Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/VlvHox6eCEruIB8_jSleU2BRQNY.roa
File: VlvHox6eCEruIB8_jSleU2BRQNY.roa (raw, json)
Hash identifier: yotlHm1ZoKHXu1SLqxVylVdZlHJ/Gozvd3iQ7pyxEBk=
Subject key identifier: 56:5B:C7:A3:1E:9E:08:4A:EE:20:1F:3F:8D:29:5E:53:60:51:40:D6
Certificate issuer: /CN=88fe1905cd7af36e63ada6366c147b61d85c9f2b
Certificate serial: 018CC8701315FCF9C63CE0B9AB844F9EEC39
Authority key identifier: 88:FE:19:05:CD:7A:F3:6E:63:AD:A6:36:6C:14:7B:61:D8:5C:9F:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/VlvHox6eCEruIB8_jSleU2BRQNY.roa
Signing time: Tue 02 Jan 2024 04:30:37 +0000
ROA not before: Tue 02 Jan 2024 04:30:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 185.99.237.0/24 maxlen: 24
185.99.236.0/24 maxlen: 24
185.99.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:13:15:fc:f9:c6:3c:e0:b9:ab:84:4f:9e:ec:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88fe1905cd7af36e63ada6366c147b61d85c9f2b
Validity
Not Before: Jan 2 04:30:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=565bc7a31e9e084aee201f3f8d295e53605140d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9d:9a:0c:5d:b0:0f:db:42:52:aa:ea:6f:22:
7b:a6:4d:04:92:0f:52:45:20:a7:b9:94:d7:d9:c4:
c3:d7:b6:0e:23:46:81:35:9c:12:74:d8:45:67:05:
83:40:29:e2:be:2b:e7:a9:b7:eb:49:65:c5:72:7f:
46:1b:7f:28:79:b5:2f:2f:af:36:0f:1f:c5:bc:90:
e1:45:9c:b3:c6:58:52:0e:a8:93:07:4e:24:db:cc:
a8:5d:04:a2:e4:e3:91:20:09:6b:5a:1d:d6:3d:d7:
37:ff:71:0d:45:dc:bd:11:a9:ce:5f:e0:d3:bf:0e:
bd:14:59:3b:98:95:bb:5f:b9:15:c4:b4:c3:3e:0f:
89:fb:19:3d:14:8b:54:c1:d8:8c:24:f8:9e:07:38:
49:3d:7d:5c:dc:ca:18:ae:35:cb:3f:53:8e:19:52:
e6:f5:66:33:89:10:aa:9e:48:9d:bd:bf:40:41:05:
54:0b:ab:6e:49:15:7c:b6:4e:0c:ef:eb:6e:9d:42:
2d:48:87:31:23:2c:35:0e:32:42:8f:d6:4a:e4:77:
f5:9a:5a:15:fe:07:4e:7e:8c:48:c4:5d:d0:39:56:
9d:48:69:03:2c:92:3b:2c:e1:2b:bd:8a:95:e5:56:
f1:cb:38:a9:37:5f:c7:ed:14:27:e7:6c:1f:c0:26:
1a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:5B:C7:A3:1E:9E:08:4A:EE:20:1F:3F:8D:29:5E:53:60:51:40:D6
X509v3 Authority Key Identifier:
keyid:88:FE:19:05:CD:7A:F3:6E:63:AD:A6:36:6C:14:7B:61:D8:5C:9F:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/VlvHox6eCEruIB8_jSleU2BRQNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.99.236.0-185.99.238.255
Signature Algorithm: sha256WithRSAEncryption
b3:24:fd:35:da:06:3d:15:7f:0c:d8:f3:f4:7b:7d:24:47:5a:
b1:12:05:8f:3e:7a:9b:ce:36:e6:b5:e0:30:d6:58:0b:d6:ed:
ec:be:4e:d5:a9:04:e6:f6:05:f6:b1:a2:f8:64:88:ad:58:61:
59:47:12:4c:63:58:39:5a:fb:d2:a4:d3:ef:17:87:f0:c0:a6:
d5:87:e5:0d:5c:46:c6:eb:c3:3e:19:57:c8:5b:47:b9:bc:eb:
52:6c:8b:fa:02:77:27:53:ef:24:c5:e9:e5:ba:e8:00:08:dd:
05:6b:9c:c3:04:1a:24:e6:4f:92:0b:9f:74:cb:62:60:91:31:
1e:69:63:41:67:cb:7a:4e:13:1b:54:28:d8:f4:f0:52:f2:a8:
ad:95:42:2d:a6:be:6c:c7:eb:e4:a5:c0:05:1e:c3:3c:b9:71:
be:48:3c:8e:4f:f7:d5:f6:37:e0:c7:0b:4b:46:63:29:13:6f:
f2:05:eb:b9:ae:89:44:90:2e:08:18:e2:83:11:46:52:8d:34:
35:39:62:25:a8:b0:34:2a:db:b2:57:d9:3d:20:cc:a4:2f:4e:
74:cd:c0:91:b5:ee:59:83:8a:43:b9:00:73:a4:ac:af:a0:bb:
13:3a:97:0b:0d:41:e3:6f:f1:78:6e:1b:15:c9:15:78:2e:46:
3f:68:29:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 19:44:38 2024 by rpki-client on console-fra.rpki-client.org