Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/vLJ_WSMXZo0aWX91xpsXKcgJ_j8.roa
File: vLJ_WSMXZo0aWX91xpsXKcgJ_j8.roa (raw, json)
Hash identifier: elw+pHz3ZPTJSVST604c2rqADuxXDBquu1JbMhsVgjw=
Subject key identifier: BC:B2:7F:59:23:17:66:8D:1A:59:7F:75:C6:9B:17:29:C8:09:FE:3F
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 0192BAF2A5320C01158604F9BF85E743DCC0
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/vLJ_WSMXZo0aWX91xpsXKcgJ_j8.roa
Signing time: Wed 23 Oct 2024 19:55:17 +0000
ROA not before: Wed 23 Oct 2024 19:55:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2895
IP address blocks: 147.45.0.0/19 maxlen: 19
147.45.32.0/23 maxlen: 23
147.45.64.0/24 maxlen: 24
147.45.194.0/23 maxlen: 23
193.233.0.0/22 maxlen: 22
193.233.4.0/24 maxlen: 24
193.233.10.0/23 maxlen: 23
2001:640::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ba:f2:a5:32:0c:01:15:86:04:f9:bf:85:e7:43:dc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Oct 23 19:55:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bcb27f592317668d1a597f75c69b1729c809fe3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f6:59:94:9e:39:09:ab:ec:19:8e:9f:ee:be:
9a:e1:6b:d2:fe:99:5b:e0:82:cb:97:73:80:36:6d:
94:79:f2:87:57:37:e9:ea:e0:91:63:b8:1b:6d:3a:
dd:c2:2b:ed:3a:3d:c6:18:ab:0b:e3:d3:bd:45:34:
94:9e:89:36:99:2b:8d:46:4e:cf:85:fb:bf:6b:f2:
ab:c3:8b:ce:31:a5:07:6a:15:56:13:32:37:ed:cd:
67:69:2a:2f:0d:2e:1d:9e:af:3e:f8:79:5c:3d:26:
74:4a:c3:7d:bc:b2:35:c8:4b:40:64:f6:80:a3:f2:
99:5f:9e:97:52:22:47:fb:68:41:02:90:3c:1c:94:
a3:48:69:c7:67:e0:1d:07:12:f4:10:e9:aa:5f:d1:
8e:d6:de:fd:8f:29:8d:65:ce:07:b9:fc:1d:bd:94:
e7:0d:e0:3b:b1:94:74:1d:15:30:29:c2:64:99:03:
47:fb:a3:bd:24:6a:eb:3e:4d:c3:75:16:5a:1b:d3:
f1:5f:b1:c8:53:f8:d2:91:fb:74:fd:83:bd:c2:0c:
2e:2f:e8:f8:46:96:a9:5c:1c:e1:df:9a:cd:77:20:
18:54:25:96:4b:7b:91:dc:d3:d5:24:02:ed:9f:16:
ba:94:12:3b:a9:3f:5c:c1:45:09:ed:c6:df:5d:79:
fd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B2:7F:59:23:17:66:8D:1A:59:7F:75:C6:9B:17:29:C8:09:FE:3F
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/vLJ_WSMXZo0aWX91xpsXKcgJ_j8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.0.0-147.45.33.255
147.45.64.0/24
147.45.194.0/23
193.233.0.0-193.233.4.255
193.233.10.0/23
IPv6:
2001:640::/32
Signature Algorithm: sha256WithRSAEncryption
16:64:06:ce:80:13:30:9d:4e:0b:9e:aa:eb:d7:4e:1c:ba:58:
42:60:e4:fa:96:11:3f:77:07:3e:3d:76:7d:84:ad:2d:cf:bf:
cc:7d:bd:e8:f1:a6:fd:42:8a:9a:25:dc:9d:fd:8c:81:10:0d:
1c:37:18:ee:ec:e6:c8:02:8a:ec:70:22:ae:d7:44:f6:93:29:
c7:ff:12:43:c8:ac:5a:be:08:2b:19:d4:c7:81:c3:a2:29:a3:
85:b0:cc:88:48:fb:5f:39:5c:02:1c:23:51:b9:fa:58:b1:e5:
63:66:73:b5:dc:02:19:5f:0a:c4:11:75:a0:9b:00:58:b6:93:
67:07:36:54:f4:30:d6:07:f6:c5:c6:1a:54:2d:b1:52:5e:4b:
04:8f:f7:f9:1a:70:e0:c1:14:e4:96:99:b1:dc:a4:dd:47:1f:
40:c0:05:82:5e:8e:f9:21:b5:cd:e4:08:cd:05:fa:f0:d1:66:
2f:d9:a7:8f:3c:06:9f:f9:ad:49:ca:1f:80:05:fc:98:67:50:
09:e4:ff:0b:88:4f:1c:05:9e:da:28:19:f9:3a:1e:7b:b9:8d:
f3:13:96:47:f3:96:53:b7:c9:aa:03:6f:09:12:d3:89:fe:6a:
e7:a2:a4:c3:e2:97:3b:a4:c7:a2:c4:da:75:a6:e0:f0:32:71:
fd:03:82:03
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgISAZK68qUyDAEVhgT5v4XnQ9zAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4
Mjg3M2MwHhcNMjQxMDIzMTk1NTE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiY2IyN2Y1OTIzMTc2NjhkMWE1OTdmNzVjNjliMTcyOWM4MDlmZTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7vZZlJ45CavsGY6f7r6a4WvS/plb
4ILLl3OANm2UefKHVzfp6uCRY7gbbTrdwivtOj3GGKsL49O9RTSUnok2mSuNRk7P
hfu/a/Krw4vOMaUHahVWEzI37c1naSovDS4dnq8++HlcPSZ0SsN9vLI1yEtAZPaA
o/KZX56XUiJH+2hBApA8HJSjSGnHZ+AdBxL0EOmqX9GO1t79jymNZc4HufwdvZTn
DeA7sZR0HRUwKcJkmQNH+6O9JGrrPk3DdRZaG9PxX7HIU/jSkft0/YO9wgwuL+j4
RpapXBzh35rNdyAYVCWWS3uR3NPVJALtnxa6lBI7qT9cwUUJ7cbfXXn9lwIDAQAB
o4ICPjCCAjowHQYDVR0OBBYEFLyyf1kjF2aNGll/dcabFynICf4/MB8GA1UdIwQY
MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt
NGRlYzRkYWZlZTQ5LzEvdkxKX1dTTVhabzBhV1g5MXhwc1hLY2dKX2o4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5
LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFQGCCsGAQUFBwEHAQH/BEUwQzAyBAIAATAsMAsDAwCTLQME
AZMtIAMEAJMtQAMEAZMtwjALAwMAwekDBADB6QQDBAHB6QowDQQCAAIwBwMFACAB
BkAwDQYJKoZIhvcNAQELBQADggEBABZkBs6AEzCdTguequvXThy6WEJg5PqWET93
Bz49dn2ErS3Pv8x9vejxpv1Cipol3J39jIEQDRw3GO7s5sgCiuxwIq7XRPaTKcf/
EkPIrFq+CCsZ1MeBw6Ipo4WwzIhI+185XAIcI1G5+lix5WNmc7XcAhlfCsQRdaCb
AFi2k2cHNlT0MNYH9sXGGlQtsVJeSwSP9/kacODBFOSWmbHcpN1HH0DABYJejvkh
tc3kCM0F+vDRZi/Zp488Bp/5rUnKH4AF/JhnUAnk/wuITxwFntooGfk6Hnu5jfMT
lkfzllO3yaoDbwkS04n+aueipMPilzukx6LE2nWm4PAycf0DggM=
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:32:09 2024 by rpki-client on console-ams.rpki-client.org