Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/8VUTrmDnZNkVpnDnLaK8NL4scAQ.roa
File: 8VUTrmDnZNkVpnDnLaK8NL4scAQ.roa (raw, json)
Hash identifier: wVNurSwcIegTZUVL+40tlG91POiP7Bzt8BCDVunc5wU=
Subject key identifier: F1:55:13:AE:60:E7:64:D9:15:A6:70:E7:2D:A2:BC:34:BE:2C:70:04
Certificate issuer: /CN=e81393bdff601462a55591d26acb3d8c923ff26d
Certificate serial: 018CC8013AA5C9EC65BC8E9025E6DA04699A
Authority key identifier: E8:13:93:BD:FF:60:14:62:A5:55:91:D2:6A:CB:3D:8C:92:3F:F2:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6BOTvf9gFGKlVZHSass9jJI_8m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/8VUTrmDnZNkVpnDnLaK8NL4scAQ.roa
Signing time: Tue 02 Jan 2024 02:29:32 +0000
ROA not before: Tue 02 Jan 2024 02:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213373
IP address blocks: 149.3.170.0/24 maxlen: 24
2.56.10.0/24 maxlen: 24
2a10:5fc0::/32 maxlen: 32
2a10:5fc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6BOTvf9gFGKlVZHSass9jJI_8m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 01:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:3a:a5:c9:ec:65:bc:8e:90:25:e6:da:04:69:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e81393bdff601462a55591d26acb3d8c923ff26d
Validity
Not Before: Jan 2 02:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f15513ae60e764d915a670e72da2bc34be2c7004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:75:d0:bd:80:fc:26:b6:50:f9:bd:7d:d4:3e:
b5:50:96:44:00:f4:88:62:bc:20:5c:20:0b:aa:45:
f6:9c:5d:ee:28:9b:6f:38:75:49:56:23:5e:7e:79:
8d:f3:c7:2f:93:5c:7e:28:20:05:93:18:1a:46:8a:
a2:6d:2d:54:6f:09:37:5c:32:51:7a:86:a8:cc:2a:
8e:a5:cb:da:30:66:e6:8a:0c:5f:93:3a:ba:11:46:
31:b8:99:60:d0:bb:a7:55:c5:e7:ad:54:f9:fa:3b:
fb:73:02:4b:49:63:b0:97:dc:17:7f:70:28:3c:05:
33:a9:7e:91:60:14:ce:51:a3:a5:f6:c9:9c:f5:88:
b4:5a:6e:11:f7:aa:63:f8:4f:29:8f:5c:58:c4:7e:
6f:bf:96:6d:bb:17:16:d8:36:2c:b7:7e:90:d2:1e:
2f:bb:c5:18:9d:98:2f:56:b8:81:8b:d3:98:f7:1a:
04:91:59:05:bd:cf:f9:5a:ae:75:b3:95:00:85:e9:
5c:db:79:c3:1b:95:14:aa:18:c5:c3:33:85:a6:5a:
0d:8f:78:9c:5f:2a:2f:79:5e:92:c0:83:2a:51:2f:
42:b6:7a:a1:58:3f:c2:f3:f7:1b:06:51:52:0f:3e:
44:3c:bf:14:f5:a8:ce:9c:76:bd:9d:44:61:f7:93:
0a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:55:13:AE:60:E7:64:D9:15:A6:70:E7:2D:A2:BC:34:BE:2C:70:04
X509v3 Authority Key Identifier:
keyid:E8:13:93:BD:FF:60:14:62:A5:55:91:D2:6A:CB:3D:8C:92:3F:F2:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6BOTvf9gFGKlVZHSass9jJI_8m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/8VUTrmDnZNkVpnDnLaK8NL4scAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.10.0/24
149.3.170.0/24
IPv6:
2a10:5fc0::/29
Signature Algorithm: sha256WithRSAEncryption
23:02:0e:14:d0:f7:03:5b:b8:3d:23:b3:83:2a:4b:fe:0d:f8:
fe:34:6e:a8:d1:63:32:ee:ea:ac:f5:e9:23:06:03:94:e6:2b:
f5:9d:67:0f:67:d2:29:38:ac:76:cb:ea:19:05:e9:c1:16:11:
ff:8f:64:50:ec:63:ba:57:dc:92:a2:1a:7e:f4:21:c0:9a:01:
7b:63:36:26:f5:43:a0:9d:e8:be:95:48:2f:f4:7f:3b:c9:be:
d0:9d:f7:71:79:52:9a:45:19:df:fb:9b:ba:3b:49:05:0e:d3:
8d:8c:08:c2:e4:b3:ba:7b:74:29:c3:01:75:18:24:2a:f3:44:
42:cb:dd:58:ee:56:7a:82:95:e0:20:a5:2d:8e:c1:db:c9:95:
b2:7c:6f:7c:66:c0:4f:bd:83:5e:1f:f3:5b:56:57:ac:7d:b5:
cb:76:18:d0:0f:46:8e:5d:8a:29:1b:58:16:aa:14:ba:4f:2e:
e5:77:c8:5a:a5:f8:cb:20:60:99:0e:b2:0c:e5:a3:20:00:b8:
62:b7:ed:26:00:77:e1:54:a8:9f:61:52:03:3b:6d:78:bd:f2:
b8:f6:f9:0a:04:d8:af:d3:be:e3:89:55:c4:5c:1e:da:11:f0:
5d:ad:87:ae:66:32:09:f9:92:2d:b9:33:ec:d2:ad:27:0a:e8:
12:80:54:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 06:17:25 2024 by rpki-client on console-fra.rpki-client.org