Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/VPtZEgucGmg1A6088IHIhJG8dtU.roa
File: VPtZEgucGmg1A6088IHIhJG8dtU.roa (raw, json)
Hash identifier: vB/KSn2KhPK8DuqClo57MQGkbcT9yRi50a7bSXneY84=
Subject key identifier: 54:FB:59:12:0B:9C:1A:68:35:03:AD:3C:F0:81:C8:84:91:BC:76:D5
Certificate issuer: /CN=ac21a113d1ba01d107fdf791308c0a51f3d06dda
Certificate serial: 018ED27BB6D2170D3B58C09A2F3D296CD342
Authority key identifier: AC:21:A1:13:D1:BA:01:D1:07:FD:F7:91:30:8C:0A:51:F3:D0:6D:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/VPtZEgucGmg1A6088IHIhJG8dtU.roa
Signing time: Fri 12 Apr 2024 13:25:06 +0000
ROA not before: Fri 12 Apr 2024 13:25:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29119
IP address blocks: 185.137.165.0/24 maxlen: 24
185.226.188.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 07:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d2:7b:b6:d2:17:0d:3b:58:c0:9a:2f:3d:29:6c:d3:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac21a113d1ba01d107fdf791308c0a51f3d06dda
Validity
Not Before: Apr 12 13:25:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=54fb59120b9c1a683503ad3cf081c88491bc76d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6c:6b:97:f1:a9:6f:a9:49:17:b2:af:b1:23:
ff:f8:8e:7a:ee:10:54:74:33:6a:4d:36:2c:fe:87:
b5:23:07:07:31:72:3f:0b:6b:3d:cf:77:de:36:aa:
6e:ab:47:ca:87:81:7e:16:45:c8:a6:ac:55:42:d2:
16:81:55:64:b5:ba:08:73:6d:83:cf:1d:33:77:5a:
64:45:09:85:3b:de:79:06:d5:92:5d:fe:3a:8a:21:
0b:e3:06:52:ad:91:8e:d8:07:03:a7:4a:92:2b:8f:
d5:8d:ed:49:7e:a2:c8:3c:97:88:62:2b:3e:a6:f8:
3e:f5:87:8b:97:ec:41:7d:19:2d:f7:5f:64:1a:d7:
6f:24:dd:19:13:c7:26:7d:0c:02:56:9d:ba:40:e3:
ec:f3:6b:8e:2e:15:0c:88:95:f7:c5:f7:cb:82:94:
48:2b:53:a8:7a:3f:61:af:7d:36:10:50:a1:2b:82:
9d:11:cf:b1:42:83:c7:82:fb:cc:84:69:70:6c:ed:
81:9f:7d:28:3f:7f:45:84:1b:70:05:b0:cc:c6:d6:
47:66:5c:f1:64:6f:a3:eb:7c:77:46:92:98:4e:6d:
82:14:9c:6f:b0:74:bf:1d:d3:7f:fa:ca:14:fc:9d:
c0:c6:3e:65:02:c4:15:2d:3c:4c:9c:60:72:c7:ef:
ba:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:FB:59:12:0B:9C:1A:68:35:03:AD:3C:F0:81:C8:84:91:BC:76:D5
X509v3 Authority Key Identifier:
keyid:AC:21:A1:13:D1:BA:01:D1:07:FD:F7:91:30:8C:0A:51:F3:D0:6D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/VPtZEgucGmg1A6088IHIhJG8dtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.165.0/24
185.226.188.0/22
Signature Algorithm: sha256WithRSAEncryption
42:b8:14:25:a6:d0:ee:38:d5:92:2c:be:6e:16:06:41:36:03:
41:bc:b3:e5:f8:11:7b:2a:61:2f:6d:00:07:1a:d9:60:d1:9f:
82:39:03:4a:70:94:32:41:55:b9:94:28:9c:83:69:61:47:eb:
55:ce:bf:47:6d:03:7c:9e:55:f6:a2:f2:6d:bd:ad:c3:92:23:
d8:d9:50:f3:61:25:f0:c6:b1:a4:8d:8c:b1:93:a0:b2:ea:b7:
6b:75:6b:2d:eb:cf:88:c9:5b:3f:2c:47:ee:c2:35:81:6b:76:
7b:9b:9b:f1:22:57:73:ca:2e:c5:08:1b:89:e8:67:36:8a:3c:
ef:cd:0f:b3:9c:b9:e4:1b:7e:f1:60:92:83:7b:45:9f:3e:77:
63:dc:6e:e6:ac:f4:e7:4c:06:41:0a:a7:4f:ae:a6:40:de:91:
a9:85:3a:ba:35:38:28:85:2a:bd:ac:34:ab:fe:56:e8:ec:cd:
38:11:7f:15:f3:18:76:c2:e8:f9:b4:b2:26:d6:be:37:af:45:
0e:1a:f1:04:93:79:95:c4:56:13:43:f5:7c:c6:45:6a:21:5e:
bd:1a:50:13:57:58:66:ad:83:8e:8a:2b:b8:6e:1a:35:fc:05:
b5:3e:3c:f3:b9:a9:52:ce:2d:48:71:5d:3e:3b:a8:52:f7:8a:
c1:86:e9:84
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY7Se7bSFw07WMCaLz0pbNNCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMjFhMTEzZDFiYTAxZDEwN2ZkZjc5MTMwOGMwYTUxZjNk
MDZkZGEwHhcNMjQwNDEyMTMyNTA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NGZiNTkxMjBiOWMxYTY4MzUwM2FkM2NmMDgxYzg4NDkxYmM3NmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmxrl/Gpb6lJF7KvsSP/+I567hBU
dDNqTTYs/oe1IwcHMXI/C2s9z3feNqpuq0fKh4F+FkXIpqxVQtIWgVVktboIc22D
zx0zd1pkRQmFO955BtWSXf46iiEL4wZSrZGO2AcDp0qSK4/Vje1JfqLIPJeIYis+
pvg+9YeLl+xBfRkt919kGtdvJN0ZE8cmfQwCVp26QOPs82uOLhUMiJX3xffLgpRI
K1Ooej9hr302EFChK4KdEc+xQoPHgvvMhGlwbO2Bn30oP39FhBtwBbDMxtZHZlzx
ZG+j63x3RpKYTm2CFJxvsHS/HdN/+soU/J3Axj5lAsQVLTxMnGByx++6/wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFT7WRILnBpoNQOtPPCByISRvHbVMB8GA1UdIwQY
MBaAFKwhoRPRugHRB/33kTCMClHz0G3aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckNHaEU5RzZBZEVIX2ZlUk1Jd0tVZlBRYmRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My81ODkzZjctYjRmMS00OTYxLTk0MjYt
ZmQ3M2I4MDgzM2I3LzEvVlB0WkVndWNHbWcxQTYwODhJSEloSkc4ZHRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My81ODkzZjctYjRmMS00OTYxLTk0MjYtZmQ3M2I4MDgzM2I3
LzEvckNHaEU5RzZBZEVIX2ZlUk1Jd0tVZlBRYmRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuYmlAwQC
ueK8MA0GCSqGSIb3DQEBCwUAA4IBAQBCuBQlptDuONWSLL5uFgZBNgNBvLPl+BF7
KmEvbQAHGtlg0Z+COQNKcJQyQVW5lCicg2lhR+tVzr9HbQN8nlX2ovJtva3DkiPY
2VDzYSXwxrGkjYyxk6Cy6rdrdWst68+IyVs/LEfuwjWBa3Z7m5vxIldzyi7FCBuJ
6Gc2ijzvzQ+znLnkG37xYJKDe0WfPndj3G7mrPTnTAZBCqdPrqZA3pGphTq6NTgo
hSq9rDSr/lbo7M04EX8V8xh2wuj5tLIm1r43r0UOGvEEk3mVxFYTQ/V8xkVqIV69
GlATV1hmrYOOiiu4bho1/AW1PjzzualSzi1IcV0+O6hS94rBhumE
-----END CERTIFICATE-----
Generated at Fri Jun 21 16:38:20 2024 by rpki-client on console-ams.rpki-client.org