Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/vThnB-v2pN9WMn9av9qzYb5p6s8.roa
File: vThnB-v2pN9WMn9av9qzYb5p6s8.roa (raw, json)
Hash identifier: +pNCp4uJwW7Xiwlz75sT4593plhRepecwURYjrb0SEE=
Subject key identifier: BD:38:67:07:EB:F6:A4:DF:56:32:7F:5A:BF:DA:B3:61:BE:69:EA:CF
Certificate issuer: /CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
Certificate serial: 018CC26D586A5644B535EA0829E41242D150
Authority key identifier: 33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/vThnB-v2pN9WMn9av9qzYb5p6s8.roa
Signing time: Mon 01 Jan 2024 00:29:55 +0000
ROA not before: Mon 01 Jan 2024 00:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60368
IP address blocks: 185.16.76.0/24 maxlen: 24
185.16.77.0/24 maxlen: 24
94.136.112.0/23 maxlen: 23
94.136.114.0/23 maxlen: 23
94.136.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:58:6a:56:44:b5:35:ea:08:29:e4:12:42:d1:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
Validity
Not Before: Jan 1 00:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd386707ebf6a4df56327f5abfdab361be69eacf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1e:ca:8d:d6:de:45:3e:fc:93:9f:df:66:a7:
e7:aa:c6:8e:35:14:54:78:7a:60:43:1a:73:70:71:
cf:e1:87:5f:4f:4a:4d:78:b2:13:fe:3c:c2:be:d5:
d4:cb:10:30:db:7c:2d:ce:0c:b9:82:e5:69:2e:45:
e4:c8:1e:ec:dd:48:34:da:41:f2:73:ac:e2:5a:46:
cc:48:48:7a:b6:5f:e0:c9:ed:47:75:7a:d3:25:89:
5e:95:8a:a8:ec:b8:7d:15:22:e2:75:4d:8e:dd:f8:
ef:d4:72:99:f2:53:56:fd:31:c0:37:04:c3:52:78:
1c:0d:f3:fe:f1:c9:a7:c8:2d:2e:4d:5d:5a:6d:f0:
e5:41:1e:a2:98:78:38:44:e9:35:9b:63:f6:80:b6:
49:54:41:ca:ab:14:37:bc:1a:31:93:fe:59:63:fa:
45:8c:dc:1e:61:e2:16:fa:cc:43:b0:68:c8:dc:7c:
51:d1:e1:12:68:60:fd:81:f1:d3:8a:4a:ce:a5:b5:
db:57:27:f3:e3:a2:6b:24:ed:9f:31:b4:b1:02:3e:
c0:35:4c:5f:90:ff:c9:c0:df:78:b0:3e:c9:20:8a:
12:2a:26:8a:ef:a1:ea:1c:4b:c6:fe:fc:ea:13:03:
2c:0d:41:e9:a2:4c:17:a5:c6:0d:0a:8a:20:59:8e:
ca:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:38:67:07:EB:F6:A4:DF:56:32:7F:5A:BF:DA:B3:61:BE:69:EA:CF
X509v3 Authority Key Identifier:
keyid:33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/vThnB-v2pN9WMn9av9qzYb5p6s8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.136.112.0-94.136.116.255
185.16.76.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:af:a4:0e:ad:3c:cb:ef:b4:f0:31:8e:91:a3:94:0b:02:9a:
17:02:e2:55:67:10:59:fb:ab:db:53:6f:e0:c2:77:a4:d3:27:
c0:12:87:8d:c1:56:5e:64:29:05:bd:50:36:a4:9c:5e:7f:b6:
b9:6c:b0:4a:4b:3f:85:f2:3a:ac:8e:d4:93:c1:d7:fb:94:33:
f4:d2:c9:0b:cc:fd:ae:42:0b:65:04:67:d3:d0:0f:85:72:a4:
2e:04:ea:21:c5:14:23:22:13:a4:dd:34:59:7c:b2:3a:fd:59:
44:39:16:86:77:68:ce:d8:8d:6b:84:ae:ce:62:3f:9a:27:9f:
38:2b:7e:09:47:94:33:5a:43:b0:8b:2a:cd:bd:f5:4f:e2:3b:
9d:2c:89:10:bf:98:74:e6:8a:47:76:6b:77:68:41:a5:e0:49:
69:0d:85:43:64:47:10:94:7d:90:eb:c5:eb:76:4a:2b:ad:b5:
b9:8d:32:4b:71:f8:be:73:94:2d:f6:67:23:c4:e2:ac:5c:20:
07:dd:c1:ba:bc:e5:87:a2:f7:74:51:cc:6c:dc:15:e4:fb:4b:
3c:fd:c6:d1:27:e4:22:80:6d:0d:58:d5:5a:3a:37:98:40:16:
f4:ea:01:8c:2e:c3:47:2c:cb:83:04:96:a1:63:bb:8b:54:35:
c4:54:bb:a0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 1 09:44:56 2024 by rpki-client on console-ams.rpki-client.org