Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/vb3gssDjLTwTrPMKCLsaCi49ydc.roa
File: vb3gssDjLTwTrPMKCLsaCi49ydc.roa (raw, json)
Hash identifier: dO008BwQ6cQsdIy387la4LhfeZYYlsJJs+zF4ezgNQE=
Subject key identifier: BD:BD:E0:B2:C0:E3:2D:3C:13:AC:F3:0A:08:BB:1A:0A:2E:3D:C9:D7
Certificate issuer: /CN=a79bba2805a988954e4fec42570530f16f9e7093
Certificate serial: 018CC3B6DFCAC6A986138D1A4212D96D6E39
Authority key identifier: A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/vb3gssDjLTwTrPMKCLsaCi49ydc.roa
Signing time: Mon 01 Jan 2024 06:29:51 +0000
ROA not before: Mon 01 Jan 2024 06:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12989
IP address blocks: 81.171.61.0/24 maxlen: 24
81.171.66.0/24 maxlen: 24
81.171.70.0/23 maxlen: 23
81.171.68.0/24 maxlen: 24
81.171.105.0/24 maxlen: 24
81.171.106.0/24 maxlen: 24
81.171.116.0/24 maxlen: 24
81.171.115.0/24 maxlen: 24
2001:4de0:2105::/48 maxlen: 48
2001:4de0:400::/40 maxlen: 40
2001:4de0:4100::/40 maxlen: 40
2001:4de0:600::/40 maxlen: 40
2001:4de0:2000::/40 maxlen: 40
2001:4de0:3100::/40 maxlen: 40
2001:4de0:3000::/40 maxlen: 40
2001:4de0:2300::/40 maxlen: 40
2001:4de0:500::/40 maxlen: 40
2001:4de0:2100::/40 maxlen: 48
2001:4de0:4000::/40 maxlen: 40
2001:4de0:700::/40 maxlen: 40
2001:4de0:4300::/40 maxlen: 40
2001:4de0:2200::/40 maxlen: 40
2001:4de0:4200::/40 maxlen: 40
2001:4de0:1000::/48 maxlen: 48
2001:4de0:402::/48 maxlen: 48
2001:4de0:2202::/48 maxlen: 48
2001:4de0:7002::/48 maxlen: 48
2001:4de0:5010::/48 maxlen: 48
2001:4de0:ac13::/48 maxlen: 48
2001:4de0:3004::/48 maxlen: 48
2001:4de0:4006::/48 maxlen: 48
2001:4de0:101::/48 maxlen: 48
2001:4de0:7001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:df:ca:c6:a9:86:13:8d:1a:42:12:d9:6d:6e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79bba2805a988954e4fec42570530f16f9e7093
Validity
Not Before: Jan 1 06:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bdbde0b2c0e32d3c13acf30a08bb1a0a2e3dc9d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:eb:35:a6:37:b8:96:77:da:2a:a8:e9:4d:3e:
6d:9d:0d:3d:31:1b:b6:ca:ec:df:ae:7f:86:78:0f:
91:55:2d:6d:98:7f:f8:f8:fe:98:2f:69:4a:54:63:
06:8e:e6:79:69:31:c2:5f:02:82:be:86:fa:2f:64:
95:0c:c5:c2:50:8a:17:4d:7f:a0:42:8a:e6:09:03:
75:fc:54:36:39:b3:28:27:04:a3:c2:6d:ab:c1:e6:
b7:19:75:cd:61:a4:bb:3b:d6:c4:3c:35:d6:a4:38:
51:ca:e9:2b:be:1e:a0:44:dd:01:f8:a9:c8:d3:af:
ab:5b:ed:b4:6f:37:9e:7e:0d:c8:9b:7b:03:39:f0:
aa:ca:8b:c7:77:a9:e8:b2:e4:9a:cc:28:38:a6:8f:
61:4b:13:19:39:46:a7:54:73:b3:58:e8:46:af:f4:
e4:f0:40:6d:03:bc:25:eb:03:19:a7:c1:48:d1:20:
77:0a:dd:76:ef:60:22:7b:23:b6:f8:77:4a:bf:4f:
49:82:fe:6e:e2:f6:16:41:9b:cd:d1:db:01:35:b9:
c0:6d:d5:49:99:b9:4b:61:67:5f:72:f2:b0:fa:a6:
d4:99:06:6b:79:44:87:7e:0d:c1:42:47:10:c4:15:
70:6c:ad:2c:8e:73:ac:ba:62:68:cb:8c:88:07:b9:
f3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:BD:E0:B2:C0:E3:2D:3C:13:AC:F3:0A:08:BB:1A:0A:2E:3D:C9:D7
X509v3 Authority Key Identifier:
keyid:A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/vb3gssDjLTwTrPMKCLsaCi49ydc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.171.61.0/24
81.171.66.0/24
81.171.68.0/24
81.171.70.0/23
81.171.105.0-81.171.106.255
81.171.115.0-81.171.116.255
IPv6:
2001:4de0:101::/48
2001:4de0:400::/38
2001:4de0:1000::/48
2001:4de0:2000::/38
2001:4de0:3000::/39
2001:4de0:4000::/38
2001:4de0:5010::/48
2001:4de0:7001::-2001:4de0:7002:ffff:ffff:ffff:ffff:ffff
2001:4de0:ac13::/48
Signature Algorithm: sha256WithRSAEncryption
38:62:66:12:21:8b:f6:b7:1b:b1:90:d0:65:df:f8:e0:ba:18:
5a:f4:78:5b:c3:12:61:c6:cc:09:cf:ae:5b:c0:09:35:c2:84:
38:72:01:6b:77:a8:fb:dd:ef:73:89:c6:59:a0:9e:9e:9f:44:
e0:44:56:18:62:9b:db:fc:b0:43:e9:2d:3a:45:eb:1b:6e:96:
a7:5e:3e:80:bd:bd:d1:68:a0:7b:68:6d:a0:50:21:13:da:6b:
57:c0:f0:87:6c:d3:af:fd:d3:da:d3:d0:91:1b:29:56:e2:0c:
d3:fa:19:61:31:1a:23:8d:b1:d1:a8:41:90:a7:20:97:e2:56:
75:e0:93:1a:e0:a6:55:ab:30:f7:d5:90:5e:e9:9f:a6:7b:71:
f8:cb:55:1e:0f:96:91:20:dd:cd:21:bb:47:eb:df:71:da:48:
f3:25:a5:d6:6d:d7:35:e7:7c:62:cd:d2:fe:28:bb:b5:38:86:
87:92:61:60:73:38:26:5f:e4:66:50:70:d0:1d:7e:0f:9e:1e:
5d:77:ba:32:fd:b9:81:18:19:0e:8b:5d:a2:98:b6:fb:3f:2d:
60:d3:66:e2:4d:68:9b:80:23:65:ec:8e:6c:e4:24:6a:06:c3:
e2:39:d2:91:a3:c3:1b:e0:b0:d5:45:44:e5:66:79:94:6e:13:
a3:3a:10:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:19:01 2024 by rpki-client on console-ams.rpki-client.org