Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/_vylTAFq-YOIH3kO_aXYDh-K7OU.roa
File: _vylTAFq-YOIH3kO_aXYDh-K7OU.roa (raw, json)
Hash identifier: +IlohYm7GPh6+57aZ++2BSe3daK7PSD1LA27LmsY6ng=
Subject key identifier: FE:FC:A5:4C:01:6A:F9:83:88:1F:79:0E:FD:A5:D8:0E:1F:8A:EC:E5
Certificate issuer: /CN=6ed0392ac7660bd1460fa1d5031d1840d01b9412
Certificate serial: 0191A71D0563A7D8BEFD63C82560BDF520C6
Authority key identifier: 6E:D0:39:2A:C7:66:0B:D1:46:0F:A1:D5:03:1D:18:40:D0:1B:94:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/_vylTAFq-YOIH3kO_aXYDh-K7OU.roa
Signing time: Sat 31 Aug 2024 06:26:22 +0000
ROA not before: Sat 31 Aug 2024 06:26:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6939
IP address blocks: 85.116.204.0/22 maxlen: 22
85.116.208.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a7:1d:05:63:a7:d8:be:fd:63:c8:25:60:bd:f5:20:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed0392ac7660bd1460fa1d5031d1840d01b9412
Validity
Not Before: Aug 31 06:26:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fefca54c016af983881f790efda5d80e1f8aece5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3c:21:f0:59:c6:a3:c4:fc:dd:96:87:d7:fa:
5d:fa:11:f9:e4:e3:64:a1:18:34:b6:dd:d6:12:d3:
28:e3:91:72:7d:01:34:fb:d8:3a:63:04:56:27:22:
48:a3:3c:92:b8:f5:b9:a9:88:b1:6b:1c:53:80:57:
22:c9:1a:e5:7f:40:31:61:7e:f3:99:e0:08:35:11:
0e:1d:df:ca:71:bc:b2:c1:5f:92:c8:03:f7:bb:e9:
71:d1:5f:f3:f9:3d:6f:fa:20:16:e9:1e:98:65:26:
ab:a9:92:c6:1a:68:b2:87:1b:34:fe:58:cc:07:ff:
cd:8f:6a:1c:bf:ed:a0:b4:7f:3b:c3:d2:f4:9b:b2:
52:39:68:9c:f4:3b:b2:20:9f:51:58:73:6f:9a:0d:
d8:dd:9f:3b:a7:76:38:ca:9c:38:41:ee:c2:94:ab:
69:88:2f:94:09:ba:61:e3:ce:c2:ab:21:a6:1e:82:
a2:d3:79:f1:03:7b:32:69:28:90:26:bb:fb:df:20:
0e:57:a5:ef:1e:07:ed:42:ce:53:5a:d6:a1:a8:14:
79:2b:63:68:ce:e8:07:4f:ba:74:6d:f6:08:66:3f:
78:c4:e6:80:19:57:80:d0:e7:d6:da:2f:1c:3e:2a:
b7:ce:a8:58:1c:06:6b:91:06:5f:35:e2:f7:13:ba:
ce:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:FC:A5:4C:01:6A:F9:83:88:1F:79:0E:FD:A5:D8:0E:1F:8A:EC:E5
X509v3 Authority Key Identifier:
keyid:6E:D0:39:2A:C7:66:0B:D1:46:0F:A1:D5:03:1D:18:40:D0:1B:94:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/_vylTAFq-YOIH3kO_aXYDh-K7OU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.116.204.0-85.116.211.255
Signature Algorithm: sha256WithRSAEncryption
02:f6:d2:b0:ba:e9:1d:41:bb:94:05:5e:4c:b1:fa:4d:a5:1b:
3c:ca:61:ef:7f:e2:a1:62:02:ed:11:7c:47:74:a3:43:d9:09:
0e:7c:f3:a1:18:7b:e7:71:5c:ba:dd:f1:fc:c0:40:2a:71:b0:
72:f0:f7:45:78:90:ae:c6:a6:39:b9:38:91:cd:ff:c4:31:39:
a8:22:54:22:f6:39:00:2d:ed:d8:4b:95:2b:69:69:16:ab:7d:
27:16:bc:04:71:b0:5a:77:3e:52:73:47:3f:3a:79:89:c9:90:
01:3b:10:74:7d:1f:9e:a5:72:d1:cf:b7:2d:99:6c:65:4f:b4:
da:3b:05:98:d5:07:6c:fc:f5:c2:bc:bd:ee:16:d7:45:64:bd:
6f:ea:33:90:12:7a:92:5c:8a:4b:19:8e:ac:7d:6d:5a:69:95:
ad:5e:b6:fc:d1:9e:0f:38:2e:eb:e1:73:38:b2:19:a6:aa:a8:
9f:ea:dc:7d:9c:5f:f8:bd:69:2b:50:bc:76:b3:60:b4:ff:5f:
74:46:9f:ee:1a:1a:6c:ff:f1:90:a4:5b:25:0d:d1:d1:48:32:
ef:fb:01:e2:30:6e:fa:75:d3:74:6a:27:d7:76:aa:96:d8:c7:
aa:05:d2:7b:8e:39:7b:6a:31:b7:07:2a:d5:b5:ff:1f:59:96:
1d:0f:34:5d
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZGnHQVjp9i+/WPIJWC99SDGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlZDAzOTJhYzc2NjBiZDE0NjBmYTFkNTAzMWQxODQwZDAx
Yjk0MTIwHhcNMjQwODMxMDYyNjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZWZjYTU0YzAxNmFmOTgzODgxZjc5MGVmZGE1ZDgwZTFmOGFlY2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjwh8FnGo8T83ZaH1/pd+hH55ONk
oRg0tt3WEtMo45FyfQE0+9g6YwRWJyJIozySuPW5qYixaxxTgFciyRrlf0AxYX7z
meAINREOHd/KcbyywV+SyAP3u+lx0V/z+T1v+iAW6R6YZSarqZLGGmiyhxs0/ljM
B//Nj2ocv+2gtH87w9L0m7JSOWic9DuyIJ9RWHNvmg3Y3Z87p3Y4ypw4Qe7ClKtp
iC+UCbph487CqyGmHoKi03nxA3syaSiQJrv73yAOV6XvHgftQs5TWtahqBR5K2No
zugHT7p0bfYIZj94xOaAGVeA0OfW2i8cPiq3zqhYHAZrkQZfNeL3E7rOdwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFP78pUwBavmDiB95Dv2l2A4fiuzlMB8GA1UdIwQY
MBaAFG7QOSrHZgvRRg+h1QMdGEDQG5QSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnRBNUtzZG1DOUZHRDZIVkF4MFlRTkFibEJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83OGUwM2MtYzljNy00Yzg1LWJmZGQt
ZThiYWY5ZmZhZGY4LzEvX3Z5bFRBRnEtWU9JSDNrT19hWFlEaC1LN09VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83OGUwM2MtYzljNy00Yzg1LWJmZGQtZThiYWY5ZmZhZGY4
LzEvYnRBNUtzZG1DOUZHRDZIVkF4MFlRTkFibEJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAJVdMwD
BAJVdNAwDQYJKoZIhvcNAQELBQADggEBAAL20rC66R1Bu5QFXkyx+k2lGzzKYe9/
4qFiAu0RfEd0o0PZCQ5886EYe+dxXLrd8fzAQCpxsHLw90V4kK7Gpjm5OJHN/8Qx
OagiVCL2OQAt7dhLlStpaRarfScWvARxsFp3PlJzRz86eYnJkAE7EHR9H56lctHP
ty2ZbGVPtNo7BZjVB2z89cK8ve4W10VkvW/qM5ASepJciksZjqx9bVppla1etvzR
ng84LuvhcziyGaaqqJ/q3H2cX/i9aStQvHazYLT/X3RGn+4aGmz/8ZCkWyUN0dFI
Mu/7AeIwbvp103RqJ9d2qpbYx6oF0nuOOXtqMbcHKtW1/x9Zlh0PNF0=
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:41:01 2024 by rpki-client on console-fra.rpki-client.org