Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/VH3G_303asJBWFa_lMh2ouHbT0k.roa
File: VH3G_303asJBWFa_lMh2ouHbT0k.roa (raw, json)
Hash identifier: jIJh4mrM4/T9puXMCbTg0BeeK2DYUK9ibWUESP1cZbk=
Subject key identifier: 54:7D:C6:FF:7D:37:6A:C2:41:58:56:BF:94:C8:76:A2:E1:DB:4F:49
Certificate issuer: /CN=6dc5e3cef5da5e7fdfc364c5d5a0402d3a6786dc
Certificate serial: 018CC348DADDE55F1BDF43AF5AC44B4DFF87
Authority key identifier: 6D:C5:E3:CE:F5:DA:5E:7F:DF:C3:64:C5:D5:A0:40:2D:3A:67:86:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/VH3G_303asJBWFa_lMh2ouHbT0k.roa
Signing time: Mon 01 Jan 2024 04:29:40 +0000
ROA not before: Mon 01 Jan 2024 04:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206550
IP address blocks: 185.182.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:da:dd:e5:5f:1b:df:43:af:5a:c4:4b:4d:ff:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dc5e3cef5da5e7fdfc364c5d5a0402d3a6786dc
Validity
Not Before: Jan 1 04:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=547dc6ff7d376ac2415856bf94c876a2e1db4f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:21:9b:07:c7:d4:45:d7:7f:82:5d:40:b7:5f:
81:c7:5c:3c:7b:be:bb:8c:d0:dc:aa:ae:e8:2b:1a:
07:bf:db:87:e1:56:ac:d2:a4:dc:56:3e:d3:ec:d5:
a1:25:c1:18:f5:6d:ef:01:dc:4b:f6:1c:23:d9:5e:
b5:a9:5c:18:ba:e0:93:d2:64:a7:d7:4a:86:19:21:
9d:07:29:78:b0:3a:61:d6:c8:65:ce:89:93:15:72:
fa:af:b7:04:e2:9c:49:cd:33:03:b7:93:de:ee:0a:
e7:80:e4:7d:73:7f:b8:4c:03:5f:ae:34:ca:5d:42:
61:2e:f2:42:95:8c:5e:be:f0:fe:47:cf:b1:fa:44:
c0:2f:ff:36:8a:b5:7b:7b:4e:c1:fb:3c:4b:da:a7:
de:35:6a:2a:bf:37:72:32:af:64:f9:03:d9:49:3d:
9a:8f:8c:b6:21:ad:05:43:0b:89:c1:df:2d:cc:d4:
d4:ec:30:fa:47:7e:ae:67:21:c6:fc:72:f6:be:af:
56:05:b5:c0:c3:92:bc:28:d0:5b:3a:72:f5:14:00:
8e:7d:38:12:8f:cf:21:70:b6:04:61:7d:93:aa:46:
b3:6e:45:fc:b9:d4:eb:83:ba:7e:67:33:d2:2c:4f:
59:08:49:51:46:13:b0:1c:54:df:ef:35:19:f3:72:
24:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:7D:C6:FF:7D:37:6A:C2:41:58:56:BF:94:C8:76:A2:E1:DB:4F:49
X509v3 Authority Key Identifier:
keyid:6D:C5:E3:CE:F5:DA:5E:7F:DF:C3:64:C5:D5:A0:40:2D:3A:67:86:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/VH3G_303asJBWFa_lMh2ouHbT0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.112.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:24:32:78:97:47:04:73:4d:90:79:1a:9b:b1:44:f6:50:4b:
b6:c0:86:6c:90:ad:d2:98:3c:6a:ba:61:7b:4b:b2:8d:42:24:
4b:c9:2a:59:73:de:fe:37:4c:a6:78:18:ce:f3:2e:95:41:9f:
d7:99:e3:49:63:58:dc:80:1b:dd:9e:02:15:95:f2:4d:00:df:
13:e1:23:d2:4f:a1:ad:67:db:47:97:8d:29:d3:14:84:38:03:
7c:98:37:f0:15:58:21:bd:38:54:84:e5:52:90:06:78:5b:fd:
a5:f0:96:42:11:20:b7:3e:94:e9:90:86:b5:dc:a8:18:10:66:
7a:27:9f:15:dd:27:9b:ca:1b:90:29:13:35:74:47:4d:24:f6:
2d:b9:80:74:81:1d:94:f0:78:a0:79:0d:a1:32:16:14:ab:be:
74:12:a9:22:81:c4:93:73:a5:68:ab:62:56:e3:e6:e6:98:2a:
f7:23:2a:f0:be:c2:3c:3a:41:03:68:ed:a4:f9:ab:dc:91:05:
c8:02:7f:a6:5f:ea:69:5c:3f:65:31:96:ef:55:cc:77:33:da:
00:5a:16:84:cc:4e:8b:45:f4:8b:d1:a5:c7:82:a4:20:ea:87:
cf:11:f7:46:22:a7:66:3f:ee:ee:f3:da:7d:b6:c2:69:32:85:
be:ff:ed:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:58:05 2024 by rpki-client on console-ams.rpki-client.org