Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/tHarjKG23P8Ep2XaL0DASaCfQqE.roa
File: tHarjKG23P8Ep2XaL0DASaCfQqE.roa (raw, json)
Hash identifier: Rhcy+ddSjI9+UqGqHRCWlCn31q3lyx52kBbsZu3SJf8=
Subject key identifier: B4:76:AB:8C:A1:B6:DC:FF:04:A7:65:DA:2F:40:C0:49:A0:9F:42:A1
Certificate issuer: /CN=55a72cff41bdb7c7e01855d39076daf721742c70
Certificate serial: 018CC8DE1DAFF2F1427F2671A9BD94F61D02
Authority key identifier: 55:A7:2C:FF:41:BD:B7:C7:E0:18:55:D3:90:76:DA:F7:21:74:2C:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vacs_0G9t8fgGFXTkHba9yF0LHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/tHarjKG23P8Ep2XaL0DASaCfQqE.roa
Signing time: Tue 02 Jan 2024 06:30:48 +0000
ROA not before: Tue 02 Jan 2024 06:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205814
IP address blocks: 185.234.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vacs_0G9t8fgGFXTkHba9yF0LHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:1d:af:f2:f1:42:7f:26:71:a9:bd:94:f6:1d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55a72cff41bdb7c7e01855d39076daf721742c70
Validity
Not Before: Jan 2 06:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b476ab8ca1b6dcff04a765da2f40c049a09f42a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0d:bb:e0:3f:bd:bf:2b:2b:e9:7e:b8:38:06:
b9:9b:f3:c7:6c:0d:32:3a:7e:82:19:9c:1e:1f:19:
54:7b:a7:3b:c0:f2:13:6c:c0:84:e8:5f:f8:c7:56:
ba:67:07:6e:30:a2:f4:af:a3:5d:f7:79:5b:d3:cd:
4f:59:bb:55:26:18:3f:93:68:0e:d4:42:47:89:7e:
c2:be:76:a8:b1:ae:03:80:8e:81:18:64:42:3c:2a:
fb:ff:2a:7d:55:df:c5:da:7c:48:99:0f:4e:28:fc:
48:20:da:a6:a8:92:5f:83:17:2c:58:15:b3:c2:73:
46:0f:4d:2f:c4:b7:60:6d:d1:31:54:d4:46:a6:0e:
43:b7:79:a7:e7:67:8e:b9:77:5b:3b:6b:b7:19:e3:
c7:ec:4a:eb:b4:a3:f1:9b:14:ab:35:1d:5d:f1:07:
d3:07:2b:4a:7d:18:cf:bd:80:44:74:3f:ff:5f:27:
14:0c:fc:3e:a4:b4:a0:d0:69:3a:a7:05:85:66:6a:
c4:2e:e1:94:75:6d:4d:83:e8:60:07:d4:48:99:63:
62:f5:1a:91:5a:33:ba:da:46:3d:b3:22:43:23:d0:
f7:cb:e4:12:d1:b3:0e:16:0c:bf:84:64:68:a3:6e:
c7:42:ff:bc:2d:ff:92:8d:12:d9:2a:5c:ca:93:a3:
ea:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:76:AB:8C:A1:B6:DC:FF:04:A7:65:DA:2F:40:C0:49:A0:9F:42:A1
X509v3 Authority Key Identifier:
keyid:55:A7:2C:FF:41:BD:B7:C7:E0:18:55:D3:90:76:DA:F7:21:74:2C:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vacs_0G9t8fgGFXTkHba9yF0LHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/tHarjKG23P8Ep2XaL0DASaCfQqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.244.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:17:b0:a1:80:67:73:64:da:e9:34:49:93:2b:e4:e6:49:64:
7a:3e:d3:f1:a9:c2:30:69:71:52:dd:94:df:40:f7:eb:f8:b9:
8c:2c:f9:79:06:fa:60:68:3c:64:c2:b6:cb:c7:10:01:b0:7d:
47:68:4b:26:11:bc:3e:f7:9e:5d:11:78:0f:bd:70:74:bd:bd:
b2:b1:e9:a7:6a:07:a1:bc:7b:e2:f5:d0:ea:14:6c:a7:b8:77:
6f:40:a1:f2:4f:83:2b:48:e7:16:ec:6b:2b:62:5b:95:a5:64:
5e:28:11:7b:eb:cc:cf:de:68:16:39:cf:2a:87:92:b1:3e:05:
22:67:29:1f:1e:52:e7:b9:82:5d:0f:56:96:4c:b0:8a:96:37:
ee:2f:bb:7d:8c:56:5d:26:33:67:92:aa:16:87:d6:ad:c0:da:
1f:57:f3:c8:eb:5b:f4:46:a7:36:c7:09:fe:58:d8:2f:b0:c7:
b2:86:fe:d0:c3:67:ec:db:0e:d0:d1:4d:f8:9c:60:fb:6a:b0:
14:6f:9a:0c:a7:1d:44:e1:74:9e:d1:b6:e3:14:3d:29:41:3b:
c1:3e:9f:07:ef:77:9f:36:f0:48:82:c9:2a:bd:4d:d6:be:93:
b5:a4:75:11:9f:3b:33:f2:46:af:ab:ed:06:dd:3c:7a:27:31:
7b:40:c5:34
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI3h2v8vFCfyZxqb2U9h0CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1YTcyY2ZmNDFiZGI3YzdlMDE4NTVkMzkwNzZkYWY3MjE3
NDJjNzAwHhcNMjQwMTAyMDYzMDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDc2YWI4Y2ExYjZkY2ZmMDRhNzY1ZGEyZjQwYzA0OWEwOWY0MmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjA274D+9vysr6X64OAa5m/PHbA0y
On6CGZweHxlUe6c7wPITbMCE6F/4x1a6ZwduMKL0r6Nd93lb081PWbtVJhg/k2gO
1EJHiX7Cvnaosa4DgI6BGGRCPCr7/yp9Vd/F2nxImQ9OKPxIINqmqJJfgxcsWBWz
wnNGD00vxLdgbdExVNRGpg5Dt3mn52eOuXdbO2u3GePH7ErrtKPxmxSrNR1d8QfT
BytKfRjPvYBEdD//XycUDPw+pLSg0Gk6pwWFZmrELuGUdW1Ng+hgB9RImWNi9RqR
WjO62kY9syJDI9D3y+QS0bMOFgy/hGRoo27HQv+8Lf+SjRLZKlzKk6PqEwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLR2q4yhttz/BKdl2i9AwEmgn0KhMB8GA1UdIwQY
MBaAFFWnLP9BvbfH4BhV05B22vchdCxwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmFjc18wRzl0OGZnR0ZYVGtIYmE5eUYwTEhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy80ZjkxOGItMjhkOS00MTliLTg2NDct
MzM4OTg2MTc2YjFmLzEvdEhhcmpLRzIzUDhFcDJYYUwwREFTYUNmUXFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy80ZjkxOGItMjhkOS00MTliLTg2NDctMzM4OTg2MTc2YjFm
LzEvVmFjc18wRzl0OGZnR0ZYVGtIYmE5eUYwTEhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuer0MA0G
CSqGSIb3DQEBCwUAA4IBAQBOF7ChgGdzZNrpNEmTK+TmSWR6PtPxqcIwaXFS3ZTf
QPfr+LmMLPl5BvpgaDxkwrbLxxABsH1HaEsmEbw+955dEXgPvXB0vb2ysemnageh
vHvi9dDqFGynuHdvQKHyT4MrSOcW7GsrYluVpWReKBF768zP3mgWOc8qh5KxPgUi
ZykfHlLnuYJdD1aWTLCKljfuL7t9jFZdJjNnkqoWh9atwNofV/PI61v0Rqc2xwn+
WNgvsMeyhv7Qw2fs2w7Q0U34nGD7arAUb5oMpx1E4XSe0bbjFD0pQTvBPp8H73ef
NvBIgskqvU3WvpO1pHURnzsz8kavq+0G3Tx6JzF7QMU0
-----END CERTIFICATE-----
Generated at Wed Nov 27 02:47:08 2024 by rpki-client on console-fra.rpki-client.org