Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/vWwfKg1R55qPo_WXp6QWKSxEteo.roa
File: vWwfKg1R55qPo_WXp6QWKSxEteo.roa (raw, json)
Hash identifier: uPSqTyXEuzH8xOcPvPj/iEPRdc7Sj5UZM9ghFiSMgL8=
Subject key identifier: BD:6C:1F:2A:0D:51:E7:9A:8F:A3:F5:97:A7:A4:16:29:2C:44:B5:EA
Certificate issuer: /CN=dff5cc4848943b4fe89d2ce71fdc1e4ff7d7f3e3
Certificate serial: 018CC7943C6CA35E37E875C231B9AEE185A5
Authority key identifier: DF:F5:CC:48:48:94:3B:4F:E8:9D:2C:E7:1F:DC:1E:4F:F7:D7:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/vWwfKg1R55qPo_WXp6QWKSxEteo.roa
Signing time: Tue 02 Jan 2024 00:30:29 +0000
ROA not before: Tue 02 Jan 2024 00:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49936
IP address blocks: 85.159.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:3c:6c:a3:5e:37:e8:75:c2:31:b9:ae:e1:85:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff5cc4848943b4fe89d2ce71fdc1e4ff7d7f3e3
Validity
Not Before: Jan 2 00:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd6c1f2a0d51e79a8fa3f597a7a416292c44b5ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5b:99:b6:16:d5:6a:20:19:3d:87:b6:1f:14:
79:1c:cb:77:bf:c7:9d:46:e6:3f:89:6a:e2:4f:49:
4f:74:37:83:af:4a:01:70:a1:1d:3d:68:e5:b4:48:
60:83:8f:e0:ca:ff:98:65:44:37:20:fc:ed:83:50:
86:d4:af:09:77:25:6c:bf:06:f6:85:d3:d6:50:db:
91:79:8c:9c:9d:09:f5:83:3c:32:b8:81:ba:b4:1b:
0f:92:4a:54:74:76:fc:57:e6:07:32:f3:df:b8:8e:
e3:a9:24:b4:56:95:a2:15:2b:d0:15:bc:2f:a9:c0:
5b:35:c6:23:45:27:31:b3:6a:34:4f:24:bc:27:ea:
5a:af:8b:8a:43:bd:fb:b5:a4:cb:08:71:c0:f8:cd:
a3:de:1c:f3:59:ec:7c:3b:f4:93:ce:49:23:91:a6:
be:8d:d1:b3:58:54:3f:06:87:8a:12:fc:bd:0d:ec:
fd:5e:da:e4:f1:16:09:46:20:69:6d:96:a6:d1:7a:
6d:a5:bd:18:e1:1d:af:5d:2b:19:db:ee:35:93:85:
e3:88:af:e0:5c:5b:35:b7:56:e2:6f:59:5e:40:2b:
52:75:11:f9:68:af:78:9b:54:b8:6c:35:b4:98:1e:
8a:38:fd:8d:7b:5a:c6:07:f6:7f:44:43:f1:3d:bd:
fc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6C:1F:2A:0D:51:E7:9A:8F:A3:F5:97:A7:A4:16:29:2C:44:B5:EA
X509v3 Authority Key Identifier:
keyid:DF:F5:CC:48:48:94:3B:4F:E8:9D:2C:E7:1F:DC:1E:4F:F7:D7:F3:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/vWwfKg1R55qPo_WXp6QWKSxEteo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.159.113.0/24
Signature Algorithm: sha256WithRSAEncryption
60:4f:35:7a:f1:0f:89:d1:21:fb:41:92:7b:5f:c1:24:c2:13:
62:1d:6c:73:d8:67:24:69:a8:6c:2b:6e:3b:0f:98:c3:3f:d3:
c8:00:97:7d:22:4a:0d:2c:44:92:62:1c:71:35:67:aa:a9:85:
c5:e5:80:43:5a:a5:62:ef:c5:c0:f2:cc:66:20:7e:07:06:52:
23:51:f3:ed:03:62:4a:bf:a9:80:cf:91:67:5a:cf:81:00:21:
1c:3f:34:80:4b:3a:17:c0:a3:bf:e2:e4:12:cf:71:38:d6:7b:
e8:48:fb:de:28:b2:f7:f6:67:c3:cc:88:ad:a1:5b:28:83:e5:
bd:fe:d5:d5:d4:db:c1:e4:bc:bf:1a:65:7b:83:5c:cd:68:0e:
56:61:2d:d3:cd:db:d4:93:b1:2f:9c:dd:f2:c8:c3:a1:19:fe:
b9:78:66:8e:fe:d0:03:51:a5:15:b2:71:88:39:fc:f9:2f:99:
f8:26:69:c8:f0:28:43:da:92:bf:b7:91:e2:92:e3:01:25:45:
23:c7:3c:ee:e8:fd:10:67:00:71:9e:47:53:09:05:b5:27:79:
09:2a:28:45:70:76:a6:82:90:d2:3d:ee:08:5a:51:40:df:f9:
af:d2:be:d8:57:28:f5:cf:74:30:9f:7d:73:b7:e9:1a:1d:ae:
40:8b:5b:1c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHlDxso1436HXCMbmu4YWlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZjVjYzQ4NDg5NDNiNGZlODlkMmNlNzFmZGMxZTRmZjdk
N2YzZTMwHhcNMjQwMTAyMDAzMDI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDZjMWYyYTBkNTFlNzlhOGZhM2Y1OTdhN2E0MTYyOTJjNDRiNWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjluZthbVaiAZPYe2HxR5HMt3v8ed
RuY/iWriT0lPdDeDr0oBcKEdPWjltEhgg4/gyv+YZUQ3IPztg1CG1K8JdyVsvwb2
hdPWUNuReYycnQn1gzwyuIG6tBsPkkpUdHb8V+YHMvPfuI7jqSS0VpWiFSvQFbwv
qcBbNcYjRScxs2o0TyS8J+par4uKQ737taTLCHHA+M2j3hzzWex8O/STzkkjkaa+
jdGzWFQ/BoeKEvy9Dez9Xtrk8RYJRiBpbZam0Xptpb0Y4R2vXSsZ2+41k4XjiK/g
XFs1t1bib1leQCtSdRH5aK94m1S4bDW0mB6KOP2Ne1rGB/Z/REPxPb389wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL1sHyoNUeeaj6P1l6ekFiksRLXqMB8GA1UdIwQY
MBaAFN/1zEhIlDtP6J0s5x/cHk/31/PjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM19YTVNFaVVPMF9vblN6bkg5d2VUX2ZYOC1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNDE5ZWItMjMzMS00YmM3LThmMWIt
MjY4OWM4NTg3OGFkLzEvdld3ZktnMVI1NXFQb19XWHA2UVdLU3hFdGVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9mNDE5ZWItMjMzMS00YmM3LThmMWItMjY4OWM4NTg3OGFk
LzEvM19YTVNFaVVPMF9vblN6bkg5d2VUX2ZYOC1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVZ9xMA0G
CSqGSIb3DQEBCwUAA4IBAQBgTzV68Q+J0SH7QZJ7X8EkwhNiHWxz2GckaahsK247
D5jDP9PIAJd9IkoNLESSYhxxNWeqqYXF5YBDWqVi78XA8sxmIH4HBlIjUfPtA2JK
v6mAz5FnWs+BACEcPzSASzoXwKO/4uQSz3E41nvoSPveKLL39mfDzIitoVsog+W9
/tXV1NvB5Ly/GmV7g1zNaA5WYS3TzdvUk7EvnN3yyMOhGf65eGaO/tADUaUVsnGI
Ofz5L5n4JmnI8ChD2pK/t5HikuMBJUUjxzzu6P0QZwBxnkdTCQW1J3kJKihFcHam
gpDSPe4IWlFA3/mv0r7YVyj1z3Qwn31zt+kaHa5Ai1sc
-----END CERTIFICATE-----
Generated at Sat Sep 28 10:33:36 2024 by rpki-client on console-ams.rpki-client.org