Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/VQg2mmhIBRAICoiFF_3AEFI_hEI.roa
File: VQg2mmhIBRAICoiFF_3AEFI_hEI.roa (raw, json)
Hash identifier: /4eosjAMf0OR3d5AuaBkRSChHjlfPFdfMqDukkHHJBI=
Subject key identifier: 55:08:36:9A:68:48:05:10:08:0A:88:85:17:FD:C0:10:52:3F:84:42
Certificate issuer: /CN=bafed139df0fad6fde0d82869144104d204b92b5
Certificate serial: 018E807B41AE0E3F9F7072758BE55C6424B4
Authority key identifier: BA:FE:D1:39:DF:0F:AD:6F:DE:0D:82:86:91:44:10:4D:20:4B:92:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uv7ROd8PrW_eDYKGkUQQTSBLkrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/VQg2mmhIBRAICoiFF_3AEFI_hEI.roa
Signing time: Wed 27 Mar 2024 15:15:45 +0000
ROA not before: Wed 27 Mar 2024 15:15:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134835
IP address blocks: 185.170.208.0/24 maxlen: 24
185.170.209.0/24 maxlen: 24
185.170.210.0/24 maxlen: 24
185.170.211.0/24 maxlen: 24
2a0a:68c0::/40 maxlen: 40
2a0a:68c0:ff00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uv7ROd8PrW_eDYKGkUQQTSBLkrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:80:7b:41:ae:0e:3f:9f:70:72:75:8b:e5:5c:64:24:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bafed139df0fad6fde0d82869144104d204b92b5
Validity
Not Before: Mar 27 15:15:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5508369a68480510080a888517fdc010523f8442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d8:62:c2:96:a1:b5:62:d4:9b:ba:fc:6b:a6:
b0:d6:0d:bd:65:a1:5f:b7:a3:95:8d:53:84:76:c0:
73:0e:aa:c9:5a:4c:70:44:6a:fe:1a:95:8b:2b:02:
a5:f7:20:e6:22:f0:6f:3b:cf:ed:9a:56:d3:55:4d:
92:fb:50:84:8b:2f:e5:1b:b8:12:e3:a9:d6:b1:ac:
85:14:25:04:54:a7:22:8f:da:2f:c5:d4:2b:67:8f:
ad:09:e0:a7:2b:c1:ed:54:5a:f7:72:24:c3:fe:b1:
c1:e3:9c:05:c0:a9:9a:46:ad:c1:f2:dc:56:1e:ac:
8e:22:49:a6:93:62:87:4b:27:65:98:ee:d7:cd:dc:
1b:e3:dd:8d:63:8d:90:a6:92:f3:d5:df:f3:fc:a3:
e5:90:84:f2:39:f2:23:11:a9:41:90:71:7d:a2:8e:
92:df:de:3e:3e:52:74:79:75:0f:dd:d9:70:6d:89:
b4:d6:6b:00:13:41:23:ae:ef:60:df:d3:39:dd:0b:
10:36:ae:0a:cd:42:7a:d6:bb:07:2f:be:e3:5c:db:
82:64:08:c6:dc:27:ae:3c:1e:36:4c:45:26:3f:b5:
a0:cf:ab:13:ed:90:ee:97:ae:b4:e2:a5:82:9f:82:
a9:e3:9b:d0:34:d8:79:25:66:b1:e7:fc:25:11:66:
32:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:08:36:9A:68:48:05:10:08:0A:88:85:17:FD:C0:10:52:3F:84:42
X509v3 Authority Key Identifier:
keyid:BA:FE:D1:39:DF:0F:AD:6F:DE:0D:82:86:91:44:10:4D:20:4B:92:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uv7ROd8PrW_eDYKGkUQQTSBLkrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/VQg2mmhIBRAICoiFF_3AEFI_hEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.208.0/22
IPv6:
2a0a:68c0::/40
2a0a:68c0:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
1c:be:24:cb:07:c8:98:b5:26:ea:d1:1e:b6:bb:49:62:90:44:
10:68:33:69:3f:ba:ec:a8:ca:81:bb:48:0f:7c:9a:ce:76:70:
4c:47:b1:ec:66:5d:8a:75:c9:ea:92:0c:63:14:17:56:bf:ff:
35:f5:46:dc:17:6e:24:b7:41:c0:da:78:4a:17:52:e8:f9:bf:
be:29:fb:09:fb:73:7d:e8:ba:7b:48:1f:b4:33:03:63:e5:dd:
f2:34:c6:08:12:7c:2d:8b:ef:00:f1:dc:ca:0b:6d:8f:58:7f:
2f:84:82:a8:e0:ac:b3:3f:d7:36:49:ed:c9:01:5c:21:31:65:
93:ed:12:a2:17:db:1c:56:f8:77:bc:b7:bb:50:dc:09:ce:d5:
97:0a:1c:45:e3:66:ab:f0:76:9f:3b:b3:66:1c:d7:ea:c0:2c:
b7:ad:7b:cb:4e:2c:64:16:ca:4f:67:bf:cc:f6:8a:be:06:ce:
f3:8b:9d:d6:6b:18:bf:e7:3c:1c:81:d3:ba:99:1a:65:91:2a:
41:9c:5b:20:35:12:80:2d:8b:86:a8:32:b9:76:47:42:ae:6f:
9b:e7:1d:6f:3f:24:40:13:1f:b4:d0:c7:7f:ce:8c:f7:2d:e1:
82:a4:94:6c:4c:8d:8b:78:ed:5d:3a:62:a0:72:93:c8:50:26:
e1:73:50:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:35:15 2024 by rpki-client on console-fra.rpki-client.org