Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/VzMoQae9ZxNmgFiOKjYkE6gk-v0.roa
File: VzMoQae9ZxNmgFiOKjYkE6gk-v0.roa (raw, json)
Hash identifier: SvaWZYwWcpvh3l+Fi+wW3/rncT5QfLTIseVPkTKHe5c=
Subject key identifier: 57:33:28:41:A7:BD:67:13:66:80:58:8E:2A:36:24:13:A8:24:FA:FD
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 018FAA4AD809DA4DF078EE6E2C6980B0CD2C
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/VzMoQae9ZxNmgFiOKjYkE6gk-v0.roa
Signing time: Fri 24 May 2024 11:09:42 +0000
ROA not before: Fri 24 May 2024 11:09:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12912
IP address blocks: 78.133.128.0/17 maxlen: 17
85.219.128.0/17 maxlen: 17
89.174.0.0/16 maxlen: 16
94.42.0.0/16 maxlen: 16
94.42.175.0/24 maxlen: 24
157.25.0.0/16 maxlen: 16
195.94.192.0/19 maxlen: 19
217.8.160.0/19 maxlen: 19
217.153.0.0/16 maxlen: 16
2001:4190::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:aa:4a:d8:09:da:4d:f0:78:ee:6e:2c:69:80:b0:cd:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: May 24 11:09:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57332841a7bd67136680588e2a362413a824fafd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:34:cb:b4:c3:78:10:64:ae:8c:81:02:00:4d:
db:e3:4e:6d:af:7a:63:db:52:18:d8:ea:56:31:47:
0e:77:cf:fa:7d:d7:93:ce:78:21:c3:58:0d:54:5d:
85:d0:21:7c:a2:8d:18:0e:b8:31:82:57:0a:14:55:
02:48:d5:c6:a9:2d:db:94:9f:a7:c0:78:dd:66:87:
be:7a:32:21:c5:f3:5a:7b:2a:fd:76:40:67:aa:d5:
43:c4:0b:b4:fb:3d:65:86:df:c7:ba:a7:4f:46:36:
04:1e:17:89:44:32:f2:ed:df:99:cf:1a:dc:01:0d:
d4:d7:79:20:6e:62:a2:81:55:92:65:72:7a:ce:66:
85:e1:67:6c:ab:06:8a:2b:aa:2c:eb:dc:70:0b:fe:
26:13:53:c2:07:a5:fe:84:04:8b:91:38:0f:5d:51:
56:07:d9:bb:a1:30:c1:55:f0:c8:df:5e:56:9b:65:
b7:9e:ae:5f:cf:9f:09:6b:af:4a:a7:2c:c3:3e:76:
d2:7a:bf:b7:d9:77:7b:80:a4:59:f8:4f:21:42:7e:
07:5d:d1:de:51:42:ab:e6:d6:64:4a:d1:a1:ab:82:
05:33:70:55:10:24:68:70:65:83:be:d5:7f:29:ad:
56:e4:47:b9:9b:41:7e:f3:47:9f:28:b6:c4:3d:df:
96:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:33:28:41:A7:BD:67:13:66:80:58:8E:2A:36:24:13:A8:24:FA:FD
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/VzMoQae9ZxNmgFiOKjYkE6gk-v0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.133.128.0/17
85.219.128.0/17
89.174.0.0/16
94.42.0.0/16
157.25.0.0/16
195.94.192.0/19
217.8.160.0/19
217.153.0.0/16
IPv6:
2001:4190::/32
Signature Algorithm: sha256WithRSAEncryption
19:1e:0a:c9:46:c4:f9:be:48:bc:8a:53:2d:6f:05:1e:3b:e9:
2f:97:55:33:75:81:89:2e:a8:82:9e:91:00:a3:d2:a8:6f:32:
12:c7:da:dd:96:62:e8:d0:bd:0f:88:cf:84:ba:5e:19:00:5e:
db:ae:e4:6a:1d:cc:53:ef:e8:a6:c8:83:d4:69:96:d8:b8:b0:
a3:3c:4d:16:cb:9a:ce:11:e3:21:b1:28:b5:c9:61:85:02:02:
b2:4d:dc:f1:0c:7c:50:b9:cf:79:c9:69:1b:9f:17:75:30:51:
11:ac:81:45:a4:ca:53:c9:1d:a6:4d:4a:a3:3d:6e:42:d6:8f:
fe:0e:6c:41:d1:70:96:3b:9f:41:2b:ca:d9:3c:34:f3:83:61:
49:45:80:5e:ca:6f:98:50:b8:1a:96:32:58:f6:f4:e7:91:ef:
8f:2d:5e:cd:14:71:68:f1:4e:6d:81:9f:63:6a:0d:28:68:d6:
48:88:6f:f5:be:88:71:42:72:83:60:51:91:2a:41:f7:90:6a:
71:a6:7b:3a:f2:c1:ac:85:dc:c7:ad:39:2a:54:e9:96:d5:cd:
dc:c2:f8:77:04:07:b7:b6:60:55:5f:07:9c:72:2f:4f:59:97:
b7:54:b7:f4:2c:57:03:c5:e9:d2:4d:30:5b:a3:fa:b4:dd:15:
5a:10:4a:98
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgISAY+qStgJ2k3weO5uLGmAsM0sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhY2E2M2RmMjQ4YjdhZGYzZGRkMDdlOGMyZDNlZWRkMDJj
ZWY5MzMwHhcNMjQwNTI0MTEwOTQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzMzMjg0MWE3YmQ2NzEzNjY4MDU4OGUyYTM2MjQxM2E4MjRmYWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDTLtMN4EGSujIECAE3b405tr3pj
21IY2OpWMUcOd8/6fdeTznghw1gNVF2F0CF8oo0YDrgxglcKFFUCSNXGqS3blJ+n
wHjdZoe+ejIhxfNaeyr9dkBnqtVDxAu0+z1lht/HuqdPRjYEHheJRDLy7d+Zzxrc
AQ3U13kgbmKigVWSZXJ6zmaF4WdsqwaKK6os69xwC/4mE1PCB6X+hASLkTgPXVFW
B9m7oTDBVfDI315Wm2W3nq5fz58Ja69KpyzDPnbSer+32Xd7gKRZ+E8hQn4HXdHe
UUKr5tZkStGhq4IFM3BVECRocGWDvtV/Ka1W5Ee5m0F+80efKLbEPd+WKwIDAQAB
o4ICPjCCAjowHQYDVR0OBBYEFFczKEGnvWcTZoBYjio2JBOoJPr9MB8GA1UdIwQY
MBaAFBrKY98ki3rfPd0H6MLT7t0CzvkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzIt
OTFlMzE4NGJiMGFiLzEvVnpNb1FhZTlaeE5tZ0ZpT0tqWWtFNmdrLXYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzItOTFlMzE4NGJiMGFi
LzEvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFQGCCsGAQUFBwEHAQH/BEUwQzAyBAIAATAsAwQHToWAAwQH
VduAAwMAWa4DAwBeKgMDAJ0ZAwQFw17AAwQF2QigAwMA2ZkwDQQCAAIwBwMFACAB
QZAwDQYJKoZIhvcNAQELBQADggEBABkeCslGxPm+SLyKUy1vBR476S+XVTN1gYku
qIKekQCj0qhvMhLH2t2WYujQvQ+Iz4S6XhkAXtuu5GodzFPv6KbIg9Rplti4sKM8
TRbLms4R4yGxKLXJYYUCArJN3PEMfFC5z3nJaRufF3UwURGsgUWkylPJHaZNSqM9
bkLWj/4ObEHRcJY7n0Erytk8NPODYUlFgF7Kb5hQuBqWMlj29OeR748tXs0UcWjx
Tm2Bn2NqDSho1kiIb/W+iHFCcoNgUZEqQfeQanGmezrywayF3MetOSpU6ZbVzdzC
+HcEB7e2YFVfB5xyL09Zl7dUt/QsVwPF6dJNMFuj+rTdFVoQSpg=
-----END CERTIFICATE-----
Generated at Fri Sep 27 22:16:51 2024 by rpki-client on console-fra.rpki-client.org