Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/vapu5C4V0tmAwvLONdAgp6O8e3c.roa
File: vapu5C4V0tmAwvLONdAgp6O8e3c.roa (raw, json)
Hash identifier: Tnzubylrjm2ap5KcX4R3tELnV5BO1WVvmEhMK3nKlmk=
Subject key identifier: BD:AA:6E:E4:2E:15:D2:D9:80:C2:F2:CE:35:D0:20:A7:A3:BC:7B:77
Certificate issuer: /CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
Certificate serial: 018CC801446892F0B417B8BA2D066C5D00C3
Authority key identifier: F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/vapu5C4V0tmAwvLONdAgp6O8e3c.roa
Signing time: Tue 02 Jan 2024 02:29:35 +0000
ROA not before: Tue 02 Jan 2024 02:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42369
IP address blocks: 94.176.160.0/24 maxlen: 24
185.235.147.0/24 maxlen: 24
94.176.161.0/24 maxlen: 24
94.176.160.0/23 maxlen: 23
91.250.253.0/24 maxlen: 24
194.33.191.0/24 maxlen: 24
188.240.51.0/24 maxlen: 24
2a10:8b40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:44:68:92:f0:b4:17:b8:ba:2d:06:6c:5d:00:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
Validity
Not Before: Jan 2 02:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bdaa6ee42e15d2d980c2f2ce35d020a7a3bc7b77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c5:6c:a4:c7:f9:e7:ad:9a:cc:ba:c5:aa:21:
a4:d8:52:a7:b5:07:42:f6:3f:d9:81:35:91:76:a6:
23:e4:81:b3:38:88:a1:14:cb:3f:aa:e2:77:fc:17:
5e:3e:26:d0:54:0d:0a:de:6d:d8:9f:a9:8c:1c:ae:
c9:6c:ce:32:e7:21:83:93:3b:eb:2c:e2:53:83:56:
19:e8:f2:06:c2:f9:41:03:0e:85:19:4a:38:09:02:
ba:ee:bd:92:42:d5:a8:b8:bd:27:45:e1:dd:19:8f:
6b:7f:6d:5f:39:e1:3b:7b:e1:20:1d:ec:c5:a8:8e:
f6:48:d5:65:5e:48:42:27:2d:23:24:ce:ff:1b:35:
ab:98:cf:0d:a6:d6:94:6d:ce:8c:18:06:e9:54:d6:
72:ad:1b:8d:76:42:3c:22:ba:1a:72:d5:1d:42:d8:
73:cf:1e:10:92:5d:a4:7b:a7:6e:80:a3:18:19:5e:
95:df:09:55:62:14:13:eb:ce:a8:44:e0:b0:2e:44:
77:65:c6:c0:15:03:8c:0c:f1:f6:07:f4:9b:a8:bb:
ab:05:35:54:d6:10:62:57:56:bf:67:f1:ec:77:a5:
4a:d7:43:58:92:19:ac:6f:d4:db:e0:49:a5:21:80:
1e:fd:b5:5a:4f:3d:3e:7a:c9:11:55:3b:7d:85:05:
28:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:AA:6E:E4:2E:15:D2:D9:80:C2:F2:CE:35:D0:20:A7:A3:BC:7B:77
X509v3 Authority Key Identifier:
keyid:F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/vapu5C4V0tmAwvLONdAgp6O8e3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.250.253.0/24
94.176.160.0/23
185.235.147.0/24
188.240.51.0/24
194.33.191.0/24
IPv6:
2a10:8b40::/32
Signature Algorithm: sha256WithRSAEncryption
73:b8:b9:68:e0:e7:0f:df:20:ff:21:51:2b:01:6d:f1:bb:9b:
af:5f:29:98:a4:5f:ef:48:b6:41:35:30:fb:9c:6e:42:98:f7:
1b:a7:49:6e:a2:01:2b:0f:77:5e:90:2e:4f:e2:f2:44:b9:75:
07:e0:fe:fc:ef:24:4f:85:91:0a:c1:cd:69:ea:c5:a5:a3:f8:
8c:6b:09:e1:3d:c5:30:34:db:cc:09:9b:8c:e7:66:4b:76:38:
0d:ac:32:cc:5e:4d:47:c0:78:01:6b:6c:33:3a:9f:ad:ca:8e:
ab:8b:e9:88:16:a8:80:11:f0:73:52:2a:46:2f:bf:3f:16:0b:
0f:ce:61:1d:ed:b8:3e:c7:f9:5b:1a:63:5c:20:1e:08:58:d4:
8a:48:de:e1:88:78:8d:55:2e:8a:04:5b:7c:20:2f:d9:3a:42:
bf:5e:1b:19:af:f1:d9:41:8a:7c:ac:5e:85:68:98:92:ca:ce:
ae:d8:89:d8:07:3a:f7:a4:c6:94:fc:2e:30:ac:77:8d:19:bc:
55:d1:e1:d9:20:ef:dc:34:dd:30:45:fb:af:95:01:b8:62:bf:
9c:02:c0:ad:95:17:db:dd:0c:c8:e7:49:8e:c7:a9:d8:fd:f7:
21:84:88:18:3b:52:bb:46:cd:99:fe:bb:ba:ac:0e:34:6d:23:
fe:a8:8a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 03:21:15 2024 by rpki-client on console-fra.rpki-client.org