Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/VY_hf3RKClGcnVStG4Sf8dTWZiE.roa
File: VY_hf3RKClGcnVStG4Sf8dTWZiE.roa (raw, json)
Hash identifier: 2pEj6vrawl3293e94ijMQm2SOo1lpNC0EB+lb1DOlsU=
Subject key identifier: 55:8F:E1:7F:74:4A:0A:51:9C:9D:54:AD:1B:84:9F:F1:D4:D6:66:21
Certificate issuer: /CN=81c00cc8c73d1141c89254ed556a8d012ca90226
Certificate serial: 018CC56ECA7BBE3229A009E2B5D9810067B6
Authority key identifier: 81:C0:0C:C8:C7:3D:11:41:C8:92:54:ED:55:6A:8D:01:2C:A9:02:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcAMyMc9EUHIklTtVWqNASypAiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/VY_hf3RKClGcnVStG4Sf8dTWZiE.roa
Signing time: Mon 01 Jan 2024 14:30:21 +0000
ROA not before: Mon 01 Jan 2024 14:30:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41644
IP address blocks: 185.144.212.0/22 maxlen: 22
193.219.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcAMyMc9EUHIklTtVWqNASypAiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:ca:7b:be:32:29:a0:09:e2:b5:d9:81:00:67:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c00cc8c73d1141c89254ed556a8d012ca90226
Validity
Not Before: Jan 1 14:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=558fe17f744a0a519c9d54ad1b849ff1d4d66621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:54:5f:15:ac:83:53:a1:bb:47:52:04:83:46:
4e:2b:9e:99:51:30:91:78:85:1b:45:c4:7a:53:b1:
7e:fa:b7:b0:37:07:1d:af:93:00:d2:87:cc:24:68:
6b:37:a6:e8:a1:a6:b3:9f:ea:73:85:a4:62:0d:5c:
8a:31:ab:e0:ac:1a:a5:7f:21:c9:fb:70:1a:e0:cc:
96:f3:79:b1:e9:9f:e3:b5:87:f3:6a:da:e2:19:d9:
9a:80:1d:46:b5:fd:a1:8b:2b:f7:da:1c:f6:61:ec:
61:9e:8f:84:8a:2e:ba:59:69:87:ba:53:e7:92:30:
a7:09:f6:68:dc:9c:e7:14:ca:49:04:fd:cd:f9:15:
37:bf:92:83:c0:53:da:48:a8:72:a6:b0:9e:bc:8f:
a4:8c:6c:00:77:3c:66:1a:b5:c1:9a:2e:39:87:1f:
dd:e6:6c:cd:03:14:75:9b:e4:8e:f9:b9:87:44:3b:
40:e5:6c:d6:ca:34:fe:92:f0:a5:f9:bd:9b:b5:d4:
c9:99:4d:a4:d3:a9:f0:62:6e:c4:8d:9f:49:da:83:
fa:d6:76:6d:f2:c2:86:c1:32:e9:18:50:a7:8e:51:
7d:f6:90:62:95:96:b5:96:7f:de:37:7e:99:41:4f:
6a:82:5b:7e:28:b1:a8:0b:f8:a9:a1:64:f2:c4:36:
41:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:8F:E1:7F:74:4A:0A:51:9C:9D:54:AD:1B:84:9F:F1:D4:D6:66:21
X509v3 Authority Key Identifier:
keyid:81:C0:0C:C8:C7:3D:11:41:C8:92:54:ED:55:6A:8D:01:2C:A9:02:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcAMyMc9EUHIklTtVWqNASypAiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/VY_hf3RKClGcnVStG4Sf8dTWZiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.212.0/22
193.219.102.0/24
Signature Algorithm: sha256WithRSAEncryption
63:53:11:b9:2e:b1:0e:22:76:ea:8d:35:61:51:ff:02:51:38:
87:02:5a:3e:fa:17:04:27:96:57:b4:63:3b:60:da:6f:eb:6b:
ce:50:4d:82:00:b1:32:41:0e:94:67:c7:9d:00:54:4c:32:00:
ac:83:f4:47:70:4d:2b:82:e7:42:3d:42:03:43:9c:71:19:f0:
dc:b7:3c:0c:7b:17:08:35:6a:7e:f6:ac:bb:12:06:17:1f:33:
3e:70:28:d3:38:0b:30:42:ee:60:76:97:a9:ba:b2:e3:f5:42:
ec:c9:8f:cf:07:52:b6:94:e7:d4:83:77:f5:69:ca:a9:c2:34:
ce:63:76:b8:83:d6:de:70:4a:81:90:e8:5e:13:e6:07:36:d3:
3f:da:fb:b7:c3:c1:7b:24:ef:39:7c:fe:a0:1f:49:d6:34:f6:
c1:06:4b:c2:be:18:d8:ca:3b:54:0b:f3:d9:24:e4:5c:b2:8f:
5c:59:2d:d0:a6:8b:9b:47:e9:0e:8c:2a:67:a9:d4:16:b1:51:
82:03:79:45:3e:6d:91:d3:2f:12:a5:85:bd:00:46:9b:80:1c:
94:84:63:b6:26:e7:2a:ea:89:87:a8:02:69:ac:55:9d:8d:31:
65:9e:cd:8a:01:d0:58:9c:10:5d:01:3f:34:a6:98:9a:54:c8:
ec:8d:dd:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 11:18:56 2024 by rpki-client on console-ams.rpki-client.org