Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/VoILGmeBPHgIyhUzEaezncov9wY.roa
File: VoILGmeBPHgIyhUzEaezncov9wY.roa (raw, json)
Hash identifier: VK5104+XzPhqmyo3EDTDVjcZYGmGqpJH2TX1PMKANpU=
Subject key identifier: 56:82:0B:1A:67:81:3C:78:08:CA:15:33:11:A7:B3:9D:CA:2F:F7:06
Certificate issuer: /CN=d82b2846f093bc9416041be68a2c783161eb04df
Certificate serial: 018CC348C7B0D622F90015504B188B7A842C
Authority key identifier: D8:2B:28:46:F0:93:BC:94:16:04:1B:E6:8A:2C:78:31:61:EB:04:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CsoRvCTvJQWBBvmiix4MWHrBN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/VoILGmeBPHgIyhUzEaezncov9wY.roa
Signing time: Mon 01 Jan 2024 04:29:35 +0000
ROA not before: Mon 01 Jan 2024 04:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21111
IP address blocks: 158.66.4.0/24 maxlen: 24
158.66.2.0/24 maxlen: 24
158.66.1.0/24 maxlen: 24
158.66.5.0/24 maxlen: 24
158.66.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CsoRvCTvJQWBBvmiix4MWHrBN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:c7:b0:d6:22:f9:00:15:50:4b:18:8b:7a:84:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d82b2846f093bc9416041be68a2c783161eb04df
Validity
Not Before: Jan 1 04:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56820b1a67813c7808ca153311a7b39dca2ff706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fb:f6:b3:9c:b8:dd:20:e2:1e:48:70:0c:13:
39:64:b9:38:39:ea:44:8e:23:77:1f:f3:60:16:4f:
79:c1:0d:0d:0f:b4:84:7b:f5:82:d0:70:a4:79:8d:
16:91:f0:c9:44:10:a6:e3:81:e6:4c:92:96:a6:68:
97:5f:e9:1e:1a:23:f0:f1:60:56:8c:39:9c:ef:4d:
ae:20:be:31:11:2a:43:d9:c8:ba:be:e4:ce:84:22:
e9:27:68:75:df:c0:1d:60:34:ac:2b:97:0e:a7:27:
ca:04:de:3e:26:14:43:fe:1b:e9:38:e5:2f:0c:7d:
bf:79:2b:6a:b6:58:05:33:3d:41:3d:78:b4:28:ea:
96:de:5e:26:59:a8:04:70:a1:dd:ea:8d:ab:32:b5:
e9:28:83:47:a5:cb:e4:c0:96:05:ae:78:86:c3:f1:
77:67:e2:15:9d:52:cf:0a:36:fe:7e:14:cd:bd:eb:
9e:97:5f:59:3a:05:80:1a:66:16:8e:9e:61:88:02:
c1:df:23:a5:d8:cd:3d:3b:9b:8c:8b:32:58:fe:32:
6b:08:ee:e9:ae:a8:cf:e9:f4:0b:c4:65:a7:12:7d:
80:65:06:07:3c:46:5e:7c:b4:af:38:78:28:6e:86:
fe:a5:88:32:36:85:31:04:8e:70:5d:c8:19:ca:b2:
6b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:82:0B:1A:67:81:3C:78:08:CA:15:33:11:A7:B3:9D:CA:2F:F7:06
X509v3 Authority Key Identifier:
keyid:D8:2B:28:46:F0:93:BC:94:16:04:1B:E6:8A:2C:78:31:61:EB:04:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CsoRvCTvJQWBBvmiix4MWHrBN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/VoILGmeBPHgIyhUzEaezncov9wY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.66.0.0/16
Signature Algorithm: sha256WithRSAEncryption
84:a1:bf:d4:f1:1e:70:eb:b5:0b:1e:a2:ed:22:d1:ed:c2:dd:
a0:43:7d:26:4e:21:13:77:b7:7c:c1:f9:11:2e:32:94:89:31:
32:65:ad:4c:ab:a8:4e:18:13:61:00:8c:61:5c:35:50:01:5e:
ac:31:c7:df:51:30:cd:86:e1:11:c6:3a:dd:49:43:ef:24:68:
29:64:bb:3b:e9:1e:d9:fe:0e:8e:cb:1e:02:14:1a:d8:77:24:
6d:45:b0:60:65:c9:7a:bf:83:72:ff:b6:0a:38:bb:c4:70:d1:
b0:6d:fa:a4:e7:91:58:ff:fd:00:e4:5a:ed:3e:ae:01:2f:f1:
92:49:69:e6:af:19:d2:ac:c3:c8:ed:b0:02:4c:fa:b5:77:32:
99:3e:e1:18:0b:33:83:f8:55:83:54:02:a4:b3:c7:1c:72:fe:
09:de:bc:66:f9:60:7d:ab:ac:09:a5:0a:d9:83:1f:bc:d3:ac:
b8:17:42:f8:71:35:a0:63:a7:9d:0b:63:5e:8e:99:fe:04:b4:
bd:b0:81:db:82:53:86:6b:d3:98:b8:52:63:3b:2e:c4:dc:dd:
08:63:f3:37:ea:e6:bc:55:33:74:56:b5:9a:62:cb:b8:b8:ab:
ff:29:14:94:ed:27:c9:a4:99:b8:9f:0a:15:a1:96:0a:fa:0b:
de:ff:b9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:40:13 2024 by rpki-client on console-fra.rpki-client.org