Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/b_vpHpftiHxVW3VoRkAR8WtGfHU.roa
File: b_vpHpftiHxVW3VoRkAR8WtGfHU.roa (raw, json)
Hash identifier: M+ir8tkli7FWTbQRe+JjRTCOELCpLXHW9gp9ERxMloU=
Subject key identifier: 6F:FB:E9:1E:97:ED:88:7C:55:5B:75:68:46:40:11:F1:6B:46:7C:75
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 018EE357877726D4D07525A807B5021F90F4
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/b_vpHpftiHxVW3VoRkAR8WtGfHU.roa
Signing time: Mon 15 Apr 2024 19:59:08 +0000
ROA not before: Mon 15 Apr 2024 19:59:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63023
IP address blocks: 213.232.116.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e3:57:87:77:26:d4:d0:75:25:a8:07:b5:02:1f:90:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Apr 15 19:59:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ffbe91e97ed887c555b7568464011f16b467c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e1:f6:1b:7f:76:7d:d6:89:c9:e8:ba:94:1d:
3b:57:4c:b2:bf:d9:32:90:ff:88:28:9d:58:de:2e:
a5:fe:36:10:a2:90:da:cd:2f:1b:f5:2b:77:32:13:
57:75:57:21:d7:55:44:e6:74:31:7d:dd:a5:4e:dc:
6e:f1:11:66:45:cc:8c:fd:22:d1:e0:41:5a:b5:3a:
30:33:ea:ce:97:5c:22:31:a9:fd:0b:bf:a3:dc:a6:
41:bb:05:7d:77:74:39:e2:5c:31:04:d8:33:68:ee:
92:85:fd:6f:b4:d3:59:56:63:fe:6e:fb:db:c1:6e:
fa:2e:1b:c6:20:5c:84:36:d9:ac:10:33:fa:68:08:
55:e0:f8:d0:bb:b6:43:df:69:49:ff:81:00:68:12:
61:7c:e6:98:69:75:88:ea:69:54:33:63:6b:60:a5:
ea:54:01:2c:04:d6:0e:b6:52:d2:3f:b8:7c:56:dc:
2c:6a:ca:8f:f7:0c:34:ee:2f:e7:3d:18:12:52:f5:
26:45:96:1f:57:d6:25:b2:77:15:c5:22:06:73:ca:
9d:97:43:16:1a:dd:74:2a:63:c6:1b:57:26:33:3b:
9c:23:09:bd:06:99:84:bf:0c:ec:45:74:e4:7e:b6:
31:6c:e3:ab:5f:9e:17:73:f7:c2:fe:15:a7:21:46:
6b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FB:E9:1E:97:ED:88:7C:55:5B:75:68:46:40:11:F1:6B:46:7C:75
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/b_vpHpftiHxVW3VoRkAR8WtGfHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.232.116.0/22
Signature Algorithm: sha256WithRSAEncryption
01:ef:51:96:19:36:47:c1:51:ac:fd:ce:4b:37:98:e6:8e:3b:
5c:f0:30:a8:60:ea:c3:db:41:69:76:cd:7e:6d:05:8f:0d:4e:
17:44:dd:62:71:55:e8:c0:4e:92:57:da:4b:b3:8c:1c:b8:4a:
48:b0:c8:0a:fe:af:e1:39:76:eb:0f:8e:8b:00:e3:1b:a7:dd:
5a:fd:0d:8a:8f:00:48:97:7d:33:9a:ba:da:f5:5f:2e:7b:9b:
da:1a:d6:55:ed:89:8a:ca:0f:e9:10:04:5f:0c:b7:71:9f:65:
43:a1:64:96:86:de:c3:0f:93:26:5d:9c:1d:4b:40:b8:84:72:
ff:63:1c:41:69:13:d1:d5:1f:1e:e2:fe:b7:91:96:63:7c:6c:
f7:34:c0:37:eb:1f:84:05:7a:1d:fc:77:68:e6:03:24:a6:0f:
bb:62:b4:19:24:11:7d:7b:25:98:a2:1e:67:5e:b7:56:36:d0:
25:d3:af:6e:f2:cd:6d:06:aa:e2:15:da:47:f1:14:38:70:fe:
40:09:ef:f9:72:ae:fb:c1:26:8f:a9:7d:d3:67:62:dc:2d:d9:
f5:91:1f:f0:d8:81:00:a1:7f:ed:1b:2b:9d:d4:72:fe:09:32:
09:7d:aa:b2:1b:dc:a8:5c:0f:61:ca:ee:6f:a8:63:f9:52:15:
e5:a5:66:4c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY7jV4d3JtTQdSWoB7UCH5D0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjQwNDE1MTk1OTA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmZiZTkxZTk3ZWQ4ODdjNTU1Yjc1Njg0NjQwMTFmMTZiNDY3Yzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+H2G392fdaJyei6lB07V0yyv9ky
kP+IKJ1Y3i6l/jYQopDazS8b9St3MhNXdVch11VE5nQxfd2lTtxu8RFmRcyM/SLR
4EFatTowM+rOl1wiMan9C7+j3KZBuwV9d3Q54lwxBNgzaO6Shf1vtNNZVmP+bvvb
wW76LhvGIFyENtmsEDP6aAhV4PjQu7ZD32lJ/4EAaBJhfOaYaXWI6mlUM2NrYKXq
VAEsBNYOtlLSP7h8VtwsasqP9ww07i/nPRgSUvUmRZYfV9YlsncVxSIGc8qdl0MW
Gt10KmPGG1cmMzucIwm9BpmEvwzsRXTkfrYxbOOrX54Xc/fC/hWnIUZrKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG/76R6X7Yh8VVt1aEZAEfFrRnx1MB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEvYl92cEhwZnRpSHhWVzNWb1JrQVI4V3RHZkhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1eh0MA0G
CSqGSIb3DQEBCwUAA4IBAQAB71GWGTZHwVGs/c5LN5jmjjtc8DCoYOrD20Fpds1+
bQWPDU4XRN1icVXowE6SV9pLs4wcuEpIsMgK/q/hOXbrD46LAOMbp91a/Q2KjwBI
l30zmrra9V8ue5vaGtZV7YmKyg/pEARfDLdxn2VDoWSWht7DD5MmXZwdS0C4hHL/
YxxBaRPR1R8e4v63kZZjfGz3NMA36x+EBXod/Hdo5gMkpg+7YrQZJBF9eyWYoh5n
XrdWNtAl069u8s1tBqriFdpH8RQ4cP5ACe/5cq77wSaPqX3TZ2LcLdn1kR/w2IEA
oX/tGyud1HL+CTIJfaqyG9yoXA9hyu5vqGP5UhXlpWZM
-----END CERTIFICATE-----
Generated at Tue May 7 13:02:43 2024 by rpki-client on console-fra.rpki-client.org