Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/vsKInb4qFdzMlB49buQWyN2lfdA.roa
File: vsKInb4qFdzMlB49buQWyN2lfdA.roa (raw, json)
Hash identifier: z5RCuzq5tPoiGk8PuhJh6cguERw/hmc6OsMDHxvL0H4=
Subject key identifier: BE:C2:88:9D:BE:2A:15:DC:CC:94:1E:3D:6E:E4:16:C8:DD:A5:7D:D0
Certificate issuer: /CN=7368aebc1d4585b9b3612ecc2203454d65a872e3
Certificate serial: 018CC5DC288E4D9F748621D8491E06AD3082
Authority key identifier: 73:68:AE:BC:1D:45:85:B9:B3:61:2E:CC:22:03:45:4D:65:A8:72:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2iuvB1FhbmzYS7MIgNFTWWocuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/vsKInb4qFdzMlB49buQWyN2lfdA.roa
Signing time: Mon 01 Jan 2024 16:29:49 +0000
ROA not before: Mon 01 Jan 2024 16:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206195
IP address blocks: 185.193.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/c2iuvB1FhbmzYS7MIgNFTWWocuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:28:8e:4d:9f:74:86:21:d8:49:1e:06:ad:30:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7368aebc1d4585b9b3612ecc2203454d65a872e3
Validity
Not Before: Jan 1 16:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bec2889dbe2a15dccc941e3d6ee416c8dda57dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1f:b6:f1:ee:3c:4e:99:ed:c8:85:b7:03:29:
8a:5f:3e:65:80:0c:c7:8a:e9:0c:85:0a:87:9c:39:
cd:43:14:cc:66:e0:a5:27:1c:da:8a:33:15:2b:bc:
39:8b:c0:c8:57:94:10:ae:dc:d1:f6:fe:23:89:36:
95:98:15:0a:0c:e2:98:62:fd:fc:d8:58:a4:65:6a:
46:80:f1:c9:38:19:65:8a:2f:00:a0:22:1f:0e:75:
59:c9:3a:81:56:5b:47:e1:6c:39:bf:18:68:d1:ca:
15:b9:28:1c:20:1f:6d:e0:b6:5c:d2:3d:65:6b:20:
0a:65:1f:c6:f7:c0:45:10:45:ee:3c:fc:52:55:cb:
a9:07:02:66:50:90:f8:12:82:12:91:1a:0c:df:2c:
ec:72:7f:2a:52:bb:e1:9e:90:d0:e6:03:20:44:9e:
2b:9f:ba:a0:01:8d:8d:cf:d3:fb:b9:f5:f7:0f:d9:
18:c8:3d:fe:3e:31:f8:a3:b0:63:ae:72:6c:a2:a5:
07:86:83:00:5d:bc:d0:a7:ba:6d:d7:35:ae:00:2d:
1e:0d:a5:39:8c:42:68:93:f7:0b:b4:e5:3c:78:68:
3e:cc:34:70:c8:87:f1:a2:a4:1a:4c:04:ed:3b:c0:
c7:e9:32:f2:70:8f:5e:7e:a8:8d:d0:e8:33:b4:19:
98:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C2:88:9D:BE:2A:15:DC:CC:94:1E:3D:6E:E4:16:C8:DD:A5:7D:D0
X509v3 Authority Key Identifier:
keyid:73:68:AE:BC:1D:45:85:B9:B3:61:2E:CC:22:03:45:4D:65:A8:72:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2iuvB1FhbmzYS7MIgNFTWWocuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/vsKInb4qFdzMlB49buQWyN2lfdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.200.0/22
Signature Algorithm: sha256WithRSAEncryption
39:3a:4b:aa:19:f9:6c:b7:1a:58:0d:79:aa:e9:2c:df:5c:9d:
cf:1c:f5:8f:51:fa:dd:ac:1d:b1:89:07:89:17:b7:96:51:45:
e1:96:93:84:a6:c9:53:7e:b8:a8:d5:7e:26:12:5d:c8:1e:3a:
7b:08:ce:83:8a:77:47:dd:73:36:dd:44:22:13:02:0d:08:c9:
47:73:b8:92:bf:9b:f2:1c:63:9b:fa:5e:36:92:63:2b:c6:cd:
b7:52:09:c0:8f:cb:c8:82:a8:b7:b7:26:f1:53:9b:6f:a2:4b:
4f:51:c5:77:20:35:ed:09:54:64:52:cc:7e:f4:ab:17:81:87:
96:76:c1:52:0d:71:83:d2:ee:66:1d:c2:eb:08:3d:ef:be:9d:
a5:5a:95:43:9c:00:f9:31:7a:2f:94:fd:ed:b9:b2:c7:c5:38:
0a:66:db:70:35:55:e7:d2:a6:5a:9e:43:bb:f9:59:29:10:d3:
b1:cc:d7:bc:13:e1:90:bd:92:11:44:58:4b:d2:03:9e:e7:11:
62:89:64:96:5c:3a:57:6b:bc:1a:45:d3:62:21:80:d6:43:e9:
aa:10:a8:f9:fe:fb:02:f1:75:0b:a4:4d:b0:88:9a:59:60:f5:
6e:09:03:cc:7f:9c:4d:21:bb:f6:f1:d3:39:47:3a:95:17:9e:
82:b2:53:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:56:41 2024 by rpki-client on console-ams.rpki-client.org