Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/vfx78XlZiNPa--aMEoybiaP_FYc.roa
File: vfx78XlZiNPa--aMEoybiaP_FYc.roa (raw, json)
Hash identifier: ben6PYuFqd2CL+gRx55mNeAunx4qn66TTVoxPjxzVlU=
Subject key identifier: BD:FC:7B:F1:79:59:88:D3:DA:FB:E6:8C:12:8C:9B:89:A3:FF:15:87
Certificate issuer: /CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
Certificate serial: 018CC72748EA8F6C692D51FC3BD27E0D5806
Authority key identifier: CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/vfx78XlZiNPa--aMEoybiaP_FYc.roa
Signing time: Mon 01 Jan 2024 22:31:29 +0000
ROA not before: Mon 01 Jan 2024 22:31:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 45.56.224.0/21 maxlen: 21
45.56.236.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 10:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:48:ea:8f:6c:69:2d:51:fc:3b:d2:7e:0d:58:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
Validity
Not Before: Jan 1 22:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bdfc7bf1795988d3dafbe68c128c9b89a3ff1587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:63:a1:1c:5d:aa:e1:fc:56:39:76:22:c9:57:
2e:6b:83:5c:50:9b:84:b6:9e:70:c0:e0:2a:fd:eb:
ce:93:3f:80:33:1e:f1:54:59:95:ac:70:97:ab:9e:
12:83:6b:5f:29:a3:c7:7b:87:94:96:1d:48:dc:45:
5d:ec:bb:11:5c:93:96:a0:b6:99:99:3b:b4:4b:69:
83:ad:fd:62:61:15:02:aa:da:aa:e4:d8:93:d0:5d:
14:bb:c0:08:32:97:8f:b9:d4:71:02:d7:ef:88:14:
5a:1d:de:41:9c:75:29:78:cf:3d:e5:18:d4:dd:04:
ed:d5:8b:16:10:23:a9:70:e5:ee:1e:2b:d6:d3:f3:
4d:66:9e:4b:83:5b:70:73:7c:f1:9f:42:97:c3:82:
f0:3f:9a:17:17:f1:ca:53:fc:74:06:40:06:34:fd:
2f:85:64:2c:9a:e2:ca:61:7c:98:8b:a9:03:c2:9f:
9b:bf:e1:4f:00:dd:ad:98:52:d3:d0:82:bc:9b:58:
78:00:3c:99:d0:aa:8d:f4:30:a5:5a:41:5d:84:58:
36:62:71:53:ca:2c:e7:33:1d:7e:e1:1f:86:1e:98:
93:72:68:bf:81:42:ed:20:77:f0:be:29:f0:a2:56:
e7:c6:a2:5a:59:8d:1c:c3:ab:ab:d3:7c:88:8c:1e:
17:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:FC:7B:F1:79:59:88:D3:DA:FB:E6:8C:12:8C:9B:89:A3:FF:15:87
X509v3 Authority Key Identifier:
keyid:CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/vfx78XlZiNPa--aMEoybiaP_FYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.56.224.0/21
45.56.236.0/23
Signature Algorithm: sha256WithRSAEncryption
09:81:25:2d:45:6a:18:c0:0d:03:dd:42:f2:d9:d8:b7:dc:71:
74:b7:dc:24:ba:84:dc:2c:fd:45:6d:08:71:62:f0:b8:12:6b:
5b:1d:d9:4c:23:69:18:54:09:48:b8:7b:0d:7d:e1:6b:63:2b:
ad:80:48:f0:de:e5:54:58:0c:9f:7f:6f:7f:1a:7d:c5:0b:8b:
e8:65:e8:29:04:79:1f:21:f0:19:b2:cb:77:0a:82:a1:28:8b:
f4:2c:e5:02:e3:af:63:f5:59:3e:f1:e9:53:ce:65:55:5e:14:
ca:bc:a7:c8:97:03:11:19:7e:c1:59:cb:ab:64:a3:bc:af:b7:
92:7b:be:b6:7d:41:63:5c:38:69:57:22:28:46:c7:9c:93:36:
4f:17:b6:09:d7:0c:19:5c:2f:63:1c:cd:17:a1:60:60:99:01:
f4:bf:99:f8:2c:e4:0a:1f:14:b9:34:58:68:b5:04:79:d6:6c:
58:08:d3:36:17:c6:e2:5b:a3:5a:9a:ae:e8:eb:f4:a0:56:6b:
4e:3a:3e:f6:d1:0d:94:30:5e:7e:7b:a3:39:4b:1a:28:93:58:
d0:02:9e:f7:e9:01:7c:62:9b:4f:cb:a4:79:26:85:03:a4:96:
3b:0a:1f:92:22:2d:0c:c0:03:92:db:ba:e9:84:58:e6:b9:52:
f2:1f:8f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 19:41:23 2024 by rpki-client on console-fra.rpki-client.org