Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/Vu2-69dbERCRmIQVwpLC1AqmgEg.roa
File: Vu2-69dbERCRmIQVwpLC1AqmgEg.roa (raw, json)
Hash identifier: /ZiZTV3u3U8WSb63pXcQd23YVzAeWbdXykklCcK/i1I=
Subject key identifier: 56:ED:BE:EB:D7:5B:11:10:91:98:84:15:C2:92:C2:D4:0A:A6:80:48
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 018CC2DAD765C35C1DD01AA9696F6AFE1C24
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/Vu2-69dbERCRmIQVwpLC1AqmgEg.roa
Signing time: Mon 01 Jan 2024 02:29:31 +0000
ROA not before: Mon 01 Jan 2024 02:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212949
IP address blocks: 217.61.88.0/21 maxlen: 24
167.160.8.0/23 maxlen: 24
167.160.6.0/23 maxlen: 24
167.160.22.0/23 maxlen: 24
167.160.24.0/23 maxlen: 24
185.19.24.0/22 maxlen: 24
89.33.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:d7:65:c3:5c:1d:d0:1a:a9:69:6f:6a:fe:1c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 1 02:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56edbeebd75b111091988415c292c2d40aa68048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:04:3b:58:bc:42:1f:94:ff:2a:3c:b2:e8:9d:
22:c5:b5:9e:ab:3a:04:54:8d:76:15:ae:46:90:ab:
ed:af:bc:64:71:69:ab:3b:96:80:83:3f:f6:92:62:
eb:c2:ff:d4:08:18:e3:70:08:d8:6e:3b:ed:03:ae:
09:32:23:e9:fb:6e:c4:8f:da:ab:93:f6:b6:6c:87:
a6:78:82:98:51:ae:44:c5:4e:6a:ba:14:bf:55:af:
97:63:a0:d0:01:fc:fd:38:84:27:a8:66:67:26:f5:
b5:0b:da:41:42:02:3b:4c:95:3e:f8:79:cf:7b:16:
76:a4:ba:8b:ad:23:6d:7c:2b:a7:61:4b:e7:27:61:
9d:5c:8a:2b:6d:e7:71:6e:7d:1b:66:c8:62:9f:8d:
59:e8:a6:40:14:82:2e:46:90:92:24:f8:3a:1f:23:
eb:56:11:47:9b:83:7a:02:04:e6:79:19:87:68:93:
e9:1e:d7:46:ff:4f:8e:f2:43:c1:e8:4d:e6:6f:63:
af:bb:62:76:9b:79:f6:d9:ae:a3:df:df:b8:da:9a:
a7:d5:6d:f2:05:dc:b7:9d:35:5d:a7:43:79:72:43:
a3:13:61:12:c6:40:b4:ae:69:aa:65:1f:57:59:34:
62:ec:cb:67:11:22:0c:73:4f:dc:fd:c0:97:0b:3a:
d8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:ED:BE:EB:D7:5B:11:10:91:98:84:15:C2:92:C2:D4:0A:A6:80:48
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/Vu2-69dbERCRmIQVwpLC1AqmgEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.108.0/22
167.160.6.0-167.160.9.255
167.160.22.0-167.160.25.255
185.19.24.0/22
217.61.88.0/21
Signature Algorithm: sha256WithRSAEncryption
82:c3:29:f4:f4:22:2d:d2:36:f7:70:76:87:0d:a6:7b:97:17:
70:39:7f:53:20:1e:d5:c5:e1:f0:f3:b3:ee:b2:66:93:aa:b3:
ac:01:ba:7b:0d:88:12:54:a6:6c:2a:bd:14:03:b9:7c:52:ca:
cc:24:0e:79:81:1a:93:a2:4b:a0:46:fb:72:2a:02:c5:b5:e8:
af:da:b5:cb:3e:82:cb:f6:9e:f3:95:4f:18:aa:15:d6:49:a9:
90:dd:f5:33:97:12:a5:c4:a7:e1:dc:88:a2:d7:1c:0b:d4:c3:
8a:96:a5:54:ce:43:40:41:33:21:3d:14:aa:74:ac:f4:fb:77:
07:75:7b:c1:59:d0:38:c5:b4:dc:af:8e:4e:4b:5a:f8:6c:46:
a1:82:81:b3:a4:2b:9a:5f:ee:24:04:da:6d:58:92:98:8b:d6:
ed:93:44:79:77:36:9d:eb:1d:d4:79:83:5b:3b:a6:69:8f:ec:
2a:f7:40:43:47:88:f9:ee:c7:f5:10:06:36:d1:0a:e4:1d:e1:
75:3c:45:e4:01:c7:b6:ed:78:f3:44:75:0f:47:30:01:62:cc:
e0:d3:a6:50:c1:b3:e1:12:a4:c6:da:5b:9d:97:9a:25:86:64:
f4:d6:63:02:60:ec:a8:cc:e7:56:a1:aa:7b:da:22:e4:08:95:
a4:b5:90:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 11:22:54 2024 by rpki-client on console-ams.rpki-client.org