Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/VEgbf5lwWAAQsXIq16EM00Uiu3o.roa
File: VEgbf5lwWAAQsXIq16EM00Uiu3o.roa (raw, json)
Hash identifier: Ps1U2sv2j3GBEJv7F8Cv1EdfmLDHEXjOpzECTfiMuZc=
Subject key identifier: 54:48:1B:7F:99:70:58:00:10:B1:72:2A:D7:A1:0C:D3:45:22:BB:7A
Certificate issuer: /CN=b653166a6f1f33e4720e67d24dd32e44580352f0
Certificate serial: 018CC94E245D911B5C401229908ADF17221E
Authority key identifier: B6:53:16:6A:6F:1F:33:E4:72:0E:67:D2:4D:D3:2E:44:58:03:52:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/VEgbf5lwWAAQsXIq16EM00Uiu3o.roa
Signing time: Tue 02 Jan 2024 08:33:10 +0000
ROA not before: Tue 02 Jan 2024 08:33:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39702
IP address blocks: 89.106.216.0/21 maxlen: 24
185.5.100.0/22 maxlen: 24
178.251.88.0/21 maxlen: 24
85.190.192.0/19 maxlen: 24
2a01:4d80::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:24:5d:91:1b:5c:40:12:29:90:8a:df:17:22:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b653166a6f1f33e4720e67d24dd32e44580352f0
Validity
Not Before: Jan 2 08:33:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=54481b7f9970580010b1722ad7a10cd34522bb7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6c:b5:79:2c:e6:92:56:e7:94:87:e2:8b:94:
e9:d9:b0:82:48:f9:ed:f8:27:e9:52:aa:a4:66:eb:
05:94:d1:cc:86:99:d2:36:28:54:61:e6:2c:e1:60:
88:f1:3c:f8:95:54:20:1f:ff:b1:69:f0:c1:e6:2d:
74:9e:05:02:37:3c:53:30:ee:62:94:ec:ef:05:88:
e4:75:a5:59:07:65:8f:d1:71:91:fc:ba:a3:e0:89:
d8:a3:24:ca:f0:95:6c:f3:90:2d:e5:db:8d:b1:9f:
9e:10:7f:29:9a:0c:03:ce:05:70:6b:e0:29:ba:1f:
c2:7a:6b:7a:57:18:08:73:8e:e4:e7:a7:ad:0f:df:
60:b2:66:d7:33:95:39:18:e1:d4:0f:2c:88:3b:d0:
17:e7:79:b6:9e:2e:b0:d0:e5:7e:b3:e1:e8:06:cc:
10:c4:ec:dd:2e:a4:9c:55:53:69:5c:d8:f5:6c:f7:
8a:b6:5a:66:d3:c5:24:c1:f6:6a:93:58:f9:f4:48:
88:84:21:2d:d0:66:e2:45:32:0d:c7:83:ec:45:a2:
48:40:db:fd:8f:a6:26:23:63:f9:7b:8f:8d:f8:97:
ff:99:96:7b:58:d0:85:ea:0a:16:87:82:ce:53:ec:
9c:41:52:af:d8:e1:4d:d3:38:21:7a:9d:d5:bd:2b:
2f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:48:1B:7F:99:70:58:00:10:B1:72:2A:D7:A1:0C:D3:45:22:BB:7A
X509v3 Authority Key Identifier:
keyid:B6:53:16:6A:6F:1F:33:E4:72:0E:67:D2:4D:D3:2E:44:58:03:52:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/VEgbf5lwWAAQsXIq16EM00Uiu3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.190.192.0/19
89.106.216.0/21
178.251.88.0/21
185.5.100.0/22
IPv6:
2a01:4d80::/32
Signature Algorithm: sha256WithRSAEncryption
54:ae:53:88:89:c1:3f:f0:94:ba:ff:bc:2b:89:20:80:e6:06:
a4:54:b2:8e:f2:04:f1:2f:f8:ce:72:30:c1:79:01:30:03:fb:
85:4e:68:0c:09:99:ac:41:71:86:aa:25:55:03:bc:df:e5:04:
67:9f:a0:0a:61:dc:05:3a:59:af:a6:9b:8a:c0:af:09:be:e8:
b7:db:d1:75:ec:53:d1:1d:a1:0d:15:42:1d:0a:a1:ad:f0:e8:
c3:39:68:5b:9b:59:b9:fc:47:aa:91:fa:da:30:27:15:b4:a1:
b1:f2:66:e9:91:b6:63:c0:ae:2f:52:3b:96:ac:b1:00:69:6a:
e7:76:42:b0:88:d0:1e:4c:8b:3d:a7:8b:52:ff:cd:23:4a:19:
d9:a6:df:55:40:f3:7a:12:c2:97:00:a6:f6:f2:bc:30:23:7a:
1a:64:6c:c7:c3:98:17:a4:d7:dc:b6:4e:67:71:c0:d5:1d:18:
10:10:dc:11:c3:22:af:4b:9a:8e:b0:ca:56:0e:be:f7:8f:a0:
4f:9c:2a:8c:4f:29:09:73:20:75:38:4b:ba:b1:7c:99:49:70:
6a:e2:30:3d:a6:02:52:1f:d9:1c:5b:68:22:dc:ce:8a:71:16:
90:96:7a:8b:a1:11:3b:92:51:93:b4:10:b4:09:4a:25:1c:11:
b9:96:0b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:16:07 2024 by rpki-client on console-fra.rpki-client.org