Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/vahYQiIJRc4iXB-AYGMHx9PnP0w.roa
File: vahYQiIJRc4iXB-AYGMHx9PnP0w.roa (raw, json)
Hash identifier: 8WEbRmzg7ZtqhQ0oz9Y/Ixno+S4zG7fMNLcdlT+sQU4=
Subject key identifier: BD:A8:58:42:22:09:45:CE:22:5C:1F:80:60:63:07:C7:D3:E7:3F:4C
Certificate issuer: /CN=68fed508cca5f716e4dd974de3500e7dd19baa15
Certificate serial: 018CC6B7CED9297C807414A80A66AC60FB53
Authority key identifier: 68:FE:D5:08:CC:A5:F7:16:E4:DD:97:4D:E3:50:0E:7D:D1:9B:AA:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aP7VCMyl9xbk3ZdN41AOfdGbqhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/vahYQiIJRc4iXB-AYGMHx9PnP0w.roa
Signing time: Mon 01 Jan 2024 20:29:43 +0000
ROA not before: Mon 01 Jan 2024 20:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62013
IP address blocks: 185.162.140.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aP7VCMyl9xbk3ZdN41AOfdGbqhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:ce:d9:29:7c:80:74:14:a8:0a:66:ac:60:fb:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68fed508cca5f716e4dd974de3500e7dd19baa15
Validity
Not Before: Jan 1 20:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bda85842220945ce225c1f80606307c7d3e73f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:0c:9d:2e:05:f3:47:af:8a:58:ad:07:ba:0b:
e5:28:d5:64:6e:0b:37:24:b9:90:f7:8a:21:c0:82:
e1:62:40:e3:50:7f:29:f7:6c:54:14:2d:9b:14:28:
dc:6d:fb:1f:99:32:c6:05:10:4c:44:42:e5:eb:56:
e8:f4:46:40:f7:39:fd:32:e5:73:37:16:85:62:09:
19:f4:b5:03:06:04:ed:85:25:08:a6:df:04:67:8a:
f1:c1:54:db:6f:46:90:e8:d4:4f:3c:3f:fb:58:d1:
1a:b4:00:e6:c5:c4:5c:6b:83:f8:1d:2b:8d:1e:e7:
9f:e2:b2:78:ab:9b:b4:d7:14:4d:6f:3e:b0:52:20:
64:08:3b:15:2d:e4:bf:72:ff:95:97:c6:93:f5:0d:
e8:fe:9b:58:d9:98:3a:57:8d:8d:f7:aa:96:5f:4a:
c4:b7:04:84:3a:2c:ba:95:de:42:85:d9:1c:4b:02:
08:db:9f:3c:6c:dc:cf:a7:3e:1b:90:a3:3f:44:9d:
68:b7:de:64:e5:fd:55:18:bb:fc:be:47:1b:98:95:
d8:86:a1:89:a1:dc:3e:49:56:38:ec:7e:29:34:52:
e5:d1:d6:96:49:0f:9f:44:13:7f:d4:ff:6d:09:df:
f0:bc:46:43:5a:1f:17:f1:e0:0b:78:9b:81:27:1b:
4e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A8:58:42:22:09:45:CE:22:5C:1F:80:60:63:07:C7:D3:E7:3F:4C
X509v3 Authority Key Identifier:
keyid:68:FE:D5:08:CC:A5:F7:16:E4:DD:97:4D:E3:50:0E:7D:D1:9B:AA:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aP7VCMyl9xbk3ZdN41AOfdGbqhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/vahYQiIJRc4iXB-AYGMHx9PnP0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.140.0/22
Signature Algorithm: sha256WithRSAEncryption
77:3e:38:ad:18:07:4d:f6:77:8a:7e:39:49:77:c3:f1:4b:7d:
91:1c:3d:52:1c:5f:9b:d8:14:a8:27:3e:80:a8:f4:07:2d:70:
0d:c5:88:8a:0f:f8:11:0f:f9:e3:87:7c:92:d7:51:80:f4:2b:
59:0d:3d:ff:38:41:9b:b8:5e:82:2c:5f:cf:2b:4a:c6:d1:f1:
a8:fe:e5:89:ef:a7:e6:6b:f0:7f:38:a9:88:0d:75:64:b7:8e:
7d:77:22:db:2c:71:41:f5:a1:f8:fe:75:34:1b:3a:e8:41:bd:
cf:52:0b:56:ac:a8:16:78:37:a7:ed:3c:56:1a:9e:bf:ed:67:
13:36:de:3d:a5:f7:45:bb:19:dd:0b:a3:a5:38:16:70:a8:c5:
c1:9e:d7:e8:0f:69:ee:e0:15:77:97:cc:17:56:85:d2:16:4b:
5d:6c:4a:f5:35:fc:15:db:61:8e:02:f2:ce:0c:bb:0c:46:62:
36:47:e5:0c:5d:24:a0:89:b0:4f:cf:b8:bd:c5:fb:9d:fe:1f:
1b:94:b8:64:39:ef:2a:d6:e0:70:0d:9e:10:93:c6:75:0e:b5:
e9:c0:1d:a2:42:e3:25:ab:fa:a1:7f:8f:b8:76:ad:47:3f:e1:
3e:71:b9:8a:7e:cd:c2:e9:94:9a:ee:08:bb:b8:2d:ca:99:64:
eb:15:1c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:42:11 2024 by rpki-client on console-ams.rpki-client.org