Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/vUFeNcUMykwYDqEpMoTJ-jHRxuE.roa
File: vUFeNcUMykwYDqEpMoTJ-jHRxuE.roa (raw, json)
Hash identifier: Lf7VwcmeuDnBp7ZbvGnFuGo7qsPWZ6scspPmcLNCmVw=
Subject key identifier: BD:41:5E:35:C5:0C:CA:4C:18:0E:A1:29:32:84:C9:FA:31:D1:C6:E1
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018CC8DE8BA3120D928666889283800359E6
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/vUFeNcUMykwYDqEpMoTJ-jHRxuE.roa
Signing time: Tue 02 Jan 2024 06:31:17 +0000
ROA not before: Tue 02 Jan 2024 06:31:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200113
IP address blocks: 85.209.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:8b:a3:12:0d:92:86:66:88:92:83:80:03:59:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 2 06:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd415e35c50cca4c180ea1293284c9fa31d1c6e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:09:91:2b:c4:3f:71:1d:5b:9d:82:fe:3c:e0:
18:e0:9c:0e:39:00:d0:ef:07:f9:c8:9e:f5:32:82:
b2:43:62:4b:08:9b:0a:56:47:5d:ca:cb:00:32:48:
34:4e:6d:d5:8d:12:c2:8d:de:d6:a7:02:62:73:fc:
d4:ea:2c:72:72:c5:3c:ce:2a:ab:c5:fd:21:04:29:
34:38:dd:99:4d:0e:a4:6c:14:68:9d:e8:9f:f3:7d:
e2:17:49:94:73:d6:63:5f:23:e9:35:ec:20:a7:4d:
0d:eb:35:c0:99:b1:36:bf:54:45:98:88:cf:66:31:
d3:ce:52:b1:a0:d5:d4:fe:dc:7c:e9:54:b4:e3:f1:
1e:2d:b1:d0:dd:3d:16:12:0f:cf:8f:0b:a0:f4:10:
87:aa:44:20:81:88:36:fa:10:18:81:d0:88:d7:fa:
89:cd:52:f5:d4:97:bd:a4:2e:c2:ec:80:26:98:56:
20:76:65:05:c2:8a:d6:e9:88:c9:9a:f2:23:3b:05:
e0:65:ec:41:b7:85:f9:63:b9:d5:18:eb:b4:17:dc:
e5:35:1d:45:de:b5:fe:3b:c0:43:8e:c5:a3:45:6d:
e5:e9:f8:bc:49:00:10:cf:a3:42:a0:0e:08:99:f5:
b9:fe:9b:18:c2:c2:a9:a1:44:4a:c4:5a:58:ec:bd:
8a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:41:5E:35:C5:0C:CA:4C:18:0E:A1:29:32:84:C9:FA:31:D1:C6:E1
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/vUFeNcUMykwYDqEpMoTJ-jHRxuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.162.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:fa:69:d2:d8:f4:6c:98:76:20:f6:49:3d:36:bd:3b:42:cf:
dc:67:27:69:48:43:35:85:fc:18:56:d0:2e:41:20:5f:02:00:
a0:3b:5f:28:8c:80:ff:d9:d1:9a:5b:d0:77:00:d0:05:6b:7e:
e9:f3:1c:2a:a0:32:d0:08:5e:2c:c1:8f:7b:bc:14:4f:bf:a7:
74:ba:95:fd:80:5e:b1:60:d1:27:84:b9:19:8f:35:1e:b9:8b:
0c:6e:92:4e:32:06:71:7b:5b:ba:27:4b:eb:8a:fd:34:52:cd:
71:62:70:f9:73:fb:14:cc:b9:a4:47:c3:39:7e:02:ae:15:b3:
3a:51:78:c0:b6:9a:51:b1:48:5d:64:46:67:7f:d0:73:0c:65:
0d:e1:8f:94:8d:bf:54:2b:0c:75:2a:d7:fc:55:dc:f9:92:27:
fc:88:24:7d:a8:6c:27:aa:52:17:03:91:49:23:72:49:33:b2:
ec:0b:52:df:65:38:75:be:7f:17:d0:bc:21:59:a9:88:ff:34:
55:53:15:7c:bd:ee:69:4d:05:bd:39:4e:14:90:9f:db:3c:dd:
7b:a9:3a:70:ca:c6:34:87:3b:5d:d7:94:b0:e1:31:0f:93:fc:
36:d5:23:bb:da:c4:18:d6:42:98:88:23:6a:08:6f:e1:3f:98:
da:be:81:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 22:59:56 2024 by rpki-client on console-ams.rpki-client.org