Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5f793d-97f9-4aba-9ba1-b5d13a0189a5/1/VzHRUEbcwnnkCNPNGYo2brYLHI4.roa
File: VzHRUEbcwnnkCNPNGYo2brYLHI4.roa (raw, json)
Hash identifier: jl94J84jVcU4kM/OAgvrvcV91pl8WMFa+YU+dY6EaJ4=
Subject key identifier: 57:31:D1:50:46:DC:C2:79:E4:08:D3:CD:19:8A:36:6E:B6:0B:1C:8E
Certificate issuer: /CN=165b56e55b6fefbc20db4ace6fd756c73d741f9c
Certificate serial: 0191D559DF4D8B53A7847805D4D7141E8AF0
Authority key identifier: 16:5B:56:E5:5B:6F:EF:BC:20:DB:4A:CE:6F:D7:56:C7:3D:74:1F:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FltW5Vtv77wg20rOb9dWxz10H5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5f793d-97f9-4aba-9ba1-b5d13a0189a5/1/VzHRUEbcwnnkCNPNGYo2brYLHI4.roa
Signing time: Mon 09 Sep 2024 05:55:22 +0000
ROA not before: Mon 09 Sep 2024 05:55:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44396
IP address blocks: 194.48.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/5f793d-97f9-4aba-9ba1-b5d13a0189a5/1/FltW5Vtv77wg20rOb9dWxz10H5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/5f793d-97f9-4aba-9ba1-b5d13a0189a5/1/FltW5Vtv77wg20rOb9dWxz10H5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/FltW5Vtv77wg20rOb9dWxz10H5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d5:59:df:4d:8b:53:a7:84:78:05:d4:d7:14:1e:8a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=165b56e55b6fefbc20db4ace6fd756c73d741f9c
Validity
Not Before: Sep 9 05:55:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5731d15046dcc279e408d3cd198a366eb60b1c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:59:39:e8:ac:2a:81:10:26:8b:53:f7:08:89:
0c:84:45:fd:83:f8:f1:36:eb:34:ba:e1:42:8a:1e:
f8:b5:62:ae:f6:b3:f2:fe:c9:63:62:42:72:80:85:
e4:11:80:25:95:7c:13:35:15:aa:9e:c4:5f:b7:c3:
ba:c8:4c:4a:af:8a:f8:b6:af:14:42:df:76:5f:4f:
3e:8d:37:fe:79:ea:9a:b0:f3:e6:1c:9a:25:20:cb:
a4:45:4d:13:48:0e:d1:f2:2a:3a:da:48:9d:06:8a:
49:11:8d:3c:b4:9b:c3:21:e4:8d:4a:22:00:67:5d:
3c:34:d9:43:ef:0d:e9:77:52:ae:1f:32:12:5e:c9:
85:a6:29:18:fd:16:a0:3d:5a:a1:bf:74:ae:ed:e3:
04:14:54:3b:27:7f:0c:e7:86:39:28:b4:ca:12:f2:
f4:88:1d:04:85:78:35:ce:90:3b:56:c6:ee:de:e8:
6f:e5:7b:a5:d3:a4:de:7f:1a:00:59:b7:22:99:0a:
ac:ad:8c:1b:83:2f:f1:5c:52:86:d7:44:4b:0b:95:
d1:71:c2:9f:e6:fc:e5:0b:d3:36:2e:e2:d6:66:7e:
74:86:80:d2:6d:7c:d6:1e:51:e7:9b:ef:29:fa:ff:
db:37:de:4f:ee:dc:d9:d5:c5:34:14:f5:4e:28:1f:
61:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:31:D1:50:46:DC:C2:79:E4:08:D3:CD:19:8A:36:6E:B6:0B:1C:8E
X509v3 Authority Key Identifier:
keyid:16:5B:56:E5:5B:6F:EF:BC:20:DB:4A:CE:6F:D7:56:C7:3D:74:1F:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FltW5Vtv77wg20rOb9dWxz10H5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5f793d-97f9-4aba-9ba1-b5d13a0189a5/1/VzHRUEbcwnnkCNPNGYo2brYLHI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5f793d-97f9-4aba-9ba1-b5d13a0189a5/1/FltW5Vtv77wg20rOb9dWxz10H5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.206.0/24
Signature Algorithm: sha256WithRSAEncryption
15:b6:ad:11:db:ba:00:cf:92:f5:47:f8:2a:e3:35:d1:74:2a:
3d:e1:4f:f9:bf:11:61:d6:d6:53:0c:86:d0:fb:d8:62:20:44:
56:31:47:42:10:c2:81:95:6c:74:5f:b7:00:2e:ef:7a:15:fd:
23:cd:fb:17:99:f8:6c:5c:a4:90:a7:15:54:07:e4:ea:e8:c4:
71:46:d5:69:d0:2d:b8:ea:11:63:cd:03:89:be:e4:f0:2d:3c:
1b:e1:d7:6f:45:2c:3b:5f:64:32:e4:d3:dc:51:05:a9:69:a9:
7e:be:11:3d:99:f1:61:f4:dd:a1:55:39:71:fe:79:a0:97:37:
a6:3c:9f:be:15:62:eb:7b:32:1d:ca:9e:61:c1:af:56:ed:44:
b5:84:16:a0:d8:28:ce:d3:bd:21:8c:a0:a7:57:05:bf:ec:19:
50:d0:ca:b3:19:4a:79:6c:b0:d1:a7:a0:5b:59:b5:2f:48:a8:
4b:36:27:15:43:2a:6d:2f:32:5e:fa:c5:b7:ac:3d:1b:8b:8e:
1c:37:fb:1f:95:65:32:ef:be:de:17:85:0c:ca:78:8a:e1:6d:
7e:3c:59:2a:70:a6:97:2f:2d:48:b1:58:df:cc:c2:7e:cf:a1:
53:c0:9f:26:5f:0a:a3:82:f0:e1:df:c6:58:69:6b:4c:55:a6:
0f:6b:95:ab
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZHVWd9Ni1OnhHgF1NcUHorwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NWI1NmU1NWI2ZmVmYmMyMGRiNGFjZTZmZDc1NmM3M2Q3
NDFmOWMwHhcNMjQwOTA5MDU1NTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzMxZDE1MDQ2ZGNjMjc5ZTQwOGQzY2QxOThhMzY2ZWI2MGIxYzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlk56KwqgRAmi1P3CIkMhEX9g/jx
Nus0uuFCih74tWKu9rPy/sljYkJygIXkEYAllXwTNRWqnsRft8O6yExKr4r4tq8U
Qt92X08+jTf+eeqasPPmHJolIMukRU0TSA7R8io62kidBopJEY08tJvDIeSNSiIA
Z108NNlD7w3pd1KuHzISXsmFpikY/RagPVqhv3Su7eMEFFQ7J38M54Y5KLTKEvL0
iB0EhXg1zpA7Vsbu3uhv5Xul06TefxoAWbcimQqsrYwbgy/xXFKG10RLC5XRccKf
5vzlC9M2LuLWZn50hoDSbXzWHlHnm+8p+v/bN95P7tzZ1cU0FPVOKB9hnQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFcx0VBG3MJ55AjTzRmKNm62CxyOMB8GA1UdIwQY
MBaAFBZbVuVbb++8INtKzm/XVsc9dB+cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmx0VzVWdHY3N3dnMjByT2I5ZFd4ejEwSDV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC81Zjc5M2QtOTdmOS00YWJhLTliYTEt
YjVkMTNhMDE4OWE1LzEvVnpIUlVFYmN3bm5rQ05QTkdZbzJicllMSEk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC81Zjc5M2QtOTdmOS00YWJhLTliYTEtYjVkMTNhMDE4OWE1
LzEvRmx0VzVWdHY3N3dnMjByT2I5ZFd4ejEwSDV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjDOMA0G
CSqGSIb3DQEBCwUAA4IBAQAVtq0R27oAz5L1R/gq4zXRdCo94U/5vxFh1tZTDIbQ
+9hiIERWMUdCEMKBlWx0X7cALu96Ff0jzfsXmfhsXKSQpxVUB+Tq6MRxRtVp0C24
6hFjzQOJvuTwLTwb4ddvRSw7X2Qy5NPcUQWpaal+vhE9mfFh9N2hVTlx/nmglzem
PJ++FWLrezIdyp5hwa9W7US1hBag2CjO070hjKCnVwW/7BlQ0MqzGUp5bLDRp6Bb
WbUvSKhLNicVQyptLzJe+sW3rD0bi44cN/sflWUy777eF4UMyniK4W1+PFkqcKaX
Ly1IsVjfzMJ+z6FTwJ8mXwqjgvDh38ZYaWtMVaYPa5Wr
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:34:23 2024 by rpki-client on console-ams.rpki-client.org