Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/VlTT1dy1WFmzngAIOt6eOU4ruW0.roa
File: VlTT1dy1WFmzngAIOt6eOU4ruW0.roa (raw, json)
Hash identifier: bZrtircxafkqX3jF8nkc2hevazawX9YP7K68mamd7eg=
Subject key identifier: 56:54:D3:D5:DC:B5:58:59:B3:9E:00:08:3A:DE:9E:39:4E:2B:B9:6D
Certificate issuer: /CN=3d23758dfb6f1d43dcd64d0f0ab27ef715135952
Certificate serial: 018EE7500928CA0BA3B918A79061DD1D67C6
Authority key identifier: 3D:23:75:8D:FB:6F:1D:43:DC:D6:4D:0F:0A:B2:7E:F7:15:13:59:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PSN1jftvHUPc1k0PCrJ-9xUTWVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/VlTT1dy1WFmzngAIOt6eOU4ruW0.roa
Signing time: Tue 16 Apr 2024 14:29:25 +0000
ROA not before: Tue 16 Apr 2024 14:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1299
IP address blocks: 185.193.144.0/22 maxlen: 24
195.39.222.0/23 maxlen: 24
2a01:a780::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/PSN1jftvHUPc1k0PCrJ-9xUTWVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e7:50:09:28:ca:0b:a3:b9:18:a7:90:61:dd:1d:67:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d23758dfb6f1d43dcd64d0f0ab27ef715135952
Validity
Not Before: Apr 16 14:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5654d3d5dcb55859b39e00083ade9e394e2bb96d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0b:1a:a7:41:94:2a:48:e7:38:aa:52:1b:dc:
f4:c7:5d:ec:6b:16:4d:2a:bf:db:91:da:b1:14:12:
01:f0:86:f4:e6:23:55:2d:f5:6f:85:9f:0b:38:76:
36:5e:f2:9d:03:24:d9:67:16:be:ad:d0:d6:d7:9f:
a1:ba:99:1b:2d:64:36:55:02:68:a9:25:da:f6:f9:
08:f5:0c:ca:05:71:f8:7b:6b:8e:65:a8:b2:d0:d8:
2a:61:d3:c8:44:9d:8e:72:77:a0:f1:57:67:ca:57:
33:c0:fa:07:c9:69:35:39:f7:3d:46:e3:bc:ee:db:
4b:80:50:f6:44:38:68:21:a2:6a:c4:4c:51:86:33:
42:37:26:37:a2:b6:0c:e2:f5:bf:f4:02:d6:3f:d8:
bf:50:01:de:4c:e6:6e:78:3f:0f:b6:8e:17:aa:9e:
9d:ad:29:0f:7f:60:3f:0e:27:03:22:2c:62:05:e0:
7a:50:b2:9c:f0:42:19:3a:28:e2:33:2b:2a:0a:ca:
36:2e:c8:ab:07:5b:e0:b6:97:f6:c6:39:24:a6:c5:
09:a2:5e:72:fc:d3:0d:cc:0a:17:e9:28:1c:1c:54:
22:36:cc:96:57:ab:6c:fa:3e:a9:a1:fd:ab:06:eb:
d2:a4:bc:86:6b:82:24:fb:8a:c0:58:69:1a:ac:ac:
ed:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:54:D3:D5:DC:B5:58:59:B3:9E:00:08:3A:DE:9E:39:4E:2B:B9:6D
X509v3 Authority Key Identifier:
keyid:3D:23:75:8D:FB:6F:1D:43:DC:D6:4D:0F:0A:B2:7E:F7:15:13:59:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PSN1jftvHUPc1k0PCrJ-9xUTWVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/VlTT1dy1WFmzngAIOt6eOU4ruW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.144.0/22
195.39.222.0/23
IPv6:
2a01:a780::/32
Signature Algorithm: sha256WithRSAEncryption
3e:01:e8:af:92:6b:ec:90:2d:01:6e:d2:7a:b8:64:e4:c7:b1:
71:f1:f0:cb:12:38:85:90:e1:62:e7:b1:1a:02:9d:80:fa:70:
0f:dc:a9:b0:4d:02:b6:75:59:3f:5f:e4:1f:b2:7f:a1:68:75:
5e:00:d3:c6:61:f8:85:9b:c8:3c:68:b1:7d:ba:83:0d:f9:1d:
6f:50:b3:0b:05:52:03:00:32:04:ee:f9:d6:ca:73:1f:4a:5c:
b6:e6:da:22:9c:32:71:06:9f:8b:1d:d4:8a:7a:c4:46:15:98:
c2:93:11:73:85:93:84:c0:69:4c:0f:f2:92:f1:c3:c0:29:67:
58:92:0e:2e:f5:ee:05:54:1f:1a:7d:eb:64:bf:dc:1a:22:ba:
8b:85:b3:d2:5b:e4:5f:04:17:f5:4d:87:96:54:2c:1a:69:67:
dc:7a:40:a7:62:b2:13:94:d8:48:59:74:26:70:7d:8b:34:2a:
88:eb:35:93:9b:80:94:29:fe:3d:35:89:8e:f5:c8:8f:a0:75:
a5:0d:87:49:bd:43:04:b5:27:76:5b:f8:1c:ce:5f:cf:85:4f:
70:3f:f8:31:6e:0c:09:54:c3:d9:20:1c:d7:d6:0e:c7:a3:13:
88:f9:af:08:39:22:e0:b1:8a:e6:72:c4:15:4f:81:06:cb:2b:
8d:a3:65:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:23:00 2024 by rpki-client on console-ams.rpki-client.org