Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/VmCjzdlSK4pGZmouNiQYwMklcPI.roa
File: VmCjzdlSK4pGZmouNiQYwMklcPI.roa (raw, json)
Hash identifier: Cl401h5h/BET638OXkM9Wf30y6YZE4Qx/crQ0tTbpCw=
Subject key identifier: 56:60:A3:CD:D9:52:2B:8A:46:66:6A:2E:36:24:18:C0:C9:25:70:F2
Certificate issuer: /CN=340e53014bf038ade0d77ae678ff6df34ca53dc0
Certificate serial: 018D641F6805C9B0E3134C81185E5815CB9F
Authority key identifier: 34:0E:53:01:4B:F0:38:AD:E0:D7:7A:E6:78:FF:6D:F3:4C:A5:3D:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NA5TAUvwOK3g13rmeP9t80ylPcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/VmCjzdlSK4pGZmouNiQYwMklcPI.roa
Signing time: Thu 01 Feb 2024 10:03:16 +0000
ROA not before: Thu 01 Feb 2024 10:03:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60191
IP address blocks: 91.223.31.0/24 maxlen: 24
176.123.60.0/23 maxlen: 23
185.47.64.0/23 maxlen: 23
185.47.66.0/23 maxlen: 23
185.206.112.0/22 maxlen: 22
185.223.53.0/24 maxlen: 24
193.162.104.0/24 maxlen: 24
213.108.112.0/21 maxlen: 21
2a01:8a60::/32 maxlen: 32
2a01:8a60:100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NA5TAUvwOK3g13rmeP9t80ylPcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Jun 2024 07:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:64:1f:68:05:c9:b0:e3:13:4c:81:18:5e:58:15:cb:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340e53014bf038ade0d77ae678ff6df34ca53dc0
Validity
Not Before: Feb 1 10:03:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5660a3cdd9522b8a46666a2e362418c0c92570f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:95:71:bd:02:a2:51:79:52:c4:e1:31:5a:66:
37:46:fe:ae:ae:9b:30:2e:82:9f:e3:c0:ac:48:e3:
65:5a:e9:1e:f9:cc:03:d6:e6:35:f5:98:76:d6:ae:
37:0a:a5:a7:e0:69:c2:0e:ea:b5:1c:d1:10:be:97:
f2:92:8c:fc:c6:e9:9c:fb:2f:c8:7b:0b:93:48:0b:
63:df:95:da:a5:72:0b:6b:b5:9d:c6:15:cb:27:62:
ca:96:db:32:23:63:2f:e6:d6:dc:56:84:65:7e:de:
67:c9:a0:f3:f1:21:fd:26:6f:af:bc:d0:74:18:fd:
be:a0:84:30:ff:c4:30:ea:a1:6e:eb:48:d0:80:b2:
7b:13:14:67:e0:89:40:27:7d:c6:de:f1:21:10:a4:
a9:f3:ce:65:66:e4:f6:2e:b9:39:d8:a1:5a:84:ab:
92:b6:53:2a:a4:de:95:81:55:05:15:dd:0f:a0:f2:
e4:37:ec:c6:68:7a:69:0c:ed:65:7d:52:ab:86:ec:
7f:a2:36:02:8e:86:7d:03:e1:f5:01:47:13:65:96:
1d:6e:11:f3:7c:47:0d:f0:b7:dd:6f:ef:a5:8f:81:
c8:b1:0f:e7:59:3d:f5:84:7c:0d:26:37:ea:31:d9:
bc:58:51:1e:28:94:fb:44:55:cc:de:6f:68:61:c1:
1d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:60:A3:CD:D9:52:2B:8A:46:66:6A:2E:36:24:18:C0:C9:25:70:F2
X509v3 Authority Key Identifier:
keyid:34:0E:53:01:4B:F0:38:AD:E0:D7:7A:E6:78:FF:6D:F3:4C:A5:3D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NA5TAUvwOK3g13rmeP9t80ylPcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/VmCjzdlSK4pGZmouNiQYwMklcPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.31.0/24
176.123.60.0/23
185.47.64.0/22
185.206.112.0/22
185.223.53.0/24
193.162.104.0/24
213.108.112.0/21
IPv6:
2a01:8a60::/32
Signature Algorithm: sha256WithRSAEncryption
2b:ff:ab:39:c3:0a:69:14:ff:b2:5d:47:d6:65:05:16:7c:c5:
aa:cd:06:29:5d:d1:e3:41:e4:3b:61:8a:74:35:c4:51:cc:7a:
ec:ce:ba:a4:85:df:87:6a:6a:35:2d:8e:64:32:50:ba:70:70:
70:71:72:3c:ad:a0:df:5d:24:7e:39:f5:06:ad:36:99:4e:f9:
c7:c4:60:07:e1:7b:7d:35:fd:7b:cd:8b:49:54:99:4f:c0:3c:
c3:dc:17:f7:d9:53:4f:54:58:27:44:23:23:18:fe:64:8a:dd:
78:f2:64:e6:be:ce:99:38:d9:fa:c6:c9:46:5a:3b:ac:7f:54:
0c:c0:ad:1d:88:51:df:3a:1a:5a:2b:8d:d5:e9:68:93:9d:4f:
1d:7a:27:8f:35:aa:89:d1:67:95:e2:f6:64:5b:8f:6c:7a:4c:
ab:1d:1d:38:b9:3d:8e:73:bb:2f:1e:73:bb:4b:01:3f:03:fa:
08:6c:2c:30:b0:9a:e8:d0:bc:e7:8e:17:4f:0f:70:b9:47:3d:
a8:6d:de:97:62:22:00:4a:a1:18:a1:ff:8b:9c:d1:cd:1d:87:
d2:ae:d6:3e:86:55:43:fb:f6:dc:90:b6:4f:8c:d3:d6:d5:65:
cb:a7:cf:dd:6a:1c:76:60:a8:9e:0d:a0:c0:c7:8a:e4:f1:10:
d5:49:2c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 12:03:23 2024 by rpki-client on console-fra.rpki-client.org