Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/VpkumwRpPkerIRTvGF2Z0yKaUUI.roa
File: VpkumwRpPkerIRTvGF2Z0yKaUUI.roa (raw, json)
Hash identifier: rkI1AqxbfcLx/cSJqHBjlWxNS74Qh9/B/JvQrdVgtGY=
Subject key identifier: 56:99:2E:9B:04:69:3E:47:AB:21:14:EF:18:5D:99:D3:22:9A:51:42
Certificate issuer: /CN=0a77196340d2144b8ca7b0778984bb04bc1cb378
Certificate serial: 018CC34915D85DA9A3AFC91636445B6A61CE
Authority key identifier: 0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/VpkumwRpPkerIRTvGF2Z0yKaUUI.roa
Signing time: Mon 01 Jan 2024 04:29:56 +0000
ROA not before: Mon 01 Jan 2024 04:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8641
IP address blocks: 185.212.90.0/24 maxlen: 24
185.212.88.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:15:d8:5d:a9:a3:af:c9:16:36:44:5b:6a:61:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a77196340d2144b8ca7b0778984bb04bc1cb378
Validity
Not Before: Jan 1 04:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56992e9b04693e47ab2114ef185d99d3229a5142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8b:ab:0a:9d:11:db:ef:c4:99:60:2d:2d:21:
85:7b:77:c3:8d:7d:b0:01:24:41:a2:2d:f6:ef:99:
be:3c:85:c6:9e:08:0c:99:a7:42:a4:94:4f:ae:ad:
95:cb:61:7a:b2:50:46:2a:b7:91:ec:87:a4:b8:65:
96:3e:f4:ed:ea:b5:61:da:99:3d:e4:2e:ae:60:e0:
b0:3a:d4:ca:c7:4b:39:53:e5:13:ff:57:4f:02:aa:
d5:1c:d0:fb:bc:1f:29:f3:77:63:d9:3c:c2:37:58:
b9:e8:23:73:b5:24:fa:d9:28:23:d8:7f:4e:74:76:
8f:8a:85:df:78:7b:96:e8:f6:8b:cf:00:5e:f9:c3:
28:8d:89:77:5a:1f:47:fa:b8:0d:80:24:cd:5a:7f:
3b:2e:4c:2b:b0:53:29:a6:e7:74:c1:55:e2:75:cd:
80:d4:77:2b:04:d9:04:21:fd:44:cb:53:0c:66:fd:
85:4d:55:02:81:2a:24:d4:c1:18:ab:c9:f1:7d:c4:
11:25:17:a9:ac:1b:6d:86:b0:3a:1c:76:ff:15:47:
97:0a:79:96:60:c0:94:dd:8a:b2:1d:ee:4c:fd:8c:
b2:29:83:39:e3:c7:16:79:e2:e3:1a:94:c6:4d:54:
4e:df:51:03:ca:38:13:92:b1:83:a0:8b:2a:17:a4:
f8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:99:2E:9B:04:69:3E:47:AB:21:14:EF:18:5D:99:D3:22:9A:51:42
X509v3 Authority Key Identifier:
keyid:0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/VpkumwRpPkerIRTvGF2Z0yKaUUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.88.0-185.212.90.255
Signature Algorithm: sha256WithRSAEncryption
67:e3:2a:82:da:7f:e7:3e:f4:53:21:8b:de:29:2b:ee:d3:1e:
1e:04:34:bc:b9:fa:d8:06:93:c6:07:e4:b5:82:f8:cc:67:ba:
70:ac:bb:7e:e1:41:fe:be:59:b7:ee:9b:96:9a:1c:45:c0:20:
27:6b:ac:0a:65:67:68:62:0d:8e:16:9d:dc:36:3e:54:ee:cd:
5f:1a:69:37:0c:e8:5e:a1:75:0e:ff:b9:af:f8:25:4a:e7:97:
2e:9a:1b:fe:e4:fb:06:0a:93:9c:5d:ef:7c:50:0c:91:6c:de:
df:6b:d7:27:8f:fb:28:da:48:d1:c8:f3:75:e7:e0:55:d5:9c:
dc:75:42:d3:6f:2a:bb:01:d8:1d:23:81:86:f9:6c:6f:25:94:
51:86:1b:9b:7c:dc:44:42:ed:6f:52:14:86:9e:ed:2b:bb:4a:
b1:7d:82:68:f1:67:f8:17:62:73:f5:3d:0b:80:3f:b6:1c:bd:
fa:f4:98:a1:7e:ac:d8:64:7c:37:8b:da:20:bf:1b:3e:58:bf:
b9:bf:73:04:06:73:4e:6e:38:39:c2:43:c0:3f:86:5e:bf:10:
99:78:92:ca:a8:2a:7f:65:d1:1e:2a:8d:f3:d7:58:28:f3:75:
13:17:30:74:71:c4:20:95:77:df:02:60:da:28:85:27:22:94:
21:3f:c7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:15:07 2024 by rpki-client on console-fra.rpki-client.org