Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/vkxKssHT7TEDKl2Vh2U4sW9xC70.roa
File: vkxKssHT7TEDKl2Vh2U4sW9xC70.roa (raw, json)
Hash identifier: +9jKUe2ae0EHudZPCpElxef79IohCybv4lfdrfQIAZI=
Subject key identifier: BE:4C:4A:B2:C1:D3:ED:31:03:2A:5D:95:87:65:38:B1:6F:71:0B:BD
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018EE603A416B72A8C3687C64CC1979BAB5B
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/vkxKssHT7TEDKl2Vh2U4sW9xC70.roa
Signing time: Tue 16 Apr 2024 08:26:22 +0000
ROA not before: Tue 16 Apr 2024 08:26:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41134
IP address blocks: 95.107.0.0/20 maxlen: 20
95.107.32.0/19 maxlen: 19
109.61.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e6:03:a4:16:b7:2a:8c:36:87:c6:4c:c1:97:9b:ab:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Apr 16 08:26:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be4c4ab2c1d3ed31032a5d95876538b16f710bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f1:9f:ad:09:57:6d:84:86:76:b9:bb:d7:93:
21:dd:56:e5:8e:39:b9:1f:fd:c1:42:d5:24:dd:eb:
01:f8:16:13:35:9f:bb:54:d2:9a:c3:1e:8b:ea:50:
7e:0c:b2:c4:fa:65:50:82:5c:97:ee:e7:ab:d1:c7:
f7:a9:a7:46:9d:22:15:93:da:12:42:bd:ad:8c:d4:
e8:fe:05:1e:a2:69:9d:32:45:05:10:57:50:26:8b:
55:3a:c2:6e:4c:db:b7:f8:95:06:90:16:46:f7:ab:
6b:63:24:56:17:43:d7:86:90:e7:bf:3c:e4:7a:1c:
97:7d:1b:01:f1:43:34:0e:fc:39:9f:48:f3:88:81:
cb:3a:82:16:3a:a4:a4:5c:db:3d:32:98:8a:cd:f0:
ed:b5:e9:2c:0f:8e:26:df:53:26:22:ec:f0:fe:b7:
f1:aa:d4:d3:25:07:5c:e6:f7:e5:0c:18:2b:18:cc:
a1:8c:b6:52:94:45:c8:00:4f:f3:b0:87:f1:4d:af:
0c:e3:46:4d:d3:46:43:5c:fd:a6:df:53:1d:89:51:
2d:52:dc:8e:e6:22:ad:7b:dc:7e:14:0e:cc:97:05:
35:06:2e:bf:ca:6d:85:eb:0d:cd:95:62:59:4e:ce:
13:5b:d3:c9:79:a9:3d:d8:4f:15:c8:c8:a9:93:6c:
e9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:4C:4A:B2:C1:D3:ED:31:03:2A:5D:95:87:65:38:B1:6F:71:0B:BD
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/vkxKssHT7TEDKl2Vh2U4sW9xC70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.107.0.0/20
95.107.32.0/19
109.61.128.0/17
Signature Algorithm: sha256WithRSAEncryption
62:a0:84:b8:c2:d9:d0:3b:c6:a5:76:fe:b9:b3:5b:84:f6:30:
f4:25:4e:38:d0:b9:b2:dc:4a:65:03:49:ae:c4:03:6f:44:ef:
c3:48:60:33:63:31:47:30:a9:1b:3d:28:f7:95:0d:fb:87:7b:
74:e8:c8:ce:6c:ba:46:6f:be:fe:b6:d4:c7:5e:fe:15:0b:25:
be:86:8c:85:42:6c:24:08:c8:c4:65:df:56:14:6d:4e:f5:96:
c0:08:ee:8b:bf:1e:78:9f:f5:89:a6:4d:0e:ec:64:9c:9d:6e:
af:4a:e9:25:b2:70:24:4f:40:9d:45:55:cd:02:79:29:07:28:
7f:92:ca:a1:d8:ed:86:81:f0:8f:98:9f:b9:1c:6a:06:4e:b4:
08:75:b3:52:46:a6:98:4c:f7:62:bd:4f:76:83:2e:eb:39:ee:
ad:36:09:22:fc:e6:a8:a8:97:d5:62:21:a8:45:92:82:00:fe:
1a:09:5c:24:f0:2c:8a:f4:fb:b0:8a:20:1a:86:57:3d:a7:ce:
be:b8:4a:3d:ce:e6:f6:41:57:1a:12:8c:62:08:3b:07:73:b0:
59:9a:cf:42:b0:74:6f:f6:5d:8e:d0:dc:4b:b0:fe:01:d9:1a:
da:de:54:ee:e6:88:41:8f:cb:db:fe:30:59:c2:bc:eb:1f:a7:
47:6b:f3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:42:07 2024 by rpki-client on console-ams.rpki-client.org