Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/vV-VPQkRdICya6fO6oFsvnDPChg.roa
File: vV-VPQkRdICya6fO6oFsvnDPChg.roa (raw, json)
Hash identifier: tSPg79buz7fTEJCA31e0kvPy3b39rIpfTRoyFhb5wwQ=
Subject key identifier: BD:5F:95:3D:09:11:74:80:B2:6B:A7:CE:EA:81:6C:BE:70:CF:0A:18
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 018CC56E146925B5C45BC3F0B783C557366F
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/vV-VPQkRdICya6fO6oFsvnDPChg.roa
Signing time: Mon 01 Jan 2024 14:29:34 +0000
ROA not before: Mon 01 Jan 2024 14:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202147
IP address blocks: 178.19.40.0/22 maxlen: 22
178.19.40.0/23 maxlen: 23
178.19.42.0/23 maxlen: 23
185.229.216.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 04:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:14:69:25:b5:c4:5b:c3:f0:b7:83:c5:57:36:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 1 14:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd5f953d09117480b26ba7ceea816cbe70cf0a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:55:7d:56:77:e3:4f:ae:89:6d:66:4e:83:d0:
e9:71:00:fb:3d:90:e1:7b:36:c2:e2:79:03:f6:4c:
64:10:a2:a3:34:9a:ad:5b:65:4a:a2:0b:bc:32:62:
38:30:b1:8c:8e:e0:ec:b0:21:6f:96:2e:89:c5:d3:
bf:2f:4d:cf:37:e2:66:8f:e9:c7:1f:c4:2d:7a:b8:
50:e2:e4:33:23:f4:ab:be:03:8c:63:47:f2:1a:af:
d1:d3:4c:d2:5e:d4:b4:cc:c6:e1:2a:39:44:6b:64:
a3:e6:38:d0:c6:0d:3e:2d:71:f0:b5:63:bc:fe:ea:
a1:77:1b:11:91:77:b0:07:bb:16:53:29:f0:a7:c8:
62:91:3d:49:65:5a:a6:be:26:d5:b3:0f:61:32:f4:
85:7a:3e:fa:8a:9f:f7:25:cb:30:88:73:95:57:4a:
67:b6:16:94:5e:4d:b8:b0:bd:b7:b6:a3:5d:43:92:
50:c1:a5:75:2d:73:82:29:67:63:3d:88:f5:68:10:
3e:34:59:78:71:a0:3c:fb:f0:36:b0:60:36:22:16:
c3:a9:03:95:06:e4:cb:1b:5d:e2:37:1d:91:67:ae:
f5:c5:57:5f:62:d1:06:6e:72:32:73:fb:ce:e3:40:
6f:b4:27:9a:66:c8:83:0f:2e:7d:15:bb:74:01:a7:
31:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:5F:95:3D:09:11:74:80:B2:6B:A7:CE:EA:81:6C:BE:70:CF:0A:18
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/vV-VPQkRdICya6fO6oFsvnDPChg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.19.40.0/22
185.229.216.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:04:84:fe:d9:69:3b:8b:30:b2:c1:a9:57:eb:fc:70:5b:b8:
a5:86:7d:11:6d:37:02:a5:46:9f:f9:f2:0f:3b:36:d7:b7:4f:
37:47:94:7e:24:87:15:b5:24:e3:19:13:2b:b7:8f:9b:b3:ba:
b7:65:5a:2a:6a:08:00:00:b7:50:2b:04:08:a8:59:91:1d:50:
b5:cf:c1:d0:f9:06:a9:c4:7c:3a:9d:5d:21:19:b0:9f:1b:30:
f9:80:45:eb:d5:83:be:1d:b4:a7:d9:b5:f9:a4:02:c1:25:21:
15:44:91:62:ff:0a:fc:c2:fd:aa:ad:8c:f5:a6:70:6d:a7:e9:
1a:00:90:83:32:eb:cf:25:30:20:40:32:1e:40:62:2e:44:be:
27:8c:0e:13:f6:6d:01:03:6d:7a:e1:9b:dc:8e:b0:f4:68:ed:
1d:7e:47:fc:6e:94:e4:89:30:13:3b:3a:44:6b:02:ee:6b:07:
75:d5:08:1f:f8:35:4e:03:e6:bb:23:43:51:c9:a7:7c:63:7f:
69:81:13:89:4e:d9:a3:af:96:60:8a:4a:9e:fd:64:fa:73:a8:
c6:33:ad:a5:44:f9:88:bd:d0:0c:0d:41:92:4e:da:5a:f6:57:
29:e4:16:ee:ef:d6:f8:97:66:1a:09:65:60:24:80:30:df:1d:
5e:fd:91:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:41:38 2024 by rpki-client on console-fra.rpki-client.org