc:
df:6c:4f:0d:08:bc:95:ec:e4:8b:10:20:19:82:d8:
12:f9:cb:19:f1:25:20:0e:99:1f:6c:40:83:d5:ee:
30:c4:d3:5c:32:a8:3e:32:3c:fc:cd:46:02:01:d4:
87:c6:06:db:49:d7:87:d8:b0:fb:54:6b:12:13:de:
47:e4:36:df:0b:06:47:b6:49:e1:8e:84:31:b1:8c:
e0:26:76:a5:b7:26:ce:0d:fd:16:f6:4f:19:cb:b2:
e3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:9E:B6:D7:57:C8:53:7D:26:23:F5:2D:EE:A9:44:E9:40:13:03:F2
X509v3 Authority Key Identifier:
keyid:A9:8C:FB:9B:5F:44:5F:D2:F6:CC:FA:17:9C:37:C5:34:49:B2:AF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYz7m19EX9L2zPoXnDfFNEmyrwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/Vp6211fIU30mI_Ut7qlE6UATA_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.236.0/23
195.93.216.0/23
IPv6:
2001:67c:256c::/48
2a05:37c0::/32
Signature Algorithm: sha256WithRSAEncryption
38:98:44:a8:d2:c6:26:d7:d6:03:dd:3e:55:d1:c4:ff:0b:0d:
7b:c9:fc:11:8a:9a:58:f9:8e:41:a5:bf:5a:9a:22:5c:fb:0b:
33:00:7c:c4:79:92:e8:7d:71:0a:ab:83:ec:66:70:83:8b:ef:
dd:6c:fa:68:bb:9b:59:b5:0f:77:2f:8f:33:af:e2:87:59:13:
13:c2:c3:86:c8:a4:15:73:be:88:90:23:e8:a8:12:2e:49:61:
a7:40:12:c2:6d:87:f4:09:d5:12:d5:bf:af:68:d8:04:05:b3:
eb:10:b7:44:bd:29:b2:b1:35:d4:6f:3a:3e:94:b7:a5:31:e3:
89:a9:3c:0b:19:a8:9c:ea:00:b4:49:38:dc:4a:53:46:e5:fc:
2a:5c:cc:3d:6b:c5:f8:b1:da:1b:94:e1:40:3b:bd:1f:5a:47:
38:0b:f3:6e:f0:75:7f:64:03:ac:c5:63:f6:a2:a4:82:52:09:
00:ef:af:43:a1:49:33:14:18:99:6a:71:8b:c0:e2:f4:23:f7:
04:4b:4f:42:f5:ac:e1:c4:98:56:24:ee:f7:5d:2f:a6:ba:9d:
cb:60:b2:a8:65:17:d0:29:b1:0c:18:8c:d8:95:03:c3:21:35:
bf:7e:56:0e:3f:d3:73:b6:8a:42:af:8e:fe:50:48:86:85:6f:
89:f4:34:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:18:00 2024 by rpki-client on console-ams.rpki-client.org