Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/vYVmgH1olzLGCH5JO9sR6NgFttM.roa
File: vYVmgH1olzLGCH5JO9sR6NgFttM.roa (raw, json)
Hash identifier: HjDxte69LmCz1k3uC26l/idpBCMdgCR49hjeHVeDRwg=
Subject key identifier: BD:85:66:80:7D:68:97:32:C6:08:7E:49:3B:DB:11:E8:D8:05:B6:D3
Certificate issuer: /CN=d50962035c5e951013ca0670ca569e79f8d63c15
Certificate serial: 018CC5011D3B988E713B2674232443471D54
Authority key identifier: D5:09:62:03:5C:5E:95:10:13:CA:06:70:CA:56:9E:79:F8:D6:3C:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/vYVmgH1olzLGCH5JO9sR6NgFttM.roa
Signing time: Mon 01 Jan 2024 12:30:33 +0000
ROA not before: Mon 01 Jan 2024 12:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35393
IP address blocks: 185.100.4.0/22 maxlen: 24
194.110.192.0/24 maxlen: 24
91.207.254.0/23 maxlen: 23
91.207.254.0/24 maxlen: 24
91.207.255.0/24 maxlen: 24
195.144.11.0/24 maxlen: 24
46.255.160.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:1d:3b:98:8e:71:3b:26:74:23:24:43:47:1d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50962035c5e951013ca0670ca569e79f8d63c15
Validity
Not Before: Jan 1 12:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd8566807d689732c6087e493bdb11e8d805b6d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f9:02:c3:bc:fc:0f:c2:d3:3c:02:94:3e:bd:
69:4e:e4:a8:df:f0:01:ec:cb:66:5e:b5:41:37:9f:
48:90:b2:e6:85:51:33:3c:9d:37:c2:87:f4:28:18:
d5:2a:25:98:af:36:2c:a0:81:90:6a:9b:63:56:d8:
01:9a:18:15:9d:78:b8:7d:13:1a:cc:97:46:13:4b:
17:c6:0d:df:48:b7:1f:58:06:4c:9d:ae:85:6c:bd:
b2:2e:61:f7:97:b6:6d:4b:65:b5:f9:bc:ca:f8:9e:
5b:23:dc:aa:3b:7e:6e:55:74:c9:af:b9:5a:6d:bb:
d2:b3:8b:71:52:83:49:d7:3a:93:80:25:22:e0:4a:
f0:07:ef:3c:27:81:73:4c:e3:5e:49:ce:08:4f:14:
f1:fa:02:1b:2e:65:9d:9b:af:f4:26:a5:93:66:9d:
13:82:af:e4:57:05:0a:13:b2:37:d9:0e:e5:9f:af:
c2:de:8b:52:d0:1f:a4:e4:03:84:89:fa:93:8d:4e:
74:8f:04:7a:e8:b2:a3:50:80:33:c4:73:9f:3d:6b:
76:ec:13:a3:20:4d:fd:7b:52:6e:9d:af:22:1d:8f:
98:fd:79:66:bf:da:c9:f6:0a:3a:e8:4b:42:67:87:
16:bf:4c:f9:fc:66:3b:33:db:21:e8:04:35:5b:1d:
ad:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:85:66:80:7D:68:97:32:C6:08:7E:49:3B:DB:11:E8:D8:05:B6:D3
X509v3 Authority Key Identifier:
keyid:D5:09:62:03:5C:5E:95:10:13:CA:06:70:CA:56:9E:79:F8:D6:3C:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/vYVmgH1olzLGCH5JO9sR6NgFttM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.160.0/21
91.207.254.0/23
185.100.4.0/22
194.110.192.0/24
195.144.11.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:c6:7f:65:53:43:b3:9e:dd:b2:95:db:ef:be:0f:c1:98:0d:
e1:15:d1:a7:12:84:1b:03:a3:61:72:19:11:45:e2:68:34:83:
6d:49:74:4d:a4:80:c8:de:78:6b:18:ba:2a:8e:b3:db:2c:f3:
fa:56:7f:4d:7a:55:d7:03:15:61:9d:92:18:48:b6:26:f4:02:
dc:66:22:39:80:3a:81:26:2d:59:f6:4d:3a:8e:79:09:45:8c:
2c:c1:73:e8:9a:d2:6c:1e:f2:24:b4:6b:0e:17:d4:3a:76:fd:
5b:5a:49:ae:71:e9:73:19:b9:a1:2c:23:cd:74:6d:4a:70:54:
68:ee:be:1b:0c:c2:42:1e:d0:e4:c1:bc:d4:58:a9:b3:12:ad:
99:04:96:52:01:b4:dc:82:58:68:20:d2:bb:e3:f5:3d:47:8c:
47:c6:b6:4c:af:ed:71:39:24:ee:89:34:bc:91:b0:df:56:1a:
de:5b:2f:e7:e9:2c:45:15:e3:38:2a:ab:a3:dd:20:76:63:f7:
9a:fe:91:7d:61:32:c4:2e:55:35:d8:d6:89:7f:e2:7d:11:3f:
8f:6c:ef:b0:8a:60:c2:d0:59:23:fb:b2:70:94:76:d0:77:aa:
2a:8a:b5:da:42:f8:2a:12:2e:5a:b3:69:fc:f1:57:a3:c4:10:
76:5a:f8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 11:02:06 2024 by rpki-client on console-fra.rpki-client.org