Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/0161bc-2b85-4b49-830b-7ee2fd43d902/1/VkvuQxfIwOzRVHNwW8MuMnEJnDQ.roa
File: VkvuQxfIwOzRVHNwW8MuMnEJnDQ.roa (raw, json)
Hash identifier: qNNQV+RhDxSjiQhQ7fOR00GejNNTcS7rifBHa2Gu/8w=
Subject key identifier: 56:4B:EE:43:17:C8:C0:EC:D1:54:73:70:5B:C3:2E:32:71:09:9C:34
Certificate issuer: /CN=4cd25482a7d739913551e1de151bfecc417f8770
Certificate serial: 018CC2DACE242098FBD6335855ABD1A0B414
Authority key identifier: 4C:D2:54:82:A7:D7:39:91:35:51:E1:DE:15:1B:FE:CC:41:7F:87:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNJUgqfXOZE1UeHeFRv-zEF_h3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/0161bc-2b85-4b49-830b-7ee2fd43d902/1/VkvuQxfIwOzRVHNwW8MuMnEJnDQ.roa
Signing time: Mon 01 Jan 2024 02:29:28 +0000
ROA not before: Mon 01 Jan 2024 02:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44078
IP address blocks: 79.135.216.0/22 maxlen: 22
46.37.192.0/19 maxlen: 19
79.135.220.0/22 maxlen: 22
79.135.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/0161bc-2b85-4b49-830b-7ee2fd43d902/1/TNJUgqfXOZE1UeHeFRv-zEF_h3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/0161bc-2b85-4b49-830b-7ee2fd43d902/1/TNJUgqfXOZE1UeHeFRv-zEF_h3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNJUgqfXOZE1UeHeFRv-zEF_h3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 13:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:ce:24:20:98:fb:d6:33:58:55:ab:d1:a0:b4:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd25482a7d739913551e1de151bfecc417f8770
Validity
Not Before: Jan 1 02:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=564bee4317c8c0ecd15473705bc32e3271099c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:85:03:1c:d7:fa:b4:cf:3d:bf:50:33:76:c1:
57:39:d4:29:8a:84:32:3b:7b:5c:f2:e7:a7:ca:7a:
ca:32:b8:6d:41:14:22:62:0a:18:b8:16:16:71:c0:
b8:87:d4:b9:ab:79:33:27:35:f6:92:84:4e:cb:02:
cc:89:8f:ba:bb:61:45:07:53:73:31:9d:9d:37:d6:
58:bf:3a:06:75:3d:bf:19:7b:10:e6:7f:04:b6:7d:
14:bb:ed:93:6c:66:51:35:d7:dc:bb:91:5d:ca:0d:
69:3a:d8:32:3b:2e:5e:04:64:cc:88:aa:fe:cd:8b:
f3:8d:a9:e8:c6:27:cf:4b:a5:20:cb:b8:15:31:cc:
d8:37:17:d4:d8:0a:a1:33:9c:b2:01:30:18:34:fd:
33:cd:a0:09:f9:5a:6f:ef:d0:92:5e:a8:59:98:cc:
91:e1:bd:7e:c1:c7:10:8a:28:e4:a3:24:31:9b:c4:
bf:86:ea:46:1c:55:cc:ec:44:16:f5:59:b2:e4:e7:
08:f8:34:a2:6e:29:16:31:6c:ff:49:47:82:ce:4d:
3e:98:8f:e3:39:82:34:f0:ae:79:54:d4:5e:a7:fc:
13:6b:37:5c:b5:bf:2e:e8:63:a2:2b:d8:aa:6f:0a:
b3:ef:de:83:8a:41:55:05:ad:34:40:86:01:93:c1:
a5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:4B:EE:43:17:C8:C0:EC:D1:54:73:70:5B:C3:2E:32:71:09:9C:34
X509v3 Authority Key Identifier:
keyid:4C:D2:54:82:A7:D7:39:91:35:51:E1:DE:15:1B:FE:CC:41:7F:87:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNJUgqfXOZE1UeHeFRv-zEF_h3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0161bc-2b85-4b49-830b-7ee2fd43d902/1/VkvuQxfIwOzRVHNwW8MuMnEJnDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0161bc-2b85-4b49-830b-7ee2fd43d902/1/TNJUgqfXOZE1UeHeFRv-zEF_h3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.192.0/19
79.135.192.0/19
Signature Algorithm: sha256WithRSAEncryption
0c:69:e2:47:69:76:76:a2:be:be:87:1d:cd:24:ff:9f:11:d2:
df:04:64:55:0d:55:82:52:16:2a:24:ad:96:09:44:be:dd:0b:
ab:c9:fc:99:b5:c7:06:32:44:cd:5f:43:42:0b:e2:ad:8a:5c:
34:f6:2f:12:38:04:be:66:56:5b:bb:79:6d:65:35:bb:35:36:
97:4d:7a:05:a1:2f:a3:9b:5a:1c:ba:5d:52:a7:be:1c:1e:92:
bc:c5:0c:22:36:b4:39:20:9e:a2:66:e2:81:c0:04:fc:c4:2b:
7c:86:e4:ef:d1:85:f9:fc:4f:07:0d:53:76:a1:27:52:f4:11:
f6:13:e3:08:cb:52:3e:51:0e:8c:aa:fc:5e:30:b8:32:57:11:
6a:c1:aa:23:f5:9c:9c:fd:9b:b3:ab:b6:ae:ca:84:9d:8f:5a:
1a:30:5a:3a:39:b1:87:a0:09:37:2d:4a:b5:66:8b:b4:7f:ab:
55:e5:9e:aa:cb:3c:e7:f9:21:cd:c5:b2:56:27:c7:51:f6:05:
ea:56:f9:4d:44:73:9c:15:c2:17:87:8d:e8:ee:87:ab:5b:59:
2f:56:74:76:08:6d:ba:e4:39:f1:dd:e7:39:5c:e5:9a:bd:eb:
8a:a9:99:b0:69:08:c6:a1:1d:71:95:60:09:0b:f3:8e:db:ae:
ec:e0:ac:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:44:39 2024 by rpki-client on console-fra.rpki-client.org