Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/_vpwKHt7V9dtDzbmelklkk6fMpM.roa
File: _vpwKHt7V9dtDzbmelklkk6fMpM.roa (raw, json)
Hash identifier: dxCUSXLrj0K1hCcTvU8/+kmqFhAQIGRbtnV88vWi5So=
Subject key identifier: FE:FA:70:28:7B:7B:57:D7:6D:0F:36:E6:7A:59:25:92:4E:9F:32:93
Certificate issuer: /CN=8bca0edf122f4cf98b082dd4cc0d84f5ede804b9
Certificate serial: 018CCA28670D61219F3AC75605E873614219
Authority key identifier: 8B:CA:0E:DF:12:2F:4C:F9:8B:08:2D:D4:CC:0D:84:F5:ED:E8:04:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8oO3xIvTPmLCC3UzA2E9e3oBLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/_vpwKHt7V9dtDzbmelklkk6fMpM.roa
Signing time: Tue 02 Jan 2024 12:31:34 +0000
ROA not before: Tue 02 Jan 2024 12:31:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197190
IP address blocks: 92.119.213.0/24 maxlen: 24
92.119.212.0/22 maxlen: 24
92.119.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i8oO3xIvTPmLCC3UzA2E9e3oBLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:28:67:0d:61:21:9f:3a:c7:56:05:e8:73:61:42:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bca0edf122f4cf98b082dd4cc0d84f5ede804b9
Validity
Not Before: Jan 2 12:31:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fefa70287b7b57d76d0f36e67a5925924e9f3293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fa:17:f8:1a:60:94:aa:a5:e0:03:82:b1:a0:
a2:82:11:15:bb:e6:d4:6a:00:d3:4d:90:a9:05:36:
be:46:2b:41:c9:09:7c:ed:d5:9f:52:a1:b5:20:57:
f0:2e:af:b9:23:4b:19:cf:43:13:5d:b5:ce:ff:6d:
c4:66:59:c5:ce:43:9d:b6:5f:8d:d7:51:51:fa:39:
db:36:99:23:5b:99:4a:25:15:03:3e:ba:28:52:f5:
12:54:49:0c:6a:e7:76:2f:45:e0:2f:0e:82:5e:ef:
ed:09:41:8b:10:02:4b:34:c6:df:1c:92:5e:6c:3e:
5a:ad:9a:ce:c6:29:51:7d:58:f4:a2:e8:56:dd:3a:
34:d7:c6:42:9c:d5:31:74:f7:9a:e2:7e:f4:7f:85:
3f:bb:f7:e7:01:4b:89:34:43:ee:03:61:0d:0e:c1:
9c:85:fe:a4:3e:c6:a4:46:0e:5d:02:bc:b3:a7:0b:
2d:89:20:a7:8e:e7:5b:d6:db:5c:87:68:42:f0:5b:
33:df:b0:77:0f:35:2b:77:f1:6f:af:42:cf:eb:da:
d6:dd:1b:58:3b:94:3a:e3:e7:71:84:da:ae:15:96:
e2:ce:13:1e:24:2f:36:f7:e9:e8:fc:70:8d:22:10:
76:ae:0d:4b:50:3e:20:55:92:c9:ad:8c:93:69:2b:
3d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:FA:70:28:7B:7B:57:D7:6D:0F:36:E6:7A:59:25:92:4E:9F:32:93
X509v3 Authority Key Identifier:
keyid:8B:CA:0E:DF:12:2F:4C:F9:8B:08:2D:D4:CC:0D:84:F5:ED:E8:04:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8oO3xIvTPmLCC3UzA2E9e3oBLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/_vpwKHt7V9dtDzbmelklkk6fMpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.212.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:c9:d6:29:66:ae:38:57:fe:10:dd:3f:6f:c4:b3:f4:13:9a:
3f:da:4f:42:35:3d:22:38:8d:07:93:5d:3a:a1:67:45:d7:30:
06:3a:d0:cf:5a:aa:a0:8e:24:e8:08:ac:16:50:aa:89:0c:6e:
2d:62:53:b3:ca:33:e6:a0:92:63:4d:5f:57:93:88:f4:68:b9:
ac:2f:90:af:0b:79:13:18:a4:64:f8:f8:f7:05:ad:4e:73:e2:
90:8a:5a:c6:7e:52:13:40:0b:61:93:70:f2:a9:9f:7e:86:ab:
56:ec:ba:37:f6:d6:3c:8c:c6:bb:fa:5a:b4:b8:a1:7f:c9:ae:
4d:2f:84:5d:8e:7b:bd:d1:79:6d:93:65:05:b0:e9:89:75:b9:
5e:af:65:e8:dd:a4:d9:d2:4e:a4:62:be:9e:88:e7:44:40:60:
af:d3:2e:6e:27:24:47:96:ef:44:28:e4:57:21:07:7f:0c:0b:
ea:ee:79:d8:ea:0c:3c:a1:0f:ef:da:4f:e6:6e:cb:19:77:37:
68:41:cf:1c:c4:8c:cf:54:62:65:9b:b2:99:e7:0d:72:d1:08:
1e:49:2a:fe:55:12:b8:f9:c2:92:33:67:0a:a0:65:ec:9f:72:
88:81:90:1c:b6:42:fb:71:17:24:75:39:8e:bb:3f:92:e2:ce:
8d:ad:9d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:49:21 2024 by rpki-client on console-ams.rpki-client.org