Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/_VqpKNWMtFPkASwQ2N8ASGJLpvM.roa
File: _VqpKNWMtFPkASwQ2N8ASGJLpvM.roa (raw, json)
Hash identifier: y6sBVrQJ19O94R2lPYyuQC/zqu2AElPxo6+cHp+7edw=
Subject key identifier: FD:5A:A9:28:D5:8C:B4:53:E4:01:2C:10:D8:DF:00:48:62:4B:A6:F3
Certificate issuer: /CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Certificate serial: 018CC64ACC9D5F9350019711A907578AFC09
Authority key identifier: 12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/_VqpKNWMtFPkASwQ2N8ASGJLpvM.roa
Signing time: Mon 01 Jan 2024 18:30:39 +0000
ROA not before: Mon 01 Jan 2024 18:30:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60064
IP address blocks: 185.114.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 19:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:cc:9d:5f:93:50:01:97:11:a9:07:57:8a:fc:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Validity
Not Before: Jan 1 18:30:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd5aa928d58cb453e4012c10d8df0048624ba6f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:82:76:3e:be:66:e4:bc:e1:ed:11:a1:91:80:
cf:95:ed:d2:58:d8:88:ed:08:9d:5a:37:dd:4b:99:
1f:7c:f5:b3:28:a1:c3:43:d4:8f:10:2b:e1:c0:e9:
ac:ee:53:69:b1:eb:24:67:b1:ad:ef:3d:29:52:ee:
90:f9:e6:6f:79:9c:2d:54:c4:93:ec:c1:80:80:04:
1d:03:a4:17:62:62:10:9a:2e:d1:68:e2:a7:8b:5d:
e9:46:08:cf:90:2f:06:84:33:9e:7d:ad:e1:e3:cf:
e3:c7:a8:8b:06:3c:d2:10:1c:e2:80:43:60:d9:c5:
6e:f2:9f:c4:6a:bc:b6:88:ff:f4:4a:4c:93:3b:98:
89:fe:e6:10:74:10:87:c1:98:08:60:b4:c0:2d:93:
2f:76:ba:db:28:e3:49:12:21:1d:a7:06:df:ac:a0:
95:80:f0:f0:16:3b:67:41:68:c5:64:b0:4a:1c:cb:
98:d8:f4:a5:0d:1e:be:eb:87:ae:58:5d:88:ec:1b:
9c:55:54:ae:b4:ae:6c:dc:d7:3b:f4:0d:f4:81:f1:
9f:90:7a:21:1b:ca:ab:b9:e1:0e:62:bc:54:22:bf:
a2:c9:85:e1:ca:47:9c:a8:8c:43:3c:bc:f9:7a:1a:
9e:1e:32:da:ba:df:86:29:8b:cc:ba:25:3a:4b:f2:
d4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5A:A9:28:D5:8C:B4:53:E4:01:2C:10:D8:DF:00:48:62:4B:A6:F3
X509v3 Authority Key Identifier:
keyid:12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/_VqpKNWMtFPkASwQ2N8ASGJLpvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.35.0/24
Signature Algorithm: sha256WithRSAEncryption
64:a7:52:2e:b3:d0:1a:ec:24:63:48:6b:4f:ed:67:65:47:bf:
63:b9:87:b7:76:3a:5b:40:f1:24:65:d9:b5:96:c1:12:a5:5e:
a8:5e:74:40:e8:bc:14:61:96:e3:aa:3b:27:56:5f:a9:cd:cd:
1b:4e:5d:f4:a3:56:46:17:c4:0c:a8:3b:7b:d5:32:1b:9c:e3:
56:af:08:f9:c9:49:46:cc:f9:54:53:b2:57:55:6e:f4:db:2f:
0a:25:9f:d7:1c:4e:d6:bf:ef:58:eb:e5:25:af:5f:3e:e3:c7:
45:5c:bd:31:be:1d:a0:4f:30:b5:03:c8:7e:13:d6:64:28:91:
15:f5:0d:37:7d:3e:e8:45:cb:01:57:0f:10:cc:27:b7:e1:8f:
7a:be:f5:93:17:09:00:34:ca:8f:38:7c:ea:3b:48:d9:ef:89:
58:c0:19:ea:44:0e:9c:24:45:77:b2:87:03:7f:b9:8d:19:cd:
56:e0:47:26:53:20:89:e4:7b:57:e3:cf:35:a3:1b:a2:8f:72:
54:b7:06:28:26:98:36:da:28:92:69:e5:1f:cb:85:e6:1f:02:
5d:9a:4d:2a:6a:1d:ef:ba:7d:d1:c6:b9:c8:cf:21:30:58:8f:
10:92:b8:c1:be:18:0d:c7:1e:83:93:9f:7d:37:aa:d8:44:af:
6d:23:a7:74
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGSsydX5NQAZcRqQdXivwJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMTRhN2UyYThjNzAxMjMyNWFlOTczZWQxYTJiYmEwNWIy
YmI5YzEwHhcNMjQwMTAxMTgzMDM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDVhYTkyOGQ1OGNiNDUzZTQwMTJjMTBkOGRmMDA0ODYyNGJhNmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIJ2Pr5m5Lzh7RGhkYDPle3SWNiI
7QidWjfdS5kffPWzKKHDQ9SPECvhwOms7lNpseskZ7Gt7z0pUu6Q+eZveZwtVMST
7MGAgAQdA6QXYmIQmi7RaOKni13pRgjPkC8GhDOefa3h48/jx6iLBjzSEBzigENg
2cVu8p/Eary2iP/0SkyTO5iJ/uYQdBCHwZgIYLTALZMvdrrbKONJEiEdpwbfrKCV
gPDwFjtnQWjFZLBKHMuY2PSlDR6+64euWF2I7BucVVSutK5s3Nc79A30gfGfkHoh
G8qrueEOYrxUIr+iyYXhykecqIxDPLz5ehqeHjLaut+GKYvMuiU6S/LU0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP1aqSjVjLRT5AEsENjfAEhiS6bzMB8GA1UdIwQY
MBaAFBIUp+KoxwEjJa6XPtGiu6BbK7nBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWhTbjRxakhBU01scnBjLTBhSzdvRnNydWNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hNjhkYmMtM2Y5NC00ZmVkLThkOWQt
ZTljMzY0OWMxMjE4LzEvX1ZxcEtOV010RlBrQVN3UTJOOEFTR0pMcHZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9hNjhkYmMtM2Y5NC00ZmVkLThkOWQtZTljMzY0OWMxMjE4
LzEvRWhTbjRxakhBU01scnBjLTBhSzdvRnNydWNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXIjMA0G
CSqGSIb3DQEBCwUAA4IBAQBkp1Ius9Aa7CRjSGtP7WdlR79juYe3djpbQPEkZdm1
lsESpV6oXnRA6LwUYZbjqjsnVl+pzc0bTl30o1ZGF8QMqDt71TIbnONWrwj5yUlG
zPlUU7JXVW702y8KJZ/XHE7Wv+9Y6+Ulr18+48dFXL0xvh2gTzC1A8h+E9ZkKJEV
9Q03fT7oRcsBVw8QzCe34Y96vvWTFwkANMqPOHzqO0jZ74lYwBnqRA6cJEV3socD
f7mNGc1W4EcmUyCJ5HtX4881oxuij3JUtwYoJpg22iiSaeUfy4XmHwJdmk0qah3v
un3RxrnIzyEwWI8QkrjBvhgNxx6Dk599N6rYRK9tI6d0
-----END CERTIFICATE-----
Generated at Sun Apr 28 01:08:54 2024 by rpki-client on console-ams.rpki-client.org