Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/VkvgihfWCMWJuaBJy7bDmm0jiy0.roa
File: VkvgihfWCMWJuaBJy7bDmm0jiy0.roa (raw, json)
Hash identifier: SPEIoK470tqNLzjso558g2o4v4WUZNQx2vO5FJsOwKQ=
Subject key identifier: 56:4B:E0:8A:17:D6:08:C5:89:B9:A0:49:CB:B6:C3:9A:6D:23:8B:2D
Certificate issuer: /CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf
Certificate serial: 018DC1E5893C405B4B5FB9D125BD437A6B75
Authority key identifier: 5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/VkvgihfWCMWJuaBJy7bDmm0jiy0.roa
Signing time: Mon 19 Feb 2024 15:04:22 +0000
ROA not before: Mon 19 Feb 2024 15:04:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44709
IP address blocks: 80.244.173.0/24 maxlen: 24
80.244.174.0/24 maxlen: 24
80.244.175.0/24 maxlen: 24
185.106.128.0/24 maxlen: 24
185.106.129.0/24 maxlen: 24
185.106.130.0/24 maxlen: 24
185.106.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c1:e5:89:3c:40:5b:4b:5f:b9:d1:25:bd:43:7a:6b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf
Validity
Not Before: Feb 19 15:04:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=564be08a17d608c589b9a049cbb6c39a6d238b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:24:3b:4c:c2:6e:22:d3:1b:50:df:50:86:02:
f8:07:dc:8f:60:06:b6:da:a0:73:8a:7e:07:13:87:
70:c8:0a:a0:40:84:d0:fd:36:e7:72:30:7a:e7:ef:
74:a3:31:f3:4e:f5:33:2c:bc:04:1f:63:ce:d0:4a:
5e:ad:e5:9a:d3:9d:40:75:19:ac:b8:06:5c:01:54:
90:24:d2:06:a0:e5:41:fc:44:12:fa:8c:3a:39:13:
78:db:c5:58:e1:58:80:78:8f:bd:f7:b5:d1:da:42:
60:48:5a:ce:6a:34:a2:18:1f:cc:22:6f:95:eb:e3:
d3:8d:69:1c:35:4d:c6:de:f0:bb:e4:70:60:d1:1c:
f4:d7:de:42:bc:71:fe:ce:da:99:45:34:c8:ab:34:
ad:32:02:c8:59:a1:a5:34:9f:64:f2:e8:db:5d:3d:
57:03:94:c1:f4:08:a3:bd:0b:7f:1e:c9:28:c0:eb:
e9:22:f0:36:37:e8:f8:40:a1:6f:51:5c:bc:83:16:
12:b6:28:9f:dd:ff:22:31:c1:45:5a:2d:aa:8d:d5:
c6:57:b5:79:79:f6:20:83:c9:10:73:5f:18:39:1b:
ff:9b:8b:2f:ec:d8:31:bf:d0:7e:54:ac:b8:78:49:
b0:c4:fa:ae:ca:39:9c:e9:d2:69:2f:96:e5:c4:8f:
38:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:4B:E0:8A:17:D6:08:C5:89:B9:A0:49:CB:B6:C3:9A:6D:23:8B:2D
X509v3 Authority Key Identifier:
keyid:5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/VkvgihfWCMWJuaBJy7bDmm0jiy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.244.173.0-80.244.175.255
185.106.128.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:25:72:c6:2c:6d:b8:f2:d9:c7:a1:0f:0c:54:62:f3:90:5f:
95:85:4f:05:ef:f8:dc:70:d1:98:f3:ea:07:da:c7:1f:dc:6d:
bd:ef:db:db:17:63:18:11:ef:75:a7:da:e7:e2:2a:55:80:9e:
e4:ac:cf:03:a8:b1:16:5b:74:54:3e:78:3f:51:ea:ad:ac:58:
f6:ac:2a:d5:a9:fb:eb:26:2a:cf:3b:ad:c8:7e:55:c6:de:b6:
31:b6:46:f0:33:5d:0a:a1:c4:bf:7b:1e:b0:73:77:c0:b4:9a:
e9:c6:19:48:b5:6d:e3:d2:c0:91:40:8a:a7:ef:db:9a:f7:6f:
d7:18:aa:88:38:ce:77:9f:1c:6a:4d:5e:12:1e:21:d6:a5:67:
ff:35:95:01:7f:29:3a:20:c4:bd:2e:4a:5a:62:06:03:a8:e4:
da:a4:b0:97:d6:3f:54:fc:d7:6a:01:57:6c:42:8f:1f:37:86:
f8:e5:a8:6c:fe:c6:3c:d7:e8:98:a6:82:08:07:6c:20:99:e3:
0c:25:19:5f:03:a9:59:94:b8:fc:6a:56:b9:27:ba:fa:91:5e:
23:cd:b7:43:69:11:fe:15:0f:05:d1:07:92:6d:af:83:ab:98:
fb:a1:02:e3:1b:fb:cf:25:ed:6c:1c:6f:fb:07:92:e6:cc:4d:
6c:df:96:1c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 1 12:51:40 2024 by rpki-client on console-ams.rpki-client.org