Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/VcoVjxiCXOhcqjO58Qaz33vRi4A.roa
File: VcoVjxiCXOhcqjO58Qaz33vRi4A.roa (raw, json)
Hash identifier: BYVJk/NJbbf8LECWGCfaNO/TrKdREgJ7+LtFKjRuyPI=
Subject key identifier: 55:CA:15:8F:18:82:5C:E8:5C:AA:33:B9:F1:06:B3:DF:7B:D1:8B:80
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 018CC727782DAC9E3601F3AFFC9E0E87F3AD
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/VcoVjxiCXOhcqjO58Qaz33vRi4A.roa
Signing time: Mon 01 Jan 2024 22:31:41 +0000
ROA not before: Mon 01 Jan 2024 22:31:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59714
IP address blocks: 85.143.32.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:78:2d:ac:9e:36:01:f3:af:fc:9e:0e:87:f3:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 22:31:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55ca158f18825ce85caa33b9f106b3df7bd18b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ec:28:e3:68:58:e4:6e:35:33:96:5c:2a:d3:
84:80:1c:99:ce:c5:e1:b2:bc:e5:d4:b1:76:bb:8e:
72:02:76:ce:95:2a:84:b3:62:d3:93:cf:77:59:58:
d7:bd:a5:48:6a:be:92:83:6e:56:82:39:a5:db:92:
00:e3:26:ab:47:59:93:eb:04:3a:37:e4:a4:9a:fb:
10:fd:1b:6d:03:44:10:ce:45:21:1e:e8:b5:0a:e1:
e3:27:1a:2b:09:3e:da:9c:58:a9:83:0d:9f:0f:fd:
aa:d0:c7:a0:ce:73:6f:67:b7:3f:6e:13:f9:17:c5:
56:4a:5a:3d:56:d9:2d:ea:15:81:21:93:82:15:9b:
3f:3a:6c:b4:bf:28:0b:f7:64:26:16:fc:b6:21:84:
f7:96:32:d5:9b:95:12:df:37:d2:89:fb:c3:8b:6f:
a9:fc:af:6c:76:0e:be:4e:2b:9b:90:ed:f7:52:8b:
e7:c6:4b:b3:70:22:c1:10:cc:01:6f:ac:53:ed:82:
2d:8a:18:9e:c5:ce:28:ff:0e:a0:8f:43:70:b7:e0:
70:75:c1:17:57:de:68:43:65:ff:79:05:b9:cf:58:
8f:69:de:43:8b:ce:47:59:3c:fb:25:a7:6e:a5:81:
b9:3d:b4:f0:61:90:b0:b2:d8:70:b1:56:90:b1:9a:
8c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:CA:15:8F:18:82:5C:E8:5C:AA:33:B9:F1:06:B3:DF:7B:D1:8B:80
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/VcoVjxiCXOhcqjO58Qaz33vRi4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.143.32.0/22
Signature Algorithm: sha256WithRSAEncryption
51:26:b1:2a:33:a8:d0:82:d5:19:cd:98:d7:3b:0f:69:10:28:
72:2d:b9:2c:8d:5a:89:02:15:b1:1b:26:d4:a2:07:18:73:b9:
74:a2:32:68:b9:79:3a:8e:cb:6e:38:8e:1c:ff:7e:b1:5f:1a:
8a:f1:44:40:80:02:5b:b8:32:18:7e:8f:c7:eb:2e:50:07:29:
99:f1:df:ba:a8:a1:92:e6:f1:7b:20:f7:b5:dc:3e:14:7c:20:
eb:4f:31:d0:01:88:84:7b:8e:94:16:e3:83:78:d0:ca:52:65:
ee:18:e0:97:4f:00:b7:bd:97:20:1e:ff:9a:ca:84:13:bf:db:
22:22:48:69:30:31:15:ec:99:0a:d4:ed:b1:16:a8:20:38:16:
26:f2:0e:af:8a:fa:cb:06:2d:20:53:bb:0e:71:89:78:97:69:
70:c9:ed:15:71:c3:ba:60:74:1e:1e:82:15:a9:f8:ff:39:8f:
c2:93:41:85:24:29:92:27:86:61:ae:b4:eb:9d:ff:cf:c5:28:
22:7b:8f:40:16:b0:41:1d:2f:3e:9c:d1:b1:93:6a:6b:ec:3c:
3d:7d:e2:02:ac:fb:8c:a9:f6:74:0d:f4:ba:e1:c6:33:de:43:
8b:1e:48:60:cc:c6:4f:0c:56:19:9c:a2:71:4d:e9:f0:e7:ef:
6f:c0:82:8a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHJ3gtrJ42AfOv/J4Oh/OtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl
MmM2ODUwHhcNMjQwMTAxMjIzMTQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NWNhMTU4ZjE4ODI1Y2U4NWNhYTMzYjlmMTA2YjNkZjdiZDE4YjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOwo42hY5G41M5ZcKtOEgByZzsXh
srzl1LF2u45yAnbOlSqEs2LTk893WVjXvaVIar6Sg25Wgjml25IA4yarR1mT6wQ6
N+SkmvsQ/RttA0QQzkUhHui1CuHjJxorCT7anFipgw2fD/2q0MegznNvZ7c/bhP5
F8VWSlo9Vtkt6hWBIZOCFZs/Omy0vygL92QmFvy2IYT3ljLVm5US3zfSifvDi2+p
/K9sdg6+TiubkO33UovnxkuzcCLBEMwBb6xT7YItihiexc4o/w6gj0Nwt+BwdcEX
V95oQ2X/eQW5z1iPad5Di85HWTz7JadupYG5PbTwYZCwsthwsVaQsZqM+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFXKFY8YglzoXKozufEGs9970YuAMB8GA1UdIwQY
MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt
NDBkOTViZDMzZmNiLzEvVmNvVmp4aUNYT2hjcWpPNThRYXozM3ZSaTRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi
LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVY8gMA0G
CSqGSIb3DQEBCwUAA4IBAQBRJrEqM6jQgtUZzZjXOw9pEChyLbksjVqJAhWxGybU
ogcYc7l0ojJouXk6jstuOI4c/36xXxqK8URAgAJbuDIYfo/H6y5QBymZ8d+6qKGS
5vF7IPe13D4UfCDrTzHQAYiEe46UFuODeNDKUmXuGOCXTwC3vZcgHv+ayoQTv9si
IkhpMDEV7JkK1O2xFqggOBYm8g6vivrLBi0gU7sOcYl4l2lwye0VccO6YHQeHoIV
qfj/OY/Ck0GFJCmSJ4ZhrrTrnf/PxSgie49AFrBBHS8+nNGxk2pr7Dw9feICrPuM
qfZ0DfS64cYz3kOLHkhgzMZPDFYZnKJxTenw5+9vwIKK
-----END CERTIFICATE-----
Generated at Sun Sep 29 00:27:48 2024 by rpki-client on console-fra.rpki-client.org