Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/8kYf4UNrN6zuVKuHmQyB3gOuZMk.roa
File: 8kYf4UNrN6zuVKuHmQyB3gOuZMk.roa (raw, json)
Hash identifier: kvmf9bJHf21Y3bywX1cV/ZPJrkqbHAJWAZTN9qjcbA0=
Subject key identifier: F2:46:1F:E1:43:6B:37:AC:EE:54:AB:87:99:0C:81:DE:03:AE:64:C9
Certificate issuer: /CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Certificate serial: 018CC56E682EDF0D86E56E67B908D6FBA191
Authority key identifier: 54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/8kYf4UNrN6zuVKuHmQyB3gOuZMk.roa
Signing time: Mon 01 Jan 2024 14:29:56 +0000
ROA not before: Mon 01 Jan 2024 14:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 193.203.254.0/24 maxlen: 24
87.121.172.0/24 maxlen: 24
87.121.169.0/24 maxlen: 24
87.121.170.0/24 maxlen: 24
87.121.171.0/24 maxlen: 24
87.121.168.0/24 maxlen: 24
185.64.24.0/24 maxlen: 24
185.64.25.0/24 maxlen: 24
185.64.26.0/24 maxlen: 24
185.64.27.0/24 maxlen: 24
87.121.173.0/24 maxlen: 24
87.121.174.0/24 maxlen: 24
87.121.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:68:2e:df:0d:86:e5:6e:67:b9:08:d6:fb:a1:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Validity
Not Before: Jan 1 14:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f2461fe1436b37acee54ab87990c81de03ae64c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:87:30:f2:d0:93:e5:2e:64:f9:17:9d:a7:08:
3c:43:09:8b:f4:64:9f:e4:35:93:69:a3:b6:da:30:
81:7e:db:da:b3:46:86:f4:5e:94:71:31:05:54:c1:
17:48:b2:64:15:a6:15:34:f8:0e:63:aa:fd:3d:c9:
6a:70:1d:c9:df:8f:31:e8:a0:f2:d9:56:6e:f5:9a:
3f:bb:e9:88:9a:2e:58:0f:4d:46:8e:7a:47:dc:bb:
2b:aa:18:91:b7:8b:86:81:5b:35:c7:2a:89:09:53:
be:61:69:d4:69:72:07:11:a2:3a:61:90:e1:86:c3:
f4:b7:93:2d:1e:dc:a9:1d:2d:ed:82:ec:a5:94:75:
f9:9c:1f:40:50:5e:e8:60:9c:f7:3b:38:30:b6:4e:
24:05:f9:17:41:d3:3f:ee:11:96:90:f5:a1:0c:0c:
06:dd:e8:f8:5d:8c:4e:40:a2:90:e0:cc:ea:d0:d4:
e7:c0:14:16:f5:b3:ea:4e:6d:73:6c:20:a9:b8:d4:
bd:a4:bd:d3:11:ee:d4:47:cc:51:26:f7:90:b7:bd:
5f:ba:9a:b3:99:32:92:5a:e1:db:16:f1:f3:09:ca:
23:5e:0b:ba:24:67:78:f8:34:1a:8c:91:55:1c:d7:
3e:ba:43:d2:f8:91:3a:6b:13:5c:02:93:95:af:e8:
d9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:46:1F:E1:43:6B:37:AC:EE:54:AB:87:99:0C:81:DE:03:AE:64:C9
X509v3 Authority Key Identifier:
keyid:54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/8kYf4UNrN6zuVKuHmQyB3gOuZMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.168.0/21
185.64.24.0/22
193.203.254.0/24
Signature Algorithm: sha256WithRSAEncryption
64:f2:c2:e7:9f:88:ec:82:05:ad:95:a9:d2:7a:07:1e:9b:3a:
3d:a4:e9:ab:79:f9:c7:5e:d1:fd:a1:71:1e:6c:ff:f3:03:ef:
d9:84:74:47:fb:a5:57:6c:a6:98:8e:ff:bc:a8:89:f1:c5:00:
71:76:9b:af:ec:93:9e:a8:58:19:e5:fc:ea:e3:38:d1:fa:a3:
a6:21:66:5c:d0:3e:14:f4:c2:cd:e0:df:74:7e:07:b6:5f:4f:
20:97:47:21:12:61:16:ec:2d:48:65:93:d9:37:3e:14:0b:4a:
73:fd:0a:13:77:f8:13:ce:3c:85:2e:d2:c4:27:cc:7c:37:5a:
78:10:4c:bf:1e:f2:c6:ca:29:86:46:50:93:19:b1:48:04:28:
71:ab:9c:78:b1:c2:f3:60:e6:7e:db:ee:3d:96:19:7b:03:18:
52:e2:6b:77:23:f8:e5:fe:70:43:a9:69:25:7e:0d:40:a0:c9:
9c:19:21:1c:87:ad:0c:8c:1c:cd:ac:9b:ec:57:c8:4a:20:d7:
cf:4a:92:0b:a0:bd:ff:73:b4:b7:a6:d5:b6:31:3d:7a:68:a9:
cc:3f:da:1c:f5:9e:a4:69:a8:50:55:71:8e:10:e0:ac:74:f5:
88:6e:e3:38:da:9a:22:a8:13:6b:30:f3:5d:21:2b:e5:f8:a5:
4f:21:63:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:08:10 2024 by rpki-client on console-fra.rpki-client.org