Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/Vf9M-SczmQ3vZ3eeTgDHIENgmGc.roa
File: Vf9M-SczmQ3vZ3eeTgDHIENgmGc.roa (raw, json)
Hash identifier: QRL6YWCOIeLBde+vKvti2RnLZFuyn0+SUGW/y+qPjRA=
Subject key identifier: 55:FF:4C:F9:27:33:99:0D:EF:67:77:9E:4E:00:C7:20:43:60:98:67
Certificate issuer: /CN=642bab8459948b79747648e13e99b9d0a582506a
Certificate serial: 018CC56E9931EF30F11B8831796CA46DC285
Authority key identifier: 64:2B:AB:84:59:94:8B:79:74:76:48:E1:3E:99:B9:D0:A5:82:50:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/Vf9M-SczmQ3vZ3eeTgDHIENgmGc.roa
Signing time: Mon 01 Jan 2024 14:30:08 +0000
ROA not before: Mon 01 Jan 2024 14:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34986
IP address blocks: 193.104.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:99:31:ef:30:f1:1b:88:31:79:6c:a4:6d:c2:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642bab8459948b79747648e13e99b9d0a582506a
Validity
Not Before: Jan 1 14:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55ff4cf92733990def67779e4e00c72043609867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:09:b8:da:45:6c:b0:fc:bb:91:f7:0e:03:8d:
cb:cd:8b:63:9a:e4:73:fc:5d:d7:38:55:e0:b4:15:
de:d9:e6:46:64:cd:a7:9e:23:53:63:97:72:be:55:
7a:00:02:29:39:92:54:e4:4d:17:50:56:eb:27:27:
31:7f:3c:1f:8c:10:83:d1:f1:a9:19:0f:fb:4e:13:
05:22:86:52:df:ca:5c:18:4f:c3:a5:19:ba:f4:46:
5f:b6:30:5e:f4:c1:bd:41:83:a2:5f:2d:e7:0c:ff:
16:12:83:b7:0a:b5:4e:8d:c6:a4:f8:08:62:7a:3c:
e5:4b:49:a7:70:c3:33:88:50:27:b8:b3:6d:72:a8:
bc:cc:0a:4e:66:ef:ed:aa:e0:8f:9f:a9:06:42:b5:
2b:60:8e:b9:e1:ee:88:a2:56:20:9e:72:7b:37:83:
13:06:37:86:3c:2f:e9:23:a4:30:9b:86:e7:43:ba:
7e:55:e1:58:2a:23:90:88:9d:5f:09:e9:ee:f4:64:
3a:3e:0f:25:b7:14:07:fd:bc:ae:96:b1:cd:ee:8a:
70:3a:b8:d6:d4:82:2c:40:02:ed:a7:20:9b:e2:1f:
b8:18:af:da:c7:54:83:4e:2e:02:50:62:d2:c2:82:
38:3a:ed:fc:b6:88:0c:f3:23:de:ad:b1:b0:05:b3:
0d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FF:4C:F9:27:33:99:0D:EF:67:77:9E:4E:00:C7:20:43:60:98:67
X509v3 Authority Key Identifier:
keyid:64:2B:AB:84:59:94:8B:79:74:76:48:E1:3E:99:B9:D0:A5:82:50:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/Vf9M-SczmQ3vZ3eeTgDHIENgmGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.166.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:d9:1a:19:de:5b:b0:18:4c:9e:69:82:d9:db:69:8e:98:cd:
89:ed:1e:2d:96:1d:25:0f:d6:ab:ac:2f:db:7a:dd:f3:be:fb:
fb:69:75:29:82:8b:68:60:82:7d:a2:3d:52:ed:9f:3d:33:8f:
b6:87:b0:4a:81:86:4d:14:85:e1:d2:3e:3d:da:90:d9:71:1e:
9a:15:70:23:c3:36:e9:82:92:4b:08:41:9a:44:b1:fd:ca:af:
98:7c:7c:7a:e8:18:26:26:2e:8d:67:13:cd:80:0d:29:6d:a1:
2f:a2:0a:8b:7f:bc:ac:ef:ec:c4:8a:08:89:b5:91:a9:45:0c:
3f:1f:ea:1e:14:d8:9f:2a:11:72:58:cd:8a:35:15:d7:27:d0:
7e:b8:25:a0:47:5f:bf:1e:a3:b2:89:73:a8:d8:c7:e6:f8:05:
57:8b:21:88:b7:a3:40:fc:48:f1:a1:38:1b:a4:cf:66:21:82:
f6:d8:b2:7c:83:f8:b2:10:26:d7:56:b2:2a:15:dd:d1:17:1b:
3c:6e:3c:2c:29:ae:ec:2f:1c:eb:88:cc:a1:15:61:75:3d:84:
cf:1a:4a:c2:a7:82:46:a3:24:41:99:ea:16:3e:e0:3c:b2:7f:
ff:00:a6:a6:23:13:2b:c4:f5:2e:c1:03:c0:43:ff:40:e6:45:
42:08:3a:0e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbpkx7zDxG4gxeWykbcKFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MmJhYjg0NTk5NDhiNzk3NDc2NDhlMTNlOTliOWQwYTU4
MjUwNmEwHhcNMjQwMTAxMTQzMDA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NWZmNGNmOTI3MzM5OTBkZWY2Nzc3OWU0ZTAwYzcyMDQzNjA5ODY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQm42kVssPy7kfcOA43LzYtjmuRz
/F3XOFXgtBXe2eZGZM2nniNTY5dyvlV6AAIpOZJU5E0XUFbrJycxfzwfjBCD0fGp
GQ/7ThMFIoZS38pcGE/DpRm69EZftjBe9MG9QYOiXy3nDP8WEoO3CrVOjcak+Ahi
ejzlS0mncMMziFAnuLNtcqi8zApOZu/tquCPn6kGQrUrYI654e6IolYgnnJ7N4MT
BjeGPC/pI6Qwm4bnQ7p+VeFYKiOQiJ1fCenu9GQ6Pg8ltxQH/byulrHN7opwOrjW
1IIsQALtpyCb4h+4GK/ax1SDTi4CUGLSwoI4Ou38togM8yPerbGwBbMNhwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFX/TPknM5kN72d3nk4AxyBDYJhnMB8GA1UdIwQY
MBaAFGQrq4RZlIt5dHZI4T6ZudClglBqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkN1cmhGbVVpM2wwZGtqaFBwbTUwS1dDVUdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS81ZWMzMGMtMmFlZi00N2FiLWIwZWMt
NWIxNTUyM2JmY2JiLzEvVmY5TS1TY3ptUTN2WjNlZVRnREhJRU5nbUdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS81ZWMzMGMtMmFlZi00N2FiLWIwZWMtNWIxNTUyM2JmY2Ji
LzEvWkN1cmhGbVVpM2wwZGtqaFBwbTUwS1dDVUdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWimMA0G
CSqGSIb3DQEBCwUAA4IBAQBc2RoZ3luwGEyeaYLZ22mOmM2J7R4tlh0lD9arrC/b
et3zvvv7aXUpgotoYIJ9oj1S7Z89M4+2h7BKgYZNFIXh0j492pDZcR6aFXAjwzbp
gpJLCEGaRLH9yq+YfHx66BgmJi6NZxPNgA0pbaEvogqLf7ys7+zEigiJtZGpRQw/
H+oeFNifKhFyWM2KNRXXJ9B+uCWgR1+/HqOyiXOo2Mfm+AVXiyGIt6NA/EjxoTgb
pM9mIYL22LJ8g/iyECbXVrIqFd3RFxs8bjwsKa7sLxzriMyhFWF1PYTPGkrCp4JG
oyRBmeoWPuA8sn//AKamIxMrxPUuwQPAQ/9A5kVCCDoO
-----END CERTIFICATE-----
Generated at Thu Jun 20 11:53:06 2024 by rpki-client on console-ams.rpki-client.org