Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/VTDFskWDMa5Bb8Z1bwGQ4svGcdw.roa
File: VTDFskWDMa5Bb8Z1bwGQ4svGcdw.roa (raw, json)
Hash identifier: l88YtMcgYuYfeHFGn8zgSnjI9O/f3vXRn2onfOSvUtA=
Subject key identifier: 55:30:C5:B2:45:83:31:AE:41:6F:C6:75:6F:01:90:E2:CB:C6:71:DC
Certificate issuer: /CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Certificate serial: 018CC64A88901A43EB96CCB48ACBBE98C6F7
Authority key identifier: 48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/VTDFskWDMa5Bb8Z1bwGQ4svGcdw.roa
Signing time: Mon 01 Jan 2024 18:30:22 +0000
ROA not before: Mon 01 Jan 2024 18:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201653
IP address blocks: 185.73.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:88:90:1a:43:eb:96:cc:b4:8a:cb:be:98:c6:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Validity
Not Before: Jan 1 18:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5530c5b2458331ae416fc6756f0190e2cbc671dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:62:40:ad:5b:0f:62:25:da:20:6d:8e:0b:ca:
67:ae:8f:7e:82:ba:0d:b4:a2:86:df:b3:e5:d6:d8:
6b:5e:0f:43:d7:7b:68:24:ed:ea:db:6b:c0:8c:aa:
bd:7a:16:54:06:ce:ff:02:8b:76:32:ba:55:98:dc:
72:cf:00:67:00:36:af:d4:b4:4d:0e:b4:3c:a6:4b:
96:ab:ba:3b:35:00:17:9c:df:fa:35:ab:65:cc:1f:
a4:30:0f:2e:a6:d8:84:81:ae:d1:da:ff:5d:4d:0d:
c9:4b:82:82:0f:04:63:27:52:ac:df:0f:c8:0f:52:
76:35:57:4d:70:cb:d0:ac:08:9b:ec:10:e5:e1:7a:
e1:ae:54:13:ce:93:37:90:cc:99:dd:7e:e4:dd:ec:
ce:ab:fd:69:7c:7d:4c:1d:d9:37:08:e1:be:94:8c:
69:13:1e:ec:3d:89:29:f7:91:7a:53:71:a8:5f:24:
e2:97:28:88:68:52:f3:0f:6e:11:7b:e6:26:4e:f0:
7c:f6:aa:b9:61:bc:7c:8c:fa:c6:95:45:1f:bd:35:
ea:d9:43:0a:96:cc:91:7a:bd:b9:49:f6:fe:cf:3d:
b2:dc:84:93:c9:a1:98:c0:e1:2d:34:43:cd:f6:af:
4d:51:c0:f1:6d:9a:c4:da:78:c5:92:49:b0:4a:84:
3b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:30:C5:B2:45:83:31:AE:41:6F:C6:75:6F:01:90:E2:CB:C6:71:DC
X509v3 Authority Key Identifier:
keyid:48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/VTDFskWDMa5Bb8Z1bwGQ4svGcdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.208.0/24
Signature Algorithm: sha256WithRSAEncryption
27:b7:5d:8a:d2:1a:6d:bc:21:ee:66:ac:1b:8d:a4:4d:8a:17:
9d:56:1f:89:59:05:11:00:f7:a0:03:65:69:2e:53:0a:5f:24:
c1:22:30:97:47:3c:3b:83:55:d2:5b:e3:29:ab:1d:85:50:84:
a1:89:7e:12:e0:6b:28:bb:20:ac:02:b2:b7:d0:c5:69:29:43:
59:4c:8e:dc:47:ae:3e:59:df:71:3e:23:5d:07:92:5b:0e:90:
e1:25:9d:0f:b2:c9:60:19:be:4b:bb:96:76:9e:4f:ca:4e:03:
e5:64:cf:e3:77:93:a2:ea:3c:81:5c:a3:f9:5f:8a:3c:44:09:
b4:27:92:3e:24:a1:7e:c7:47:54:44:7f:33:6b:42:8b:04:c9:
d2:6f:86:ce:f0:20:a0:6d:12:7d:08:e6:28:22:9a:be:56:a7:
88:18:21:c3:5c:0a:6a:ee:be:84:4f:b8:f5:a7:78:18:a0:fa:
b2:7d:ea:10:dc:9f:a4:df:24:c4:8c:c7:e4:9b:6e:85:7b:55:
bc:6c:40:39:f4:73:fe:54:cf:a5:8a:86:0d:6f:41:fc:3d:99:
89:56:f8:8d:3b:05:62:13:c5:73:af:de:c2:68:b9:3f:6d:5b:
0c:dd:a8:23:62:0e:0a:a2:dd:1e:6a:08:54:3f:f8:43:35:2f:
04:40:14:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:25:43 2024 by rpki-client on console-fra.rpki-client.org