Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/vjX85Uzch6I10Dgfdo4Mu-6Eae8.roa
File: vjX85Uzch6I10Dgfdo4Mu-6Eae8.roa (raw, json)
Hash identifier: WceSshMyvaBq0fgrzbTDHsdF2yborQ/Efco3GEP8ums=
Subject key identifier: BE:35:FC:E5:4C:DC:87:A2:35:D0:38:1F:76:8E:0C:BB:EE:84:69:EF
Certificate issuer: /CN=cfeace714c29568ef197007b141d12758cc415d5
Certificate serial: 018CCA993F8B2EADAC2A9AE14D8A3CB0E47E
Authority key identifier: CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/vjX85Uzch6I10Dgfdo4Mu-6Eae8.roa
Signing time: Tue 02 Jan 2024 14:34:50 +0000
ROA not before: Tue 02 Jan 2024 14:34:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42595
IP address blocks: 91.223.51.0/24 maxlen: 24
91.192.252.0/22 maxlen: 24
91.224.36.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jul 2024 14:20:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:3f:8b:2e:ad:ac:2a:9a:e1:4d:8a:3c:b0:e4:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfeace714c29568ef197007b141d12758cc415d5
Validity
Not Before: Jan 2 14:34:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be35fce54cdc87a235d0381f768e0cbbee8469ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:26:1c:49:05:cd:f7:d8:70:f2:56:b9:59:37:
48:e8:2d:e8:57:47:5f:b3:0e:f5:e0:4e:02:53:94:
0c:31:e0:d7:d6:3d:ed:0f:e0:0d:98:1f:47:46:f2:
9c:64:73:8c:7e:6d:3f:06:94:1e:96:39:ca:72:18:
41:14:cb:e6:71:31:f8:77:15:11:de:f6:dd:40:7e:
ae:65:9e:0f:db:59:82:3a:4a:50:c7:ec:13:86:97:
e1:8c:1e:49:6f:01:3f:74:bc:20:d6:78:c5:22:10:
d8:d8:52:6e:98:7b:a2:09:bf:d3:5e:eb:fa:ca:21:
56:7a:cf:29:71:17:fe:23:d6:cf:af:65:19:ee:ed:
89:1a:ab:39:94:2f:fa:bc:4d:70:d1:4f:7c:4e:9f:
98:c7:9e:7b:b2:ea:55:6e:7d:d3:dd:b3:53:ba:c7:
a7:1d:6a:50:4c:11:3a:0e:81:17:4a:11:b6:e6:38:
5b:08:ba:19:9f:ef:0f:f9:73:bc:e6:20:55:0e:e3:
44:65:e8:6b:49:21:1d:b1:49:b3:e9:50:57:b6:f3:
2f:16:00:88:a6:0f:d9:f4:f1:af:cd:74:3b:81:3e:
5c:88:0d:3f:f0:16:49:cb:46:a3:ef:96:13:47:78:
7d:b3:da:47:b8:90:7c:69:68:43:b4:6e:34:11:b6:
57:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:35:FC:E5:4C:DC:87:A2:35:D0:38:1F:76:8E:0C:BB:EE:84:69:EF
X509v3 Authority Key Identifier:
keyid:CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/vjX85Uzch6I10Dgfdo4Mu-6Eae8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.252.0/22
91.223.51.0/24
91.224.36.0/23
Signature Algorithm: sha256WithRSAEncryption
49:ef:47:db:d3:b6:05:45:5f:20:8a:9c:23:d2:b1:03:be:d6:
56:b5:26:7a:a7:92:c6:32:eb:b9:66:6a:18:97:2d:80:03:10:
25:e7:bc:64:b5:ce:d7:66:73:9d:09:22:9c:d6:48:2d:e5:85:
76:3e:3f:bc:15:4b:3d:96:cd:2d:c8:b8:63:71:bb:99:1d:95:
98:fb:9b:25:d6:1a:53:3f:d7:a5:be:2e:dc:a0:c8:44:f0:52:
45:31:78:69:72:12:4e:f9:35:96:17:72:77:de:c7:66:2f:27:
ef:09:84:bb:63:50:11:96:8a:c7:2a:ac:81:ae:9d:99:2c:91:
cd:ee:53:f9:87:9a:70:06:98:3d:d4:a1:f4:89:0e:45:c6:fa:
1c:05:86:8c:b7:69:50:a3:07:c6:56:04:98:f6:c1:1e:57:30:
c0:09:f1:d1:e3:1e:6c:f1:16:4c:ac:5a:7c:ce:a6:59:f6:a8:
5d:15:f9:2c:10:0d:69:68:e6:f2:83:d8:d3:91:f9:91:0a:f1:
76:30:0a:60:07:be:b6:2e:83:b5:c6:1d:af:f6:87:5f:8c:78:
35:9b:4b:89:08:ef:2d:cb:5f:93:bb:45:7d:73:6a:20:71:ff:
8f:d6:ac:9b:0e:ce:6b:ab:c9:15:17:66:42:57:54:fd:8d:28:
51:58:a3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 21:33:52 2024 by rpki-client on console-ams.rpki-client.org