Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/VhtcsFa4OfMWGAdbvUte3NuGj18.roa
File: VhtcsFa4OfMWGAdbvUte3NuGj18.roa (raw, json)
Hash identifier: 4zDwlvKPvHN4y35eFE2wzHcq9ds9nJQ8UyYsVeobxbo=
Subject key identifier: 56:1B:5C:B0:56:B8:39:F3:16:18:07:5B:BD:4B:5E:DC:DB:86:8F:5F
Certificate issuer: /CN=24295ce712473d0e3e6daa777db8906f8001df70
Certificate serial: 018CC9BC99AD29D47F715CFA3580085772D6
Authority key identifier: 24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/VhtcsFa4OfMWGAdbvUte3NuGj18.roa
Signing time: Tue 02 Jan 2024 10:33:49 +0000
ROA not before: Tue 02 Jan 2024 10:33:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42422
IP address blocks: 176.102.64.0/24 maxlen: 24
176.102.64.0/22 maxlen: 24
176.102.66.0/24 maxlen: 24
176.102.65.0/24 maxlen: 24
176.102.67.0/24 maxlen: 24
2a07:dbc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 22:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:99:ad:29:d4:7f:71:5c:fa:35:80:08:57:72:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24295ce712473d0e3e6daa777db8906f8001df70
Validity
Not Before: Jan 2 10:33:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=561b5cb056b839f31618075bbd4b5edcdb868f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f1:09:34:40:71:94:b0:de:1e:53:b1:57:a5:
19:4c:f8:56:4e:34:7b:e0:05:be:25:b2:05:25:e7:
13:44:72:71:b7:f4:55:19:e2:fa:d5:64:98:59:3d:
ac:3d:aa:d7:a7:e6:45:1b:98:5e:29:1f:b9:35:40:
7d:ba:c6:30:3e:0f:d6:50:0b:6b:ad:d2:b1:62:75:
1c:27:b6:07:10:e0:49:69:0b:b5:78:ae:0d:61:27:
b4:66:27:42:ba:56:52:8c:e8:6f:10:08:fa:ef:16:
be:a8:8f:41:3d:0d:25:41:cd:0a:f0:d4:5a:9c:61:
17:39:11:3c:ce:dc:49:48:e2:11:ae:8c:ad:cb:76:
98:2f:33:a2:73:43:df:7a:74:8c:bf:ce:e9:12:82:
38:73:3e:fd:62:0b:5b:9b:30:16:7c:37:3e:dc:7a:
be:2c:ec:4c:97:34:ae:64:12:1e:aa:fe:8c:fe:af:
8e:5e:c7:3d:f7:60:01:81:bb:b4:cb:48:f5:9e:36:
14:e0:7e:11:07:47:ff:8d:86:80:7a:5e:c7:1e:d3:
f5:70:3a:8c:41:bb:e8:c3:56:da:a9:fe:8a:5a:d0:
7b:11:a7:17:3f:13:d6:47:be:f5:49:2f:9f:83:f4:
b3:6a:9a:aa:f0:9e:79:d3:0b:2a:f3:87:60:b3:b1:
d2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:1B:5C:B0:56:B8:39:F3:16:18:07:5B:BD:4B:5E:DC:DB:86:8F:5F
X509v3 Authority Key Identifier:
keyid:24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/VhtcsFa4OfMWGAdbvUte3NuGj18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.102.64.0/22
IPv6:
2a07:dbc0::/32
Signature Algorithm: sha256WithRSAEncryption
62:e0:30:4f:dd:65:83:80:b7:59:5b:c6:40:bb:54:e0:89:1e:
18:05:62:8e:e0:2d:c5:fa:f2:6d:9e:e2:d3:87:eb:1e:ab:2d:
83:77:9a:66:3e:2a:c6:f2:95:c6:16:78:b2:ac:21:2f:81:01:
66:2f:b2:80:de:06:73:72:f0:b4:cf:75:67:4a:c0:82:7a:0e:
ee:4b:de:ea:b1:20:97:9c:7c:a5:60:ec:09:7d:2f:77:f3:0c:
ae:74:3f:07:1b:51:b4:4a:82:6c:ed:10:9c:07:42:39:73:aa:
58:1d:fd:dc:2a:eb:dd:4b:e5:e0:5d:52:5d:31:a1:1f:60:cc:
54:2d:fa:04:2a:43:74:0d:b7:2f:ba:68:ed:6f:9d:99:41:6d:
45:35:7d:0f:4c:25:8a:47:e9:30:e2:c3:a3:88:4e:24:08:37:
1f:4e:ba:1a:c3:6b:79:f3:16:77:d6:f5:22:6e:a2:cb:67:f1:
54:89:ec:a8:57:a6:0e:ce:19:d1:3f:d4:a3:0e:ee:55:fb:37:
ef:de:a7:2c:72:e3:31:0d:58:3f:df:0a:9f:c4:d2:d3:22:2a:
4f:3f:3d:6f:93:06:60:6f:95:9f:14:a4:ad:5c:2c:10:94:fa:
60:74:58:ec:f8:10:19:34:98:91:32:b0:87:8e:5d:4e:27:69:
3b:84:6f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:04:04 2024 by rpki-client on console-fra.rpki-client.org