Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/Vui3Xt0p-iRTjD8FXJHG8dy80Ro.roa
File: Vui3Xt0p-iRTjD8FXJHG8dy80Ro.roa (raw, json)
Hash identifier: FLNzMhbIGUnQVzO2lDIycTcDKCFZaxbX0fdELfPqyGA=
Subject key identifier: 56:E8:B7:5E:DD:29:FA:24:53:8C:3F:05:5C:91:C6:F1:DC:BC:D1:1A
Certificate issuer: /CN=aa54c4763ea018c3dc70203d04efe71fd4b1b066
Certificate serial: 018CC649A89BCEB9BB83FB4BCD1E3A30ACBA
Authority key identifier: AA:54:C4:76:3E:A0:18:C3:DC:70:20:3D:04:EF:E7:1F:D4:B1:B0:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/Vui3Xt0p-iRTjD8FXJHG8dy80Ro.roa
Signing time: Mon 01 Jan 2024 18:29:25 +0000
ROA not before: Mon 01 Jan 2024 18:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59395
IP address blocks: 185.136.73.0/24 maxlen: 24
185.136.74.0/23 maxlen: 24
5.175.61.0/24 maxlen: 24
5.175.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jul 2024 04:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:a8:9b:ce:b9:bb:83:fb:4b:cd:1e:3a:30:ac:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa54c4763ea018c3dc70203d04efe71fd4b1b066
Validity
Not Before: Jan 1 18:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56e8b75edd29fa24538c3f055c91c6f1dcbcd11a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:43:d6:8b:1d:7a:9a:46:ff:41:a6:a3:f6:a0:
63:95:ae:74:81:7b:c5:f1:6c:94:12:8b:98:66:9b:
d8:92:d4:b4:9e:1a:b1:5b:6e:76:13:5c:6f:a5:95:
55:19:6e:16:9a:82:de:fa:b4:6e:4c:01:23:28:5d:
03:96:d5:e0:dd:07:53:fd:3b:ca:59:73:bc:8e:e4:
44:9f:8e:d1:33:75:a8:d5:49:6e:ef:d9:17:c8:03:
2b:38:2a:b0:52:db:cc:5c:58:af:82:b6:24:20:8d:
93:1c:d5:f3:83:ba:e1:5a:9e:7a:c2:53:7a:2d:87:
01:35:82:e2:89:93:39:4e:ea:2c:2f:17:90:0c:89:
38:8f:98:bc:e6:39:9b:4b:1e:d5:28:50:5d:82:2e:
84:cb:9d:db:e1:82:70:ce:1f:56:bc:62:1c:a6:f7:
bf:a0:6d:bf:57:6c:3c:f2:bc:11:98:9b:5b:72:9b:
c8:ef:6c:e2:74:4b:16:ba:ea:58:31:99:f4:92:16:
17:fa:8e:25:88:00:61:92:9b:3b:16:c3:9c:a9:12:
80:23:8f:c6:5d:6d:80:24:34:c8:d3:fe:b0:25:52:
e2:61:4b:c4:f2:c3:cc:21:53:f6:d8:02:40:bd:f0:
c2:25:7a:71:6f:72:5c:d9:aa:37:4f:bb:11:05:97:
1a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E8:B7:5E:DD:29:FA:24:53:8C:3F:05:5C:91:C6:F1:DC:BC:D1:1A
X509v3 Authority Key Identifier:
keyid:AA:54:C4:76:3E:A0:18:C3:DC:70:20:3D:04:EF:E7:1F:D4:B1:B0:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/Vui3Xt0p-iRTjD8FXJHG8dy80Ro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.59.0/24
5.175.61.0/24
185.136.73.0-185.136.75.255
Signature Algorithm: sha256WithRSAEncryption
1a:4f:7b:d5:42:3d:b5:1a:99:1a:7e:e0:35:22:e6:bf:cc:94:
5b:a1:50:48:a5:53:4b:a3:4b:d0:c3:64:bd:d9:2d:db:e5:a0:
d2:2e:7e:f3:29:23:e2:b1:37:de:f7:bf:9f:1c:a7:b4:de:78:
8b:d5:c7:03:a6:d0:35:1b:2c:21:56:8f:db:fb:c4:61:17:50:
47:86:35:b6:92:8a:48:64:61:93:a1:15:e0:67:79:11:29:c6:
dc:a4:b0:87:74:ad:89:05:56:c4:5f:e8:54:af:56:dc:67:c2:
06:fc:ac:2f:a8:de:a2:65:fd:e3:96:e0:7a:07:e8:ac:5e:70:
48:43:79:57:b3:5a:f9:96:d8:f5:61:71:9b:0f:e1:f8:ee:2a:
48:50:be:78:ff:4f:f9:30:08:62:b7:fb:07:cc:db:bf:73:2a:
76:a4:09:f7:7e:20:3c:7c:99:79:d2:b6:6e:6c:a4:d8:c3:e2:
19:67:94:77:de:9b:fd:db:98:81:51:a8:0f:ea:53:3b:6e:cb:
49:69:b9:4e:d6:74:52:94:5f:76:5b:5f:ff:85:46:03:e5:42:
1f:d1:f7:50:bd:97:22:ef:d6:5c:ed:91:99:21:1c:15:82:86:
16:fb:b0:a3:ca:4c:47:5f:32:1a:54:15:28:0c:2c:d1:a6:20:
de:b0:90:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 09:29:55 2024 by rpki-client on console-ams.rpki-client.org