Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/VJJC_hmrv9QY3SQ2srms00PNnhE.roa
File: VJJC_hmrv9QY3SQ2srms00PNnhE.roa (raw, json)
Hash identifier: hiEcgU+4VRgLsASNVpUeFh21KedXU+eJ0NR3beB3xq8=
Subject key identifier: 54:92:42:FE:19:AB:BF:D4:18:DD:24:36:B2:B9:AC:D3:43:CD:9E:11
Certificate issuer: /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Certificate serial: 018CC348CE800C1994F053606978E6BD7E1D
Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/VJJC_hmrv9QY3SQ2srms00PNnhE.roa
Signing time: Mon 01 Jan 2024 04:29:37 +0000
ROA not before: Mon 01 Jan 2024 04:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20845
IP address blocks: 185.79.94.0/23 maxlen: 23
185.79.92.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 22:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:ce:80:0c:19:94:f0:53:60:69:78:e6:bd:7e:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Validity
Not Before: Jan 1 04:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=549242fe19abbfd418dd2436b2b9acd343cd9e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:cd:1f:a6:7e:63:03:a3:ca:db:d0:fe:5d:c2:
b4:25:95:b8:de:3b:0a:3d:0c:0c:c3:af:d1:29:84:
cd:ad:c5:5e:0a:af:31:88:b7:ad:13:24:c2:a7:30:
c1:d0:3b:7f:fe:a7:13:66:a0:93:43:78:6e:2d:9b:
f4:27:6f:61:5e:9b:4d:e4:67:25:c4:0f:d6:49:b2:
e9:e4:89:8e:f5:46:c6:4a:8f:01:d2:2c:cf:11:36:
ef:2d:c5:9b:ce:7b:69:bf:21:37:56:a7:95:48:12:
ce:c0:76:93:81:4e:c3:5a:7a:bd:0c:93:ec:dd:06:
03:a1:01:77:8d:6c:8c:66:d3:a4:f7:65:b4:1a:72:
16:5f:b8:74:f2:1e:9a:6d:47:b2:ec:7f:60:0b:4d:
12:0e:9c:0e:8d:ec:e1:c8:63:4a:6c:2f:ca:80:f1:
59:a3:0e:7a:3c:d8:56:ea:95:4b:d3:5f:71:1d:76:
7b:06:a9:41:55:85:2e:7b:bb:3a:04:37:01:a4:5f:
4b:6f:0f:85:e0:1b:7c:47:41:5e:fb:8f:5d:0f:ec:
e9:1d:9b:2f:5a:41:05:e9:21:d6:06:7f:68:5f:4f:
94:03:16:8b:3d:0c:e9:cb:b5:2f:ed:03:35:ca:3f:
68:3f:41:68:82:d4:20:97:a4:54:d5:b5:da:1f:6e:
cc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:92:42:FE:19:AB:BF:D4:18:DD:24:36:B2:B9:AC:D3:43:CD:9E:11
X509v3 Authority Key Identifier:
keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/VJJC_hmrv9QY3SQ2srms00PNnhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.79.92.0/22
Signature Algorithm: sha256WithRSAEncryption
88:b0:3b:2b:4f:ea:39:75:86:05:a3:39:49:51:5c:a0:b9:87:
63:e9:45:9e:81:14:96:5b:d3:54:e5:d0:7b:0b:69:5f:79:b9:
3a:50:4c:64:15:68:ae:4a:35:63:9e:92:2c:08:82:96:16:7d:
c6:ec:86:b8:0d:f4:0c:c9:a6:92:a9:b1:e2:34:46:5d:8d:8b:
ea:22:d9:e3:64:ff:41:62:bc:95:32:98:e5:09:4b:3e:f0:02:
ba:03:6e:ca:89:e7:06:a6:7f:ca:7a:ae:af:2a:eb:2a:3b:3f:
3a:06:8d:ef:c2:30:1e:bc:55:93:d2:0f:a7:4e:6a:7c:b5:8d:
ff:10:7d:8c:d5:6d:2f:72:53:ec:60:eb:ea:d5:ed:55:13:c9:
ab:42:6c:36:6e:0b:15:4b:35:3d:fc:d1:6a:43:da:23:bd:23:
d5:66:5a:52:2b:60:f9:6a:5a:35:bc:44:56:3e:72:f0:fb:b2:
89:75:03:c8:a7:80:7b:52:b1:2a:ba:31:c2:81:e1:55:84:10:
0f:9e:76:d8:d6:5d:8f:8f:d3:18:16:2d:ab:7a:b8:fb:7b:6e:
1c:2d:bb:ad:7e:6b:a8:ab:0f:24:2c:18:b6:fb:51:b4:86:56:
f1:ba:fa:53:55:77:68:5a:79:42:14:dd:2e:83:8a:64:90:db:
c7:19:db:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 03:10:21 2024 by rpki-client on console-ams.rpki-client.org