Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/VafcnHOFSjjX3S3R4rVE2KyyXxQ.roa
File: VafcnHOFSjjX3S3R4rVE2KyyXxQ.roa (raw, json)
Hash identifier: waUx9k3fngsKSt8WCuIYp59czw0V4KFjubRXN/ZCWAM=
Subject key identifier: 55:A7:DC:9C:73:85:4A:38:D7:DD:2D:D1:E2:B5:44:D8:AC:B2:5F:14
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 018EEB43B286BDCD5D393718495F04335218
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/VafcnHOFSjjX3S3R4rVE2KyyXxQ.roa
Signing time: Wed 17 Apr 2024 08:54:26 +0000
ROA not before: Wed 17 Apr 2024 08:54:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3320
IP address blocks: 5.35.192.0/21 maxlen: 24
84.234.16.0/20 maxlen: 24
85.204.160.0/22 maxlen: 24
86.107.108.0/23 maxlen: 24
89.34.124.0/23 maxlen: 24
89.39.172.0/23 maxlen: 24
193.124.20.0/23 maxlen: 24
194.88.96.0/21 maxlen: 24
194.135.26.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 May 2024 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:eb:43:b2:86:bd:cd:5d:39:37:18:49:5f:04:33:52:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Apr 17 08:54:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55a7dc9c73854a38d7dd2dd1e2b544d8acb25f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:92:e5:e8:e3:bd:71:cb:7e:bc:5a:10:2c:fa:
98:8d:f5:15:45:3b:35:68:c6:4d:08:6b:1d:29:6c:
6a:6c:c2:08:27:48:9b:3d:25:0f:a7:4e:6d:c0:e7:
e3:40:ce:76:e8:55:cd:92:99:fb:ee:58:f8:ac:dc:
79:df:be:9f:b4:2b:58:9f:6e:12:e1:9d:16:e9:4b:
4b:1c:c9:ba:2b:c2:1d:7f:a4:f7:d2:cf:5f:8e:be:
6d:8d:8e:b1:b4:f3:00:23:4e:fc:e7:c2:00:0a:27:
0b:92:27:67:c1:d6:f5:06:13:1d:eb:19:66:d6:07:
8c:94:80:4d:79:0c:3f:b4:74:fc:8d:52:c0:6d:e0:
ea:60:8b:66:e1:67:22:aa:07:1e:60:19:8a:0c:9b:
b8:21:d6:ba:80:f6:4c:1a:17:5e:25:fb:23:35:19:
09:f3:79:a8:22:db:90:e8:8e:a9:a8:b1:f7:a8:98:
a4:bf:d2:65:89:15:7b:5a:14:23:6c:6b:2c:d7:19:
b9:af:9c:b1:f0:5b:c6:a5:0f:b6:b7:9c:92:73:b7:
98:52:30:c0:be:5c:6d:1c:38:17:76:f0:14:d6:4b:
a2:25:af:56:b1:c0:fa:fc:98:3b:e6:8b:44:a0:47:
81:e8:64:af:4c:d3:52:5a:6f:56:c5:af:55:bb:ef:
de:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A7:DC:9C:73:85:4A:38:D7:DD:2D:D1:E2:B5:44:D8:AC:B2:5F:14
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/VafcnHOFSjjX3S3R4rVE2KyyXxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.192.0/21
84.234.16.0/20
85.204.160.0/22
86.107.108.0/23
89.34.124.0/23
89.39.172.0/23
193.124.20.0/23
194.88.96.0/21
194.135.26.0/23
Signature Algorithm: sha256WithRSAEncryption
61:32:31:bc:e9:c2:c0:33:7e:54:42:c3:62:dd:6d:3a:e2:b0:
7e:cc:84:06:70:fe:89:6e:fd:e6:2d:a6:7e:4e:1d:b4:ec:fc:
01:ab:4a:be:fe:ba:35:06:f6:0c:ad:47:14:43:83:a5:f6:40:
42:57:6f:4a:b2:0f:1c:6b:a2:5d:3e:25:45:18:7d:3b:46:3d:
da:12:d7:1d:99:ac:0e:c9:5e:d0:23:2f:1f:31:f1:3b:03:07:
65:d5:16:f3:f3:ab:51:2c:9d:4a:85:65:b2:56:db:1a:15:81:
11:f5:83:b9:9c:8c:c4:9c:d2:7b:16:b6:28:2d:14:61:93:c7:
17:c0:c1:c9:57:b5:1a:b6:77:ac:22:0e:a8:82:42:f9:9d:19:
96:91:29:b6:77:54:8a:47:bc:d6:46:5f:63:fd:1c:a8:63:70:
56:20:a5:16:25:e2:36:22:94:90:ae:2d:bd:c8:15:9b:6b:6a:
ab:3d:08:cb:f7:f5:da:08:6e:01:31:56:45:f1:49:97:77:04:
38:a3:41:99:9e:8a:0b:54:82:2c:fa:dc:8f:7d:b4:2c:3a:06:
62:51:e8:b7:dc:58:65:48:14:b2:8b:2b:79:62:c0:15:0c:87:
34:83:42:f4:8b:34:9d:22:30:97:a6:7f:d3:46:eb:4a:72:ce:
82:44:96:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 14:54:05 2024 by rpki-client on console-fra.rpki-client.org