Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/VYX_qQCetiv5LFF5y4s7_P2K8CE.roa
File: VYX_qQCetiv5LFF5y4s7_P2K8CE.roa (raw, json)
Hash identifier: eOuVXXNi56W7TGeDFZpxZ4BFLkSRQ11MX64fhHDVuto=
Subject key identifier: 55:85:FF:A9:00:9E:B6:2B:F9:2C:51:79:CB:8B:3B:FC:FD:8A:F0:21
Certificate issuer: /CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0
Certificate serial: 01920A705BF16F7DFA2A2EE8BD36E33DB347
Authority key identifier: C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/VYX_qQCetiv5LFF5y4s7_P2K8CE.roa
Signing time: Thu 19 Sep 2024 13:19:48 +0000
ROA not before: Thu 19 Sep 2024 13:19:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42000
IP address blocks: 91.103.160.0/21 maxlen: 21
91.103.164.0/24 maxlen: 24
91.103.165.0/24 maxlen: 24
91.103.166.0/24 maxlen: 24
91.103.167.0/24 maxlen: 24
94.124.104.0/21 maxlen: 21
185.160.20.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:0a:70:5b:f1:6f:7d:fa:2a:2e:e8:bd:36:e3:3d:b3:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0
Validity
Not Before: Sep 19 13:19:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5585ffa9009eb62bf92c5179cb8b3bfcfd8af021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:18:19:67:a4:1e:ca:08:08:5c:04:a6:f2:59:
52:e4:ef:b6:b5:34:74:3e:8b:de:99:72:f2:84:6f:
3a:f8:a5:0d:10:30:e4:57:16:e3:b8:a0:94:b5:b7:
94:be:d3:7c:d3:41:30:a1:ef:72:f7:60:a2:86:df:
b5:e2:0c:f9:23:bc:ef:77:03:31:92:5c:cf:a1:1e:
6c:30:9d:87:ab:8e:fe:27:ee:b8:50:27:4d:e8:b3:
22:f1:48:8a:0c:29:cc:1f:80:81:c4:a5:5f:d9:03:
19:bb:42:fc:44:7f:70:1f:02:4f:43:6e:e4:6d:da:
9f:d4:76:a7:b7:14:7d:63:c4:95:91:72:2c:66:08:
a0:55:c8:53:35:6e:b1:e5:af:f6:94:1f:96:03:a5:
74:f6:bd:87:ee:d5:94:a1:70:1a:3f:ae:cc:0d:ab:
4f:96:51:28:95:82:10:23:26:26:25:2c:94:2f:d1:
b8:e7:5f:54:33:4c:95:e1:5e:1d:79:9f:54:42:db:
40:8f:42:7a:90:45:10:54:29:43:78:e5:1d:b6:17:
5c:9c:1f:d7:7e:88:6b:73:c5:b8:f8:6a:4e:2c:ce:
a9:9d:28:21:fc:73:ba:f8:06:7f:98:fe:ac:5c:4f:
b4:23:e9:a0:13:88:c5:7c:66:50:40:f7:4d:00:1c:
3d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:85:FF:A9:00:9E:B6:2B:F9:2C:51:79:CB:8B:3B:FC:FD:8A:F0:21
X509v3 Authority Key Identifier:
keyid:C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/VYX_qQCetiv5LFF5y4s7_P2K8CE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.160.0/21
94.124.104.0/21
185.160.20.0/22
Signature Algorithm: sha256WithRSAEncryption
03:fe:e3:b3:52:5e:ad:9a:01:43:d4:ab:44:40:0d:5d:24:b0:
78:6e:e6:22:19:65:89:e1:4d:9b:cb:93:18:aa:08:6f:73:8c:
9a:57:23:25:cd:13:12:69:e8:ac:70:5e:de:1a:23:30:e8:57:
0d:49:bc:e1:0f:34:81:4b:cf:9d:c1:2e:ba:3b:84:18:26:6f:
48:cc:03:1f:a3:b6:3c:9b:79:31:2f:31:9b:03:69:80:d9:b9:
bd:20:81:ef:91:97:91:65:1d:af:1c:0d:85:6a:93:a8:0c:ad:
9a:c2:32:6e:47:a4:31:54:07:99:ea:5b:0f:54:22:c9:b9:1e:
e1:ad:d5:2c:b9:a0:1f:94:c7:df:00:d1:20:9f:e4:33:97:a8:
df:09:e1:e9:94:82:d4:24:f6:0e:e6:c9:a9:5f:8e:68:b7:25:
f0:ba:49:9d:bb:52:91:a6:1d:bd:16:a3:81:5b:9a:15:88:be:
0d:09:0c:02:2d:d9:6d:31:1e:20:b2:f4:58:4c:29:21:2f:71:
a3:fc:2f:ca:2e:dd:32:f3:79:1f:a9:e3:83:8b:41:95:ec:7c:
f5:ec:e5:f2:6e:d2:0c:f4:1d:84:f7:ef:e6:ca:d8:52:5f:5d:
a6:69:e9:30:b7:70:94:a6:3e:70:91:84:ee:14:0b:63:94:55:
74:0c:52:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:13:00 2024 by rpki-client on console-ams.rpki-client.org