Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/VlcONARE_yxG4aN2C63h8CsRn8Y.roa
File: VlcONARE_yxG4aN2C63h8CsRn8Y.roa (raw, json)
Hash identifier: blxmGJ0Bxr68Zg3sXzk3/gZ0n/WKRDbFh54Zc5zI9Xk=
Subject key identifier: 56:57:0E:34:04:44:FF:2C:46:E1:A3:76:0B:AD:E1:F0:2B:11:9F:C6
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018CC7953183947C7849B9BC96FEFC424FCD
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/VlcONARE_yxG4aN2C63h8CsRn8Y.roa
Signing time: Tue 02 Jan 2024 00:31:32 +0000
ROA not before: Tue 02 Jan 2024 00:31:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203344
IP address blocks: 193.233.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 20:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:31:83:94:7c:78:49:b9:bc:96:fe:fc:42:4f:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 2 00:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56570e340444ff2c46e1a3760bade1f02b119fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6d:fa:e3:4f:92:f3:07:77:29:3f:11:97:38:
eb:bf:82:3e:78:47:81:be:8f:14:80:42:c1:40:9c:
13:ed:58:cf:d3:42:10:b6:bd:96:ec:9f:d1:26:0b:
38:9e:7d:2d:44:f2:35:97:05:76:26:ab:0f:25:30:
93:3c:66:cd:79:35:bf:56:de:f5:e6:98:98:d2:c5:
24:c8:f7:61:23:1b:98:06:b8:a0:c1:e5:9c:6f:1a:
91:16:03:34:fc:1a:63:c0:a2:38:2b:a3:82:fc:fc:
08:a8:b4:08:cb:46:3f:8f:32:3e:b1:21:30:32:06:
42:d0:56:b4:13:71:68:e5:0e:18:00:87:e2:83:0d:
c5:68:b0:79:a4:9f:34:9e:89:d5:40:26:44:4c:7b:
9d:cc:98:08:f4:38:79:f9:c5:86:1e:51:df:ad:a5:
4d:e4:5d:93:88:c6:65:16:c6:8e:d1:08:34:a0:4e:
85:0c:17:ec:cc:7d:f4:69:c1:4f:ec:98:13:b1:f7:
4b:70:90:39:c1:d2:bc:cf:a5:f1:68:f9:88:c6:09:
0b:87:29:d8:92:7a:cf:99:58:bb:73:8c:4f:66:4b:
2c:f5:b5:f9:0b:c6:1d:ab:a1:88:e1:d2:31:34:e8:
1c:e2:95:bd:82:d2:9a:d5:67:88:e5:9b:16:57:59:
73:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:57:0E:34:04:44:FF:2C:46:E1:A3:76:0B:AD:E1:F0:2B:11:9F:C6
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/VlcONARE_yxG4aN2C63h8CsRn8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.153.0/24
Signature Algorithm: sha256WithRSAEncryption
65:43:8a:a5:fb:b9:a8:9a:64:cc:41:71:6a:3f:dc:00:2c:7e:
7f:44:a1:58:03:07:53:60:fe:8f:51:25:0d:f4:52:b3:90:27:
92:fd:6a:e1:04:7b:6f:85:a6:80:bf:66:d3:8e:47:15:4b:16:
d2:49:45:65:f6:a3:67:d4:00:d0:8c:b3:47:80:eb:d4:4c:3f:
6b:d6:97:1a:e2:69:02:8f:8c:ab:1d:6a:50:7f:2e:d9:42:2a:
bc:7c:02:70:98:3a:6d:da:8c:2a:ca:fb:ad:c1:17:10:83:2e:
2e:15:bb:b3:c1:aa:cc:2a:fa:15:bd:e6:d5:be:60:0a:65:ae:
7f:6c:3e:3b:8c:a8:56:0f:d8:68:0f:dc:13:04:d7:11:25:76:
70:95:aa:f3:36:c7:77:aa:f6:ee:ae:31:d8:42:ca:93:47:3f:
32:ed:f3:97:eb:b3:da:80:30:a3:98:e5:1f:c7:47:19:0d:af:
15:28:64:c9:5b:98:4c:6c:94:54:e1:b6:d4:26:2a:4b:54:10:
78:0c:e7:7c:1c:4c:28:c1:fb:63:40:e7:c2:17:08:1d:0c:67:
5a:5c:19:02:13:85:e0:89:26:ba:dd:ec:71:88:c6:55:b2:c0:
27:71:1d:66:eb:9a:61:9d:7d:95:cc:53:49:17:9f:e5:42:04:
45:9d:8e:d9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHlTGDlHx4Sbm8lv78Qk/NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4
Mjg3M2MwHhcNMjQwMTAyMDAzMTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjU3MGUzNDA0NDRmZjJjNDZlMWEzNzYwYmFkZTFmMDJiMTE5ZmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzG3640+S8wd3KT8Rlzjrv4I+eEeB
vo8UgELBQJwT7VjP00IQtr2W7J/RJgs4nn0tRPI1lwV2JqsPJTCTPGbNeTW/Vt71
5piY0sUkyPdhIxuYBrigweWcbxqRFgM0/BpjwKI4K6OC/PwIqLQIy0Y/jzI+sSEw
MgZC0Fa0E3Fo5Q4YAIfigw3FaLB5pJ80nonVQCZETHudzJgI9Dh5+cWGHlHfraVN
5F2TiMZlFsaO0Qg0oE6FDBfszH30acFP7JgTsfdLcJA5wdK8z6XxaPmIxgkLhynY
knrPmVi7c4xPZkss9bX5C8Ydq6GI4dIxNOgc4pW9gtKa1WeI5ZsWV1lz+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFZXDjQERP8sRuGjdgut4fArEZ/GMB8GA1UdIwQY
MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt
NGRlYzRkYWZlZTQ5LzEvVmxjT05BUkVfeXhHNGFOMkM2M2g4Q3NSbjhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5
LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwemZMA0G
CSqGSIb3DQEBCwUAA4IBAQBlQ4ql+7mommTMQXFqP9wALH5/RKFYAwdTYP6PUSUN
9FKzkCeS/WrhBHtvhaaAv2bTjkcVSxbSSUVl9qNn1ADQjLNHgOvUTD9r1pca4mkC
j4yrHWpQfy7ZQiq8fAJwmDpt2owqyvutwRcQgy4uFbuzwarMKvoVvebVvmAKZa5/
bD47jKhWD9hoD9wTBNcRJXZwlarzNsd3qvburjHYQsqTRz8y7fOX67PagDCjmOUf
x0cZDa8VKGTJW5hMbJRU4bbUJipLVBB4DOd8HEwowftjQOfCFwgdDGdaXBkCE4Xg
iSa63exxiMZVssAncR1m65phnX2VzFNJF5/lQgRFnY7Z
-----END CERTIFICATE-----
Generated at Sun May 5 00:15:45 2024 by rpki-client on console-fra.rpki-client.org