Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/VGW5_kKew9yLeuROtieAoFAvTcI.roa
File: VGW5_kKew9yLeuROtieAoFAvTcI.roa (raw, json)
Hash identifier: DRJ5dR0iHr2JR96ZXS5aUQkoY79k0W8t+UsuhlySJTY=
Subject key identifier: 54:65:B9:FE:42:9E:C3:DC:8B:7A:E4:4E:B6:27:80:A0:50:2F:4D:C2
Certificate issuer: /CN=d04079bb7070ed0eeea3a1a467c79462bcc5455f
Certificate serial: 018CC64A7C7C2F7C6101B327322A62BB542F
Authority key identifier: D0:40:79:BB:70:70:ED:0E:EE:A3:A1:A4:67:C7:94:62:BC:C5:45:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/VGW5_kKew9yLeuROtieAoFAvTcI.roa
Signing time: Mon 01 Jan 2024 18:30:19 +0000
ROA not before: Mon 01 Jan 2024 18:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59811
IP address blocks: 185.66.206.0/24 maxlen: 24
185.149.208.0/24 maxlen: 24
185.149.210.0/23 maxlen: 24
2a0b:8640::/29 maxlen: 29
2a04:1840::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Jun 2024 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:7c:7c:2f:7c:61:01:b3:27:32:2a:62:bb:54:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04079bb7070ed0eeea3a1a467c79462bcc5455f
Validity
Not Before: Jan 1 18:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5465b9fe429ec3dc8b7ae44eb62780a0502f4dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:13:62:8c:90:36:0b:44:5d:ae:61:1b:bf:90:
7e:51:23:54:b7:1d:e3:d0:e9:0f:d1:51:f4:a6:fe:
91:c2:4a:1c:50:82:b6:34:11:ae:31:af:2b:66:b5:
50:b0:0f:f9:49:36:de:7d:19:1d:9c:ce:ca:50:2d:
41:ec:46:f7:ce:05:d5:00:66:ba:01:bd:fe:e9:49:
7c:84:e7:fe:b1:b6:f4:20:66:86:82:80:20:1d:ea:
a2:87:81:1a:91:b8:5f:bf:97:78:0a:97:39:1b:47:
75:6b:38:76:03:6d:88:0c:0e:02:e8:59:5e:06:55:
94:29:8e:95:12:0a:83:bb:e2:2f:fe:d4:26:3b:ad:
c0:c7:a0:54:a9:14:a4:26:95:24:e8:d0:21:d9:a9:
15:a7:d7:16:3a:9c:18:11:43:87:83:8e:d9:61:44:
67:76:21:af:80:1b:07:e7:3b:59:80:4c:33:7a:06:
99:2f:27:39:14:33:99:e3:51:f1:bd:7f:4c:92:0c:
3d:fa:92:7e:aa:ee:b0:10:dc:19:36:ad:9b:61:88:
e8:06:67:a5:f8:11:67:a6:17:63:cd:99:7a:18:f2:
e2:da:6c:70:34:de:4f:4e:65:3d:6c:7b:3a:4a:f7:
18:92:7d:3f:50:ca:17:8f:a9:94:97:25:6a:3a:db:
f4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:65:B9:FE:42:9E:C3:DC:8B:7A:E4:4E:B6:27:80:A0:50:2F:4D:C2
X509v3 Authority Key Identifier:
keyid:D0:40:79:BB:70:70:ED:0E:EE:A3:A1:A4:67:C7:94:62:BC:C5:45:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/VGW5_kKew9yLeuROtieAoFAvTcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.66.206.0/24
185.149.208.0/24
185.149.210.0/23
IPv6:
2a04:1840::/29
2a0b:8640::/29
Signature Algorithm: sha256WithRSAEncryption
20:bd:a6:48:c1:79:af:6c:12:53:95:af:10:56:e1:c7:57:51:
0c:ca:e0:d8:8e:71:1c:9b:80:fd:4c:7e:b5:87:e5:a9:e8:86:
9f:d9:d0:e6:5a:6d:1a:41:40:22:63:cf:19:4b:bd:00:6c:46:
6a:22:6a:8e:4a:b8:da:f0:7d:10:ce:22:94:0f:4c:02:71:6d:
fb:1e:b5:89:88:21:c9:34:f9:f8:0d:d6:5b:08:50:d9:c2:8a:
fb:7b:33:be:75:10:0a:6f:b8:a1:ab:b7:3b:cf:c4:66:70:50:
5f:23:64:ac:9a:e6:a1:06:de:45:ec:24:f3:2a:bd:c1:a7:c9:
a4:0d:7d:d7:39:ef:a8:8d:7e:4d:11:7d:9d:ad:65:46:92:82:
2b:50:f9:80:76:f0:df:b8:04:d6:ff:94:3a:8d:e0:b0:07:22:
9e:6e:36:af:e1:4d:e1:b8:ef:42:89:10:e2:13:44:4a:bc:95:
db:7e:8d:90:67:d8:30:3b:53:be:fa:47:18:a2:6b:04:01:fd:
85:ff:e2:8e:34:f4:d5:98:0d:7c:31:50:98:39:51:73:1a:1a:
10:ad:70:e5:b1:f3:8a:c1:e1:bb:d8:f7:51:e5:50:d7:5f:1b:
54:2e:14:16:15:8a:71:a2:22:81:b0:fc:22:17:cc:e6:1f:39:
b3:ac:05:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 00:33:21 2024 by rpki-client on console-ams.rpki-client.org