Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/VqJ8qkKoUSeZMK2n0OV3oiNzk4Q.roa
File: VqJ8qkKoUSeZMK2n0OV3oiNzk4Q.roa (raw, json)
Hash identifier: Fm/3JAW+LkJlCVJjJiLbVSwtKPVWANU2oe6Ari4QbLM=
Subject key identifier: 56:A2:7C:AA:42:A8:51:27:99:30:AD:A7:D0:E5:77:A2:23:73:93:84
Certificate issuer: /CN=89b332d57ce14fab1ebd746817dd701062c74a88
Certificate serial: 018E3C20C86C18C39931ED7D462969FBFC39
Authority key identifier: 89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/VqJ8qkKoUSeZMK2n0OV3oiNzk4Q.roa
Signing time: Thu 14 Mar 2024 08:42:45 +0000
ROA not before: Thu 14 Mar 2024 08:42:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34572
IP address blocks: 83.173.64.0/19 maxlen: 19
83.173.64.0/21 maxlen: 21
83.173.72.0/21 maxlen: 21
83.173.80.0/21 maxlen: 21
83.173.88.0/21 maxlen: 24
83.173.96.0/21 maxlen: 21
83.173.112.0/22 maxlen: 24
83.173.115.0/24 maxlen: 24
185.170.151.0/24 maxlen: 24
2a02:6100::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3c:20:c8:6c:18:c3:99:31:ed:7d:46:29:69:fb:fc:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89b332d57ce14fab1ebd746817dd701062c74a88
Validity
Not Before: Mar 14 08:42:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56a27caa42a851279930ada7d0e577a223739384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:17:bd:81:50:fe:c4:19:48:32:7e:5e:6b:9e:
60:55:3f:e3:68:2f:ff:04:ff:04:cb:dc:10:74:e5:
49:f4:5d:d6:68:13:83:4e:93:69:b1:04:be:17:fe:
53:b1:de:04:ff:1f:2e:9c:3e:86:df:df:08:71:4c:
6a:82:ad:ec:f5:03:7e:8a:1a:b1:4c:88:56:0a:2c:
98:e3:29:0d:1c:2c:df:07:1a:df:0e:1e:a5:09:a7:
26:d7:2f:8a:0a:85:98:5e:5f:d6:9b:77:8c:c4:4c:
1f:e0:05:e7:03:3b:83:4d:23:a2:b5:bb:52:7e:ef:
63:14:fb:90:08:14:cc:d9:05:5f:e7:9a:7d:8b:0b:
28:cb:de:a4:59:bf:ed:0e:93:1e:f9:6e:41:6e:0f:
62:84:43:1c:82:d9:2b:67:7c:80:84:9d:e5:b9:61:
96:1e:7e:f2:5c:ec:49:5a:34:4f:7e:63:5c:22:5a:
8b:a1:b8:8a:85:ee:5e:c8:7c:2b:bb:0a:c0:e6:0e:
3a:32:77:90:b9:3f:f3:25:4f:5e:7a:4a:a4:fc:46:
c5:72:9f:de:af:50:0e:f7:cb:1c:31:a5:79:d0:5a:
af:3d:33:d8:9d:08:10:d2:c1:65:2a:c4:62:ba:8e:
e1:22:a6:c0:e0:29:11:a6:2e:8d:75:a1:74:2c:97:
74:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A2:7C:AA:42:A8:51:27:99:30:AD:A7:D0:E5:77:A2:23:73:93:84
X509v3 Authority Key Identifier:
keyid:89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/VqJ8qkKoUSeZMK2n0OV3oiNzk4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.173.64.0-83.173.103.255
83.173.112.0/22
185.170.151.0/24
IPv6:
2a02:6100::/32
Signature Algorithm: sha256WithRSAEncryption
80:2b:c7:07:51:77:a9:ec:5f:b2:1a:83:62:17:5b:fd:0a:fa:
98:d4:a1:05:15:df:cf:13:62:6a:df:39:7c:87:0e:06:a3:d4:
4d:5b:14:7e:76:40:8f:d6:7c:f5:74:c3:ab:6f:c3:ea:46:56:
d2:c3:f3:73:b5:99:e8:a5:62:9c:3b:7c:76:6c:bb:0c:16:35:
d9:8d:76:ba:50:da:ae:76:3c:90:4d:30:73:80:83:ac:f1:31:
de:32:31:af:fc:47:29:f5:fd:7f:ed:01:fd:72:ca:31:4c:76:
ee:30:25:df:06:61:3a:93:d3:b4:2b:c9:bd:41:f9:ef:7d:97:
e6:86:6b:b6:8b:7c:e8:82:c3:03:92:b4:37:3d:4b:80:0f:f6:
b6:18:78:cf:26:ee:bf:d0:08:ef:8c:40:c1:7d:89:b1:8c:a3:
c8:1d:4b:7e:88:71:c9:8d:9a:3e:39:e1:f1:6d:c6:eb:54:36:
53:35:cd:59:15:c6:02:e9:2e:ac:e1:2e:af:d5:67:65:97:32:
2c:ab:de:df:24:29:62:d4:53:ff:16:8a:e2:c6:97:74:3d:1a:
bd:e2:4a:af:ed:9d:1b:52:5c:aa:a9:7c:95:d4:80:4e:92:61:
97:33:27:c4:38:2d:35:93:e5:b5:b5:21:f6:e5:9e:51:09:b3:
7e:9e:f1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 17:49:17 2024 by rpki-client on console-ams.rpki-client.org