Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/VDC4DEW_hnPBSySziOh35x3kGRc.roa
File: VDC4DEW_hnPBSySziOh35x3kGRc.roa (raw, json)
Hash identifier: 6BOEW99wEzOatupN3kGsALya1/ybwQHC4jdVIIZMTDE=
Subject key identifier: 54:30:B8:0C:45:BF:86:73:C1:4B:24:B3:88:E8:77:E7:1D:E4:19:17
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018F7AC33B31E063CC47E09A3689C9A0D4F8
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/VDC4DEW_hnPBSySziOh35x3kGRc.roa
Signing time: Wed 15 May 2024 05:39:25 +0000
ROA not before: Wed 15 May 2024 05:39:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13213
IP address blocks: 45.85.107.0/24 maxlen: 24
89.36.23.0/24 maxlen: 24
93.114.192.0/24 maxlen: 24
185.150.0.0/24 maxlen: 24
185.192.68.0/24 maxlen: 24
220.158.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:7a:c3:3b:31:e0:63:cc:47:e0:9a:36:89:c9:a0:d4:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: May 15 05:39:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5430b80c45bf8673c14b24b388e877e71de41917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:13:a9:ea:f3:a8:43:4d:fd:02:5e:a3:83:0f:
5b:74:c6:51:c2:67:1d:e4:40:ac:d9:c9:49:1b:ad:
01:27:86:c8:56:33:7d:d5:fe:9f:c1:c7:5b:1d:db:
59:27:15:5c:a9:e7:fc:1b:3c:83:6c:71:cb:a0:00:
da:be:95:1e:b5:41:0c:fc:42:89:44:19:60:86:22:
fc:7d:40:48:27:81:e9:a7:4b:49:24:2b:59:e0:22:
78:61:a9:a9:72:70:86:3b:5c:01:2f:4c:6b:1f:78:
0e:b0:3a:fe:a6:60:c3:2a:56:39:a4:5a:35:d3:37:
94:e4:9c:c6:fa:94:18:4c:15:b0:61:8a:11:aa:5c:
91:b6:21:9d:1b:96:90:d2:44:8b:87:7c:e3:a7:91:
17:07:d1:14:fa:cd:62:58:51:6c:a9:77:0c:85:40:
69:b4:c2:76:20:6f:b4:00:a0:78:de:c8:65:51:5e:
4e:ea:92:16:bd:b4:cd:2b:22:25:2f:35:bb:23:6c:
c4:af:05:50:19:fb:19:a7:f6:69:56:66:7a:a7:af:
52:40:97:2d:2b:d0:5a:d4:8b:4a:27:00:bb:72:42:
6e:70:19:4c:d2:d3:b5:13:55:1a:5c:98:c1:02:76:
99:f4:71:16:00:d7:04:d6:c6:dc:37:9d:d5:9d:d4:
53:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:30:B8:0C:45:BF:86:73:C1:4B:24:B3:88:E8:77:E7:1D:E4:19:17
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/VDC4DEW_hnPBSySziOh35x3kGRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.107.0/24
89.36.23.0/24
93.114.192.0/24
185.150.0.0/24
185.192.68.0/24
220.158.198.0/24
Signature Algorithm: sha256WithRSAEncryption
47:15:f4:47:98:47:29:fc:ea:ec:3c:ff:03:f6:7b:10:68:2c:
8f:00:b0:ae:16:07:2a:f6:a0:b7:09:69:3f:5c:ca:c1:ec:51:
fc:18:a6:69:ec:b1:cd:c2:8d:1a:34:d8:5d:0b:3c:39:79:3a:
75:62:34:f9:d4:3d:84:4c:f4:4c:6e:f9:8b:19:21:6e:9d:3f:
b4:18:8f:38:98:e9:42:f9:4c:b9:d5:b9:69:76:18:17:7a:4a:
2f:a7:b9:02:05:81:c9:ba:81:2f:1a:0c:40:9a:72:84:5e:9d:
39:53:93:34:99:bf:d3:db:f3:fc:71:eb:d3:6c:bb:40:7f:a5:
a8:c4:11:ac:e0:18:11:cf:6f:73:99:f2:9c:50:60:e4:85:d5:
d4:5e:ae:42:29:a3:77:31:e7:70:1d:f5:46:f1:8b:05:33:74:
c6:54:db:62:73:da:4a:3a:b2:36:f9:29:d9:b5:6c:a9:76:a9:
3c:02:61:07:a7:52:c9:b4:70:5d:c6:b2:ca:69:bf:7e:cb:0f:
bc:84:1f:92:96:4f:89:c6:5b:d3:08:a4:dd:a7:b1:4b:74:75:
e2:22:97:ca:80:8d:54:18:a4:fb:44:8e:35:3a:11:9c:ad:89:
f8:d5:fc:4a:a1:30:7d:57:39:4f:6d:3b:92:71:03:0e:1c:f1:
cd:5c:1e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:57:05 2024 by rpki-client on console-ams.rpki-client.org