Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/VWXjrqTP5A1WEE-5MKgq3RAQI1Y.roa
File: VWXjrqTP5A1WEE-5MKgq3RAQI1Y.roa (raw, json)
Hash identifier: eud+UAWJhETQRgK9Hydcs6PeTJ4id14PP9yNrujH5I4=
Subject key identifier: 55:65:E3:AE:A4:CF:E4:0D:56:10:4F:B9:30:A8:2A:DD:10:10:23:56
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018F38F73D2D80923F42725CFBC4BBCD6D2D
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/VWXjrqTP5A1WEE-5MKgq3RAQI1Y.roa
Signing time: Thu 02 May 2024 11:01:18 +0000
ROA not before: Thu 02 May 2024 11:01:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212017
IP address blocks: 45.90.236.0/24 maxlen: 24
45.90.237.0/24 maxlen: 24
185.106.124.0/22 maxlen: 24
185.121.12.0/22 maxlen: 22
185.128.52.0/22 maxlen: 22
185.227.172.0/22 maxlen: 22
185.232.8.0/22 maxlen: 24
193.17.180.0/24 maxlen: 24
193.17.182.0/24 maxlen: 24
194.48.140.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:38:f7:3d:2d:80:92:3f:42:72:5c:fb:c4:bb:cd:6d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: May 2 11:01:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5565e3aea4cfe40d56104fb930a82add10102356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:13:f3:a2:b2:6a:33:2e:18:b4:d9:db:84:d5:
77:48:07:d5:15:44:e7:eb:32:1a:db:96:d6:85:33:
f6:3c:8e:79:f1:38:58:d4:aa:6b:85:25:5b:a1:36:
6e:6e:89:aa:10:e2:81:19:02:22:d6:a3:68:d1:c9:
f9:02:e1:e0:77:46:75:55:f7:de:29:de:bf:97:ed:
a1:31:e2:97:94:55:3f:42:d3:25:e6:e3:83:42:1e:
f7:20:50:29:b2:7b:29:af:cb:ab:a0:ea:ad:29:b3:
b6:5f:59:f4:3c:1d:f0:59:43:ff:97:06:8c:bb:6c:
d4:63:f0:9b:e1:07:ef:36:1b:08:6c:12:87:6b:ae:
46:84:99:8a:8c:e0:69:51:41:38:07:f9:9c:cd:88:
70:ca:a5:50:0e:e0:8b:2a:75:66:03:1e:6e:e1:20:
f3:c7:9d:27:7c:45:3a:54:ca:14:45:15:96:eb:09:
15:58:97:aa:3b:ae:5e:fa:13:df:6c:b8:c6:d7:1a:
31:30:e0:eb:64:47:bf:19:90:4a:5f:4f:fe:b5:3b:
23:67:bd:97:1e:98:31:36:db:85:8f:3e:1b:d9:e3:
26:63:02:14:24:b7:95:da:42:bd:3c:ed:93:3d:10:
2c:1f:4e:0d:86:41:f9:d4:ba:3a:64:a6:ab:8f:e3:
a8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:65:E3:AE:A4:CF:E4:0D:56:10:4F:B9:30:A8:2A:DD:10:10:23:56
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/VWXjrqTP5A1WEE-5MKgq3RAQI1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.236.0/23
185.106.124.0/22
185.121.12.0/22
185.128.52.0/22
185.227.172.0/22
185.232.8.0/22
193.17.180.0/24
193.17.182.0/24
194.48.140.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:6d:22:65:13:c6:8f:9f:dc:08:49:9c:3b:d0:92:f4:be:08:
ad:46:92:b6:b1:f3:5e:bc:b8:40:f7:15:bf:ed:1a:b0:a8:63:
aa:64:5d:f9:5c:ad:1e:4a:4a:8f:7e:ea:b5:d9:8c:6d:d8:c2:
64:bc:b2:91:74:c4:a6:e5:9c:57:6f:9e:46:7c:f1:f4:a8:3a:
29:18:6b:c3:72:c9:84:ae:90:a6:21:f8:b7:76:58:ec:54:f6:
9b:76:fa:36:ea:a6:c4:e3:fa:2b:07:1f:c8:a6:3e:63:01:30:
01:3f:78:6c:c9:0c:65:dd:0f:e5:76:09:47:51:38:53:40:dc:
67:ac:8e:31:45:73:b5:21:bc:e8:b5:10:8f:ab:7a:4d:f4:3f:
39:f8:1e:44:b6:9e:e9:39:36:9a:74:60:47:5c:32:6a:3b:d8:
dc:f0:3b:f9:2b:30:4a:cb:51:a2:76:65:58:14:98:dc:01:27:
a8:c4:ea:cb:67:32:20:f4:62:3e:de:1d:14:5c:55:fa:83:ab:
1d:c7:76:cf:65:cb:5d:d6:22:0c:fd:56:ec:32:c6:7b:d4:a0:
0f:f3:96:57:4e:12:30:29:a1:27:93:ec:0a:1d:82:6a:80:eb:
c6:84:67:5e:ad:93:8e:08:51:ae:71:0f:e2:64:85:d7:52:60:
60:78:8c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 09:49:13 2024 by rpki-client on console-ams.rpki-client.org