Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/fyVhqWqH28Z6ILpCqh5ccAoOtxg.roa
File: fyVhqWqH28Z6ILpCqh5ccAoOtxg.roa (raw, json)
Hash identifier: ZB3o8pQitZH2GjcQ355a4iY3oa2QAYbD1Erxe7r0fAg=
Subject key identifier: 7F:25:61:A9:6A:87:DB:C6:7A:20:BA:42:AA:1E:5C:70:0A:0E:B7:18
Certificate issuer: /CN=01628a415e1fa72ce1d03cd76219ce1b77c655c4
Certificate serial: 018CC2DB4A63B83BD49E6E294757469E4244
Authority key identifier: 01:62:8A:41:5E:1F:A7:2C:E1:D0:3C:D7:62:19:CE:1B:77:C6:55:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/fyVhqWqH28Z6ILpCqh5ccAoOtxg.roa
Signing time: Mon 01 Jan 2024 02:30:00 +0000
ROA not before: Mon 01 Jan 2024 02:30:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202021
IP address blocks: 185.56.64.0/22 maxlen: 24
185.56.64.0/24 maxlen: 24
185.56.67.0/24 maxlen: 24
185.56.66.0/24 maxlen: 24
185.56.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:4a:63:b8:3b:d4:9e:6e:29:47:57:46:9e:42:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01628a415e1fa72ce1d03cd76219ce1b77c655c4
Validity
Not Before: Jan 1 02:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f2561a96a87dbc67a20ba42aa1e5c700a0eb718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:12:f1:c4:9f:cc:bb:c3:9b:a5:2e:ec:94:c9:
fe:10:c5:5f:76:ba:ec:ad:02:4f:87:0e:28:69:c1:
44:0d:5b:16:f5:6f:db:c8:70:06:57:b9:d1:37:72:
76:a1:36:d3:03:f5:98:09:ed:88:e9:4b:ed:9c:18:
6e:dd:b6:9c:91:85:96:dc:36:bc:ac:08:c8:eb:d1:
28:7e:de:ba:0d:81:e1:46:f5:bc:18:6f:e2:e6:7a:
50:56:e6:fa:ff:7e:ee:0f:75:b5:77:c8:70:e3:f9:
fc:c7:47:b7:8b:5e:ff:76:d1:a9:ad:7e:39:1d:61:
be:f8:2e:79:d4:34:96:43:83:3f:69:77:0a:13:cb:
04:ff:84:5d:1f:2e:8b:ec:78:db:01:db:8f:aa:d0:
35:c6:80:c4:b9:81:8e:31:ca:11:94:f2:59:cd:9b:
98:56:f9:ce:36:71:d4:e2:c3:c0:ef:26:06:3c:36:
d0:26:44:22:a3:42:08:66:93:3a:e2:d8:09:5a:fa:
74:82:f2:ce:e4:ca:f9:cc:d1:44:6d:74:07:34:0b:
1f:52:47:cf:8a:89:ec:4e:58:8a:6b:26:d3:0c:f4:
f7:00:ce:58:95:60:00:ad:6c:45:6a:24:b1:a9:fb:
8b:03:73:4a:c4:ad:0a:3d:7c:e2:2e:28:b3:6a:e7:
fe:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:25:61:A9:6A:87:DB:C6:7A:20:BA:42:AA:1E:5C:70:0A:0E:B7:18
X509v3 Authority Key Identifier:
keyid:01:62:8A:41:5E:1F:A7:2C:E1:D0:3C:D7:62:19:CE:1B:77:C6:55:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/fyVhqWqH28Z6ILpCqh5ccAoOtxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.56.64.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:74:7c:b0:4d:fa:ad:b8:42:c6:f6:6c:1d:50:30:2c:39:b2:
a7:38:68:57:ab:d0:0d:71:57:89:6e:2f:42:e7:b0:9d:b9:33:
95:fe:7d:cb:a8:6a:e7:b2:56:c5:57:28:fe:cf:ce:4d:ed:81:
a1:56:ec:6e:a6:24:33:d3:67:da:70:f8:80:79:c3:29:df:83:
b3:f3:3e:bb:60:a0:32:9c:23:88:c2:cf:1b:b7:f7:66:02:5b:
0e:d8:07:93:4b:78:36:d6:6c:35:5e:ed:c1:73:d4:bd:37:4d:
75:7e:0c:65:1f:3f:13:91:68:96:83:37:69:0c:c3:e7:73:29:
f3:97:ad:96:57:07:f3:de:f0:4a:6e:2a:0b:f6:c3:4d:f6:37:
5a:c5:b3:74:1f:e6:b6:22:9b:1e:f2:9f:f5:b5:2f:c7:9b:10:
cd:0f:4f:55:f4:52:28:58:07:6e:e1:87:7a:0d:fe:53:ba:8f:
50:6e:5f:2b:c4:95:d8:7e:41:cf:44:ac:f6:5c:97:69:2d:ab:
30:73:be:cc:b2:a6:00:27:c9:84:68:1c:7a:33:73:46:28:d2:
da:77:12:1a:11:e9:c8:fc:47:39:c3:30:d3:e1:6c:39:29:68:
3d:4d:22:a8:57:d7:93:c8:27:ee:32:05:cc:07:2d:ad:af:e8:
83:bd:60:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:42:23 2024 by rpki-client on console-ams.rpki-client.org