Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/QmHrZpKZKmn3eaPsaVV539_Vms4.roa
File: QmHrZpKZKmn3eaPsaVV539_Vms4.roa (raw, json)
Hash identifier: EdaEoO7pb8Dv9Gl8Elp6VnUgJRlKR9k8RUuUmBJ/v9k=
Subject key identifier: 42:61:EB:66:92:99:2A:69:F7:79:A3:EC:69:55:79:DF:DF:D5:9A:CE
Certificate issuer: /CN=cd65ee23bff42ccf679d7377fe4da695d341aef0
Certificate serial: 018CCA2A839B4ED751BB838506623C63FE9D
Authority key identifier: CD:65:EE:23:BF:F4:2C:CF:67:9D:73:77:FE:4D:A6:95:D3:41:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/QmHrZpKZKmn3eaPsaVV539_Vms4.roa
Signing time: Tue 02 Jan 2024 12:33:52 +0000
ROA not before: Tue 02 Jan 2024 12:33:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41528
IP address blocks: 109.235.175.0/24 maxlen: 24
109.235.174.0/24 maxlen: 24
109.235.174.0/23 maxlen: 23
185.71.158.0/24 maxlen: 24
2a00:1968::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:83:9b:4e:d7:51:bb:83:85:06:62:3c:63:fe:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd65ee23bff42ccf679d7377fe4da695d341aef0
Validity
Not Before: Jan 2 12:33:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4261eb6692992a69f779a3ec695579dfdfd59ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a8:0d:56:9b:db:96:e3:8c:5c:33:6b:67:01:
b8:69:4a:93:c3:64:c8:e9:3d:e6:6c:e5:0b:25:96:
6f:1b:93:5b:b5:3b:89:4c:9d:7c:f7:1d:ff:ee:8b:
57:b8:ce:32:a7:4c:20:6f:e2:fe:69:8e:9e:b8:8f:
14:b0:ce:68:3f:83:78:b1:4e:4b:17:aa:dc:ee:d7:
18:02:c4:2b:72:13:74:e7:15:f7:68:72:ba:f1:9d:
0a:b8:c9:86:0c:99:ae:18:55:54:ac:12:f7:b4:15:
88:3c:50:06:e7:ad:64:81:85:5b:34:02:86:c9:fa:
e1:89:a0:a0:4e:49:4d:57:ce:40:0c:e1:d1:35:89:
38:14:be:2b:0b:ae:61:76:75:97:b8:34:19:23:01:
27:55:f1:72:c1:e0:15:f0:74:73:97:6c:c6:23:e3:
08:75:66:2d:f8:0b:75:80:33:8b:af:90:71:07:7d:
09:cc:a3:ad:5b:ea:5a:8d:9a:39:62:a7:53:db:5a:
6f:e0:57:81:ec:24:40:35:8e:6a:b8:0b:f4:84:48:
6e:4f:ab:8a:f2:82:34:0b:db:e9:b3:c9:49:83:6d:
28:8b:28:93:1b:97:98:9e:82:9f:49:76:8f:01:1d:
36:5c:f6:aa:39:e7:9d:1f:f6:ac:4f:e7:9e:9a:8e:
fe:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:61:EB:66:92:99:2A:69:F7:79:A3:EC:69:55:79:DF:DF:D5:9A:CE
X509v3 Authority Key Identifier:
keyid:CD:65:EE:23:BF:F4:2C:CF:67:9D:73:77:FE:4D:A6:95:D3:41:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/QmHrZpKZKmn3eaPsaVV539_Vms4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.235.174.0/23
185.71.158.0/24
IPv6:
2a00:1968::/48
Signature Algorithm: sha256WithRSAEncryption
14:a2:5a:57:7a:26:ab:2d:47:4d:47:5b:e6:23:fc:11:73:62:
d8:d3:e3:2b:85:76:5f:47:59:df:ec:c9:68:3a:b2:f6:4f:fe:
97:df:38:3a:34:4d:0c:89:1b:e8:73:08:61:7e:bd:f2:cc:7b:
ac:30:f2:93:ed:b8:d7:2a:28:cc:ea:52:5f:e2:e3:97:b7:45:
47:3e:1a:c4:fc:8a:a2:1f:a4:40:92:07:62:c4:73:3f:08:04:
bf:f7:03:a9:37:3b:c3:c4:9b:d9:ff:de:06:22:c0:16:3e:86:
61:09:77:a1:97:42:2c:a9:f6:41:70:ad:f5:c0:23:f1:1c:e0:
63:15:f8:0c:c3:46:f2:90:14:f8:eb:72:7f:4e:42:bb:55:86:
63:8c:18:9e:f1:dd:be:af:f9:90:3b:61:43:59:2c:ef:69:3f:
a3:d7:64:d0:38:71:a4:bf:5d:43:4c:a8:b8:24:1e:1f:d0:6a:
f4:3f:a9:f2:55:ed:dc:a7:b9:e3:bf:a4:f1:7f:dc:ac:49:00:
4b:4e:4c:86:49:0b:80:b6:1e:ac:24:90:ad:7a:96:c2:ae:52:
4a:6d:d3:6f:01:33:9f:fe:04:e5:c9:39:81:08:24:d5:6c:75:
28:d0:3e:53:15:5c:5f:45:cf:8d:25:b9:ff:f4:e8:2b:d0:6c:
64:72:ae:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:54:21 2024 by rpki-client on console-fra.rpki-client.org