Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/Vud0DLVvXIawgrqdWSN7ftkVMmY.roa
File: Vud0DLVvXIawgrqdWSN7ftkVMmY.roa (raw, json)
Hash identifier: rXK+wPIQvLEMxYI/y7N8UsKFNbGrsLreSM5r8tMHjkg=
Subject key identifier: 56:E7:74:0C:B5:6F:5C:86:B0:82:BA:9D:59:23:7B:7E:D9:15:32:66
Certificate issuer: /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Certificate serial: 018CC348D10F34F6D9E771787CFBF4764ABE
Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/Vud0DLVvXIawgrqdWSN7ftkVMmY.roa
Signing time: Mon 01 Jan 2024 04:29:38 +0000
ROA not before: Mon 01 Jan 2024 04:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57269
IP address blocks: 188.26.192.0/19 maxlen: 19
188.26.192.0/21 maxlen: 24
79.116.0.0/16 maxlen: 24
188.26.200.0/21 maxlen: 24
79.116.0.0/15 maxlen: 24
188.26.208.0/21 maxlen: 24
86.127.224.0/19 maxlen: 24
188.26.216.0/21 maxlen: 24
188.26.218.0/24 maxlen: 24
79.117.0.0/16 maxlen: 24
194.55.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 22:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:d1:0f:34:f6:d9:e7:71:78:7c:fb:f4:76:4a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Validity
Not Before: Jan 1 04:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56e7740cb56f5c86b082ba9d59237b7ed9153266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:72:6e:d4:36:3a:ea:b9:f6:ae:52:31:55:76:
ff:e1:c2:59:cb:5d:26:65:9a:0e:cc:60:b6:60:57:
a8:6d:56:63:7f:b6:22:3b:7a:14:8a:32:f5:ed:2a:
4a:09:c8:fa:65:93:e0:b8:cd:89:e7:27:58:93:02:
73:43:5c:fb:a8:73:92:b0:f6:3d:73:60:56:00:c4:
55:01:d8:09:0d:ca:d0:b5:99:18:19:97:b0:3d:7c:
5c:27:12:05:7e:ca:4a:6f:f5:6d:e4:b6:4f:0b:a4:
e8:c7:45:34:80:18:06:44:55:f1:50:6c:4c:7c:4f:
ba:6e:75:78:eb:34:92:06:2b:43:43:cc:64:13:4c:
15:64:3c:36:fc:95:3a:e9:b7:30:f7:87:fe:69:88:
07:9e:19:b3:dc:af:f5:e6:e9:ec:0a:f5:92:b9:89:
2b:77:59:5c:96:28:02:0b:e9:e3:80:0e:d7:5c:22:
ff:8e:c1:06:3d:d3:20:c5:60:c4:9e:2c:0b:c7:8d:
13:3d:93:b6:b4:91:da:0d:e7:ab:d7:59:76:89:be:
3d:27:82:dd:f2:d0:e5:93:f1:cf:55:02:e4:e9:1f:
4e:f0:1d:68:86:53:5c:d0:1a:7a:93:70:d6:e3:33:
9c:a6:77:72:1f:94:9a:06:01:05:d3:99:69:00:c5:
75:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E7:74:0C:B5:6F:5C:86:B0:82:BA:9D:59:23:7B:7E:D9:15:32:66
X509v3 Authority Key Identifier:
keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/Vud0DLVvXIawgrqdWSN7ftkVMmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.116.0.0/15
86.127.224.0/19
188.26.192.0/19
194.55.169.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:a6:ac:ef:8e:8d:28:83:d1:82:e6:ef:5d:4a:f1:a8:58:49:
59:7b:40:c1:6e:ca:ef:f7:25:a4:06:25:3a:c4:24:3b:b1:6d:
e5:22:98:97:f2:af:ba:53:3e:52:77:4c:0c:9d:ca:a1:2f:63:
66:64:04:a2:b3:80:00:26:35:47:60:27:60:11:7a:8c:85:5e:
9f:46:66:a6:09:05:39:ef:38:7b:18:72:37:2a:60:e5:f1:c1:
4e:27:f7:eb:5e:20:e0:72:59:f1:0b:9d:74:b0:f6:f3:34:9d:
bf:b0:86:fc:91:a1:d1:d1:ce:d5:46:74:d2:89:27:22:6c:4a:
63:67:c4:14:10:a9:48:a8:3c:81:26:7a:45:cf:a5:69:4c:4b:
7e:b0:d6:62:10:05:65:e8:49:b6:bb:7b:dc:c1:f7:4d:ba:e0:
47:23:ea:5d:7e:56:47:13:c6:1e:20:d4:fa:2a:1f:48:df:bf:
dd:d1:6a:57:cb:9b:02:3d:ea:4d:d6:dd:19:a7:69:14:3d:dd:
d8:bc:f3:e0:1f:c6:7b:33:52:83:e9:08:20:50:24:3c:c8:52:
0a:ac:df:a3:63:96:c6:d9:12:c4:77:0f:d4:72:56:20:00:ac:
9d:b6:6c:54:a0:29:91:b3:10:f2:42:4f:b1:e4:ce:e4:99:7b:
92:3e:f5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 01:52:33 2024 by rpki-client on console-fra.rpki-client.org