Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1be2f3-133c-44d5-8ac8-eb01e8a8d4b3/1/VlekCQhfMel-qQDIQFzMKgciNh8.roa
File: VlekCQhfMel-qQDIQFzMKgciNh8.roa (raw, json)
Hash identifier: S7Dy32BxrL565/E4MIXxKiySMXjDpsLCL+61l/BHXZg=
Subject key identifier: 56:57:A4:09:08:5F:31:E9:7E:A9:00:C8:40:5C:CC:2A:07:22:36:1F
Certificate issuer: /CN=13230da70232f66784730fd6c1255135b7f8d09f
Certificate serial: 018CC348C8088A61F51316B94FABB2FDCF6D
Authority key identifier: 13:23:0D:A7:02:32:F6:67:84:73:0F:D6:C1:25:51:35:B7:F8:D0:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EyMNpwIy9meEcw_WwSVRNbf40J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1be2f3-133c-44d5-8ac8-eb01e8a8d4b3/1/VlekCQhfMel-qQDIQFzMKgciNh8.roa
Signing time: Mon 01 Jan 2024 04:29:35 +0000
ROA not before: Mon 01 Jan 2024 04:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51090
IP address blocks: 185.77.192.0/22 maxlen: 24
195.43.74.0/23 maxlen: 23
2001:67c:21c::/48 maxlen: 48
2a03:5620::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1be2f3-133c-44d5-8ac8-eb01e8a8d4b3/1/EyMNpwIy9meEcw_WwSVRNbf40J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1be2f3-133c-44d5-8ac8-eb01e8a8d4b3/1/EyMNpwIy9meEcw_WwSVRNbf40J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EyMNpwIy9meEcw_WwSVRNbf40J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 23:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:c8:08:8a:61:f5:13:16:b9:4f:ab:b2:fd:cf:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13230da70232f66784730fd6c1255135b7f8d09f
Validity
Not Before: Jan 1 04:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5657a409085f31e97ea900c8405ccc2a0722361f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:aa:8c:03:a4:85:c4:ff:be:3a:69:f7:da:12:
0a:a9:e0:e2:99:eb:2a:34:e1:b8:58:f4:a9:05:cf:
c0:9a:59:ee:e3:a6:17:9d:06:af:1e:8c:5e:da:0a:
76:84:54:2e:61:2d:60:92:10:d5:57:ac:c9:af:80:
35:05:52:99:87:01:80:2c:ac:fe:be:bc:5d:dc:ac:
e7:d1:da:7a:c6:23:b7:2f:25:c7:18:88:29:f0:18:
81:4c:79:c4:68:5e:2d:f8:60:2d:6b:31:a5:3a:12:
8d:ba:9c:24:92:7a:49:c4:69:a0:c9:d5:d4:e2:98:
46:e7:12:6a:ba:73:4a:07:80:a9:3e:54:f9:0d:de:
1d:a9:4d:37:f4:d5:94:a5:71:f5:0c:f1:dc:e0:a9:
05:40:0e:a7:30:a1:cf:44:40:d4:dc:39:d4:4d:72:
5f:a7:7e:25:fe:30:08:f5:b7:cf:46:16:b8:de:1d:
d8:55:df:cb:15:70:f1:47:f7:9b:b8:89:4c:dc:00:
8f:3b:59:08:b0:99:11:2a:20:99:61:ee:03:6f:6c:
83:b4:2e:bf:76:f6:3b:0f:c5:2b:ea:2d:85:da:82:
46:08:ef:90:37:f6:13:49:32:dd:e8:a6:0e:af:73:
bf:6a:e1:f0:e5:dc:6b:03:42:be:5d:ab:f6:e9:6e:
d1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:57:A4:09:08:5F:31:E9:7E:A9:00:C8:40:5C:CC:2A:07:22:36:1F
X509v3 Authority Key Identifier:
keyid:13:23:0D:A7:02:32:F6:67:84:73:0F:D6:C1:25:51:35:B7:F8:D0:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EyMNpwIy9meEcw_WwSVRNbf40J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1be2f3-133c-44d5-8ac8-eb01e8a8d4b3/1/VlekCQhfMel-qQDIQFzMKgciNh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1be2f3-133c-44d5-8ac8-eb01e8a8d4b3/1/EyMNpwIy9meEcw_WwSVRNbf40J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.192.0/22
195.43.74.0/23
IPv6:
2001:67c:21c::/48
2a03:5620::/32
Signature Algorithm: sha256WithRSAEncryption
c9:79:7c:e2:59:d8:88:bb:49:b7:cb:44:9d:c6:a0:38:2b:aa:
db:36:af:32:b7:51:bf:07:db:38:c2:2c:1a:8a:89:05:0d:34:
ca:b1:cd:66:6c:90:39:2d:7f:6a:c1:22:e1:c8:1e:12:25:79:
bb:45:3e:37:10:bd:a7:04:d1:40:5b:75:0e:0b:16:2b:01:9b:
e7:cf:8e:8c:c4:e7:e1:c9:af:10:2a:d7:33:5d:9e:18:63:cb:
44:8f:fc:fa:5f:f6:c0:93:74:24:12:42:7c:7c:7e:9a:27:e9:
05:a9:d9:4f:07:b7:6a:8f:69:a0:04:b2:4c:64:62:df:b0:f5:
f0:f4:91:6e:a2:e3:75:d6:28:b1:f8:35:e6:7d:f4:50:e3:ef:
b0:3a:03:a5:1a:05:f6:7a:13:d0:9e:8f:a1:41:e1:c9:97:b9:
a6:3f:d0:53:e3:cb:f4:f3:fc:19:54:78:75:7c:ae:2d:a5:8c:
35:38:75:63:2a:85:62:bf:f2:8f:d3:9c:f9:29:00:e3:17:e4:
47:68:f2:ae:10:84:22:c8:16:52:4f:b5:0d:67:f5:83:fe:5c:
ce:d9:00:82:f4:39:c9:b4:18:17:0f:1c:6d:20:91:52:db:ac:
0e:e6:bc:4b:44:21:b8:ac:33:60:e9:80:2a:26:8f:b0:87:4f:
db:9f:ee:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 04:54:33 2024 by rpki-client on console-ams.rpki-client.org