Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/VjjciUtEQToh6R7u5B17S94GYu0.roa
File: VjjciUtEQToh6R7u5B17S94GYu0.roa (raw, json)
Hash identifier: jsChcAzBoAWnwOg2ht7j6lIZL6vGfNZT059GwWbQxnw=
Subject key identifier: 56:38:DC:89:4B:44:41:3A:21:E9:1E:EE:E4:1D:7B:4B:DE:06:62:ED
Certificate issuer: /CN=e68ce86d409e824376560fe3b1a168f2ba0082e3
Certificate serial: 018CC49343C9F8338AE7D0AFC35C5CB10378
Authority key identifier: E6:8C:E8:6D:40:9E:82:43:76:56:0F:E3:B1:A1:68:F2:BA:00:82:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/VjjciUtEQToh6R7u5B17S94GYu0.roa
Signing time: Mon 01 Jan 2024 10:30:34 +0000
ROA not before: Mon 01 Jan 2024 10:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42475
IP address blocks: 91.207.34.0/24 maxlen: 24
91.207.35.0/24 maxlen: 24
185.82.55.0/24 maxlen: 24
185.82.52.0/24 maxlen: 24
185.82.53.0/24 maxlen: 24
185.82.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:43:c9:f8:33:8a:e7:d0:af:c3:5c:5c:b1:03:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e68ce86d409e824376560fe3b1a168f2ba0082e3
Validity
Not Before: Jan 1 10:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5638dc894b44413a21e91eeee41d7b4bde0662ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fa:00:dc:a2:d5:e8:3e:90:94:c2:f2:af:7a:
3f:1f:53:04:b1:04:f1:17:f0:7c:6f:25:49:1e:a1:
1d:24:35:7e:ed:f1:85:47:9e:8a:0f:2f:4c:09:a0:
93:f3:58:6e:57:09:2a:c3:3e:2b:8b:11:a9:3f:e2:
f8:e6:07:0c:d3:a5:31:cd:8b:35:b4:46:0f:68:6d:
9a:fc:dd:db:f8:a3:d8:6b:ae:dc:68:fc:7e:f9:b2:
59:1b:a9:4a:ff:84:d3:03:d7:55:44:cf:f9:ee:b1:
20:fd:00:31:af:60:45:46:29:b7:8b:35:77:d0:7c:
e8:d1:c5:5c:9e:e0:a3:c9:60:cc:c1:07:17:94:85:
d5:bb:d7:a9:13:45:a4:ae:03:ea:74:9c:7c:81:93:
34:4f:30:9f:f0:c5:4a:1f:7e:ff:d2:20:47:ee:f7:
75:3c:af:d8:1b:4d:0e:8b:64:5c:36:84:dd:6b:c6:
ea:df:af:c8:71:e1:f3:59:cd:f8:02:2c:53:1b:65:
13:eb:c6:05:0e:26:ca:2a:72:28:04:53:76:69:b2:
a7:0e:03:24:dc:68:38:10:16:73:30:b4:68:80:1f:
85:98:0d:4e:92:22:ba:ee:3a:50:10:ad:d8:d2:fb:
b2:23:71:6e:61:61:7f:3f:cf:0e:eb:dc:f3:73:c7:
9a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:38:DC:89:4B:44:41:3A:21:E9:1E:EE:E4:1D:7B:4B:DE:06:62:ED
X509v3 Authority Key Identifier:
keyid:E6:8C:E8:6D:40:9E:82:43:76:56:0F:E3:B1:A1:68:F2:BA:00:82:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/VjjciUtEQToh6R7u5B17S94GYu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.34.0/23
185.82.52.0/22
Signature Algorithm: sha256WithRSAEncryption
cf:e3:56:f4:0b:d2:38:4b:63:05:a5:25:f1:c1:c8:2d:3d:f1:
65:de:3b:d5:05:35:31:4f:2e:f0:06:11:00:8c:0c:d6:b6:cc:
67:c1:ae:ac:ae:46:e9:e5:54:5d:14:0a:d6:9a:fd:25:ed:61:
59:94:6b:e7:a9:59:c5:2a:fa:00:4d:99:2c:7e:3f:d3:35:f0:
5b:10:1e:f0:08:4e:ed:a6:60:c0:2f:f9:11:e6:64:b1:1e:5e:
f9:ea:5e:fd:bd:a6:2d:79:2f:f7:e5:6d:25:67:f4:83:fe:8b:
ac:55:35:b3:ab:c9:8d:16:59:1b:54:30:7e:db:6b:8b:4f:0d:
42:57:54:5e:81:83:f9:29:5f:f7:aa:da:a3:14:21:23:2c:8e:
5f:ec:3e:8d:fa:88:69:19:ee:e5:42:69:64:e2:d5:68:e7:04:
92:e4:02:a0:3e:93:54:1e:c9:8c:9d:ac:d1:b5:9e:e2:62:0c:
01:74:bc:e7:63:dc:93:7a:8d:83:db:e6:d1:ca:68:4e:72:9b:
12:5b:6d:01:90:60:ff:0e:75:68:ce:8f:bf:02:27:46:68:de:
4e:d4:b9:db:52:3c:93:a8:c9:14:f1:3c:32:9d:b6:f0:dc:8a:
9d:8e:18:ff:15:b8:77:95:8b:78:dd:b4:8a:2d:a2:83:e6:a9:
c7:a4:29:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:56:42 2024 by rpki-client on console-fra.rpki-client.org