Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/vu1XYvy5tJQc37VNFj8nELgWxhc.roa
File: vu1XYvy5tJQc37VNFj8nELgWxhc.roa (raw, json)
Hash identifier: t4z1hNA42EUpCtAme5cxQ4dPsSVv+g+8YMS1/4y/q10=
Subject key identifier: BE:ED:57:62:FC:B9:B4:94:1C:DF:B5:4D:16:3F:27:10:B8:16:C6:17
Certificate issuer: /CN=0d7a912569b787d92e5355fffaed581fe50a29c0
Certificate serial: 018CC2DAB5B8B1391FF3BCC9E8F6264894AE
Authority key identifier: 0D:7A:91:25:69:B7:87:D9:2E:53:55:FF:FA:ED:58:1F:E5:0A:29:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/vu1XYvy5tJQc37VNFj8nELgWxhc.roa
Signing time: Mon 01 Jan 2024 02:29:22 +0000
ROA not before: Mon 01 Jan 2024 02:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43942
IP address blocks: 212.84.55.0/24 maxlen: 24
212.84.54.0/24 maxlen: 24
212.84.52.0/24 maxlen: 24
212.84.53.0/24 maxlen: 24
91.200.130.0/24 maxlen: 24
91.200.129.0/24 maxlen: 24
91.200.131.0/24 maxlen: 24
91.200.128.0/24 maxlen: 24
91.200.128.0/22 maxlen: 22
212.84.48.0/24 maxlen: 24
212.84.48.0/21 maxlen: 21
212.84.50.0/24 maxlen: 24
212.84.49.0/24 maxlen: 24
212.84.51.0/24 maxlen: 24
91.223.155.0/24 maxlen: 24
2a01:4840::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 10:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:b5:b8:b1:39:1f:f3:bc:c9:e8:f6:26:48:94:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7a912569b787d92e5355fffaed581fe50a29c0
Validity
Not Before: Jan 1 02:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=beed5762fcb9b4941cdfb54d163f2710b816c617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0e:67:70:41:c1:b6:ca:02:8d:78:d7:63:a0:
b1:87:90:1a:ad:76:43:41:fd:0a:7a:6e:eb:c6:ac:
33:66:7e:11:47:96:40:9f:af:58:fd:d5:80:70:76:
fa:5e:4c:05:f0:26:eb:2a:3d:76:83:25:f0:10:41:
98:8b:29:a8:5b:30:dd:74:cf:29:3a:9f:f6:ce:bc:
4f:4c:52:00:89:36:3e:30:1a:4b:84:f7:0c:db:91:
bc:39:61:21:85:6e:67:5d:eb:1b:67:31:77:e0:38:
f7:aa:dd:83:93:90:6b:5c:39:75:06:37:bd:4c:82:
d6:ee:9a:e9:f7:3e:d8:bc:25:e1:14:3e:86:8f:c8:
b8:05:22:f9:e4:1e:bb:1d:a8:18:b7:97:28:53:bb:
41:ed:8b:34:32:b3:cf:b3:fa:4c:c2:8d:11:33:7d:
a7:e3:45:95:a1:3b:4a:22:02:db:57:3e:e1:44:95:
16:2d:02:88:20:f1:47:fe:1d:91:af:0f:50:47:5b:
fd:15:ee:9f:2a:1b:e5:62:dd:64:e6:0e:12:97:75:
b2:6b:00:d4:fe:31:1d:84:06:85:21:1b:25:da:5e:
af:47:a6:42:d8:80:a2:7d:c1:e0:6d:d3:86:04:c2:
21:26:8a:52:68:37:20:2e:5c:e7:80:3c:bb:a8:7d:
69:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:ED:57:62:FC:B9:B4:94:1C:DF:B5:4D:16:3F:27:10:B8:16:C6:17
X509v3 Authority Key Identifier:
keyid:0D:7A:91:25:69:B7:87:D9:2E:53:55:FF:FA:ED:58:1F:E5:0A:29:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/vu1XYvy5tJQc37VNFj8nELgWxhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.128.0/22
91.223.155.0/24
212.84.48.0/21
IPv6:
2a01:4840::/32
Signature Algorithm: sha256WithRSAEncryption
6e:ab:5b:d1:4a:63:5d:7c:22:1a:3b:22:1a:46:14:f8:6b:8c:
57:c6:7c:c9:15:c2:46:7d:71:e5:f2:2a:d9:fc:ba:99:61:47:
f8:42:d9:05:7c:2a:c4:da:71:96:c3:49:f6:12:36:a9:f7:84:
64:54:ff:79:19:b9:f4:18:c6:6e:a4:aa:d1:af:e4:34:3f:cb:
36:9c:dd:36:9d:fc:43:9f:59:e3:4e:fe:27:b1:08:e3:21:98:
e7:11:f0:96:6d:c0:a3:ea:4a:ca:ee:bb:68:30:2e:43:4f:59:
95:19:5e:a7:76:a9:65:fb:d1:c1:2a:90:d9:9c:76:27:d1:5f:
6d:70:a6:13:f9:7f:0d:74:e8:26:4f:cc:06:89:c3:f0:74:20:
1b:c3:3b:ac:33:cd:62:ee:fb:e8:4a:0c:a7:59:2f:53:cb:62:
7a:17:26:49:23:20:7b:c5:16:44:7e:9a:01:62:c9:1d:03:7b:
8a:49:84:c5:91:e9:ad:02:c9:f4:fd:64:32:6a:87:ea:07:e1:
44:49:eb:3a:d1:c2:98:b1:08:22:17:70:47:4c:14:02:31:ac:
19:00:52:3b:07:03:ec:00:51:45:8b:8d:9d:60:17:40:c3:6f:
7d:f1:32:f4:39:67:83:c5:38:87:03:3c:4e:4a:1b:06:ee:fe:
32:45:13:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 14:27:43 2024 by rpki-client on console-fra.rpki-client.org