Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/VtKNCit2wLtpW6ti944kdo20T8c.roa
File: VtKNCit2wLtpW6ti944kdo20T8c.roa (raw, json)
Hash identifier: zzj7UR/icJ6SSRemWiUIFHZY7poaHJkh9eTGYkQLg1M=
Subject key identifier: 56:D2:8D:0A:2B:76:C0:BB:69:5B:AB:62:F7:8E:24:76:8D:B4:4F:C7
Certificate issuer: /CN=d6e2694652aa298511edafbe18d2b1cdbc792638
Certificate serial: 01916E43CC6E2CC0B8540D27B820080CB905
Authority key identifier: D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/VtKNCit2wLtpW6ti944kdo20T8c.roa
Signing time: Tue 20 Aug 2024 05:30:22 +0000
ROA not before: Tue 20 Aug 2024 05:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60256
IP address blocks: 5.145.112.0/23 maxlen: 23
5.145.112.0/24 maxlen: 24
5.145.113.0/24 maxlen: 24
5.145.115.0/24 maxlen: 24
5.145.118.0/24 maxlen: 24
5.145.119.0/24 maxlen: 24
185.24.254.0/24 maxlen: 24
2a04:2f00:1::/48 maxlen: 48
2a04:2f00:2::/48 maxlen: 48
2a04:2f01:1::/48 maxlen: 48
2a04:2f01:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6e:43:cc:6e:2c:c0:b8:54:0d:27:b8:20:08:0c:b9:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6e2694652aa298511edafbe18d2b1cdbc792638
Validity
Not Before: Aug 20 05:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56d28d0a2b76c0bb695bab62f78e24768db44fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d0:b5:2b:12:7d:e2:14:c7:46:f5:86:c9:b8:
22:95:45:55:41:50:c1:33:b8:b4:c5:38:bf:2b:32:
3d:84:c7:4c:ea:3d:91:cc:34:c0:ec:36:41:60:8e:
26:18:a5:65:ed:9d:f1:40:eb:9f:16:a7:40:dd:60:
f9:23:56:36:3b:5a:25:43:51:77:c0:fb:80:6c:f8:
5f:04:6f:22:d9:de:51:27:8d:db:3f:d7:ba:3b:da:
c7:d0:22:80:99:4f:c1:95:5b:f8:38:3e:d9:55:0d:
d7:3e:31:2b:d3:c1:29:1e:a7:eb:76:64:ee:69:a7:
2d:b0:42:2f:db:7d:57:c4:9c:b7:10:c0:f6:0d:89:
f3:33:ca:af:5e:ac:b9:7b:0a:19:c5:90:ca:d8:3f:
83:9c:db:ba:a5:a0:ee:53:a8:fb:15:ca:e7:28:12:
f6:3a:9a:8d:14:93:80:06:78:c8:aa:ad:67:26:4e:
d9:4f:a0:7d:61:51:b1:44:18:0f:78:99:6c:e5:7d:
6a:ac:27:04:a0:9e:dc:c4:8c:fb:94:f2:c8:a3:48:
86:85:46:e3:1d:b0:8a:48:8a:bf:e4:22:a7:c9:3a:
f0:8b:54:86:06:db:d1:00:81:35:51:2b:1e:99:75:
f6:20:9a:1e:2e:64:4e:c6:2d:b2:92:ca:61:43:87:
65:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D2:8D:0A:2B:76:C0:BB:69:5B:AB:62:F7:8E:24:76:8D:B4:4F:C7
X509v3 Authority Key Identifier:
keyid:D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/VtKNCit2wLtpW6ti944kdo20T8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.145.112.0/23
5.145.115.0/24
5.145.118.0/23
185.24.254.0/24
IPv6:
2a04:2f00:1::-2a04:2f00:2:ffff:ffff:ffff:ffff:ffff
2a04:2f01:1::-2a04:2f01:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
af:d4:c4:44:a4:28:a9:16:04:2d:c9:e7:31:04:23:04:42:99:
89:55:fe:68:fc:25:09:94:88:83:ba:b9:50:66:d4:fb:01:d3:
d6:27:3d:5a:95:b7:aa:36:46:70:57:cf:a2:82:fe:35:89:3d:
ae:c6:21:a7:70:e2:39:8d:0a:96:10:b8:1f:87:ce:08:c1:3d:
6a:5f:1e:2f:97:9a:14:62:64:e2:cc:c1:b0:19:fc:99:a9:11:
e6:51:71:8f:4f:de:1a:35:db:1e:3f:2c:c5:bc:df:f0:4f:e0:
b7:f5:a4:df:03:f9:75:d4:7f:cc:78:2a:cb:bf:88:a8:51:15:
47:fc:10:fc:2d:0d:c8:a0:79:bc:a2:dc:99:9f:89:04:c8:54:
db:75:0e:cb:c0:75:74:39:f8:1a:4f:b1:6c:4c:1b:c0:22:6a:
be:26:7e:cf:ee:77:6d:11:e6:cd:b0:5d:87:3f:a8:ae:a8:df:
01:df:1d:96:5d:d5:9f:27:ff:94:e8:a4:f5:d2:39:5a:63:2a:
eb:70:29:26:46:3d:29:06:47:8d:34:09:e2:a9:b7:c4:ba:47:
b6:4e:c1:15:1f:d8:fb:10:04:0c:03:d7:7f:2e:8c:22:ff:85:
c4:87:c0:92:c4:cf:2b:2a:78:aa:8e:ac:55:fe:bb:2b:cc:c2:
79:ec:90:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:13:57 2024 by rpki-client on console-fra.rpki-client.org