Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/VcPJDqa-5cPC5UHNk0Ot6nbMV-U.roa
File: VcPJDqa-5cPC5UHNk0Ot6nbMV-U.roa (raw, json)
Hash identifier: YIv0+FRtwmpn6Pw1dMz53SVNVobvJTSZoMOGWcXhn+o=
Subject key identifier: 55:C3:C9:0E:A6:BE:E5:C3:C2:E5:41:CD:93:43:AD:EA:76:CC:57:E5
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 018F1146921CDFC63C6540C5703B795F92BF
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/VcPJDqa-5cPC5UHNk0Ot6nbMV-U.roa
Signing time: Wed 24 Apr 2024 18:03:08 +0000
ROA not before: Wed 24 Apr 2024 18:03:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51692
IP address blocks: 185.242.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:11:46:92:1c:df:c6:3c:65:40:c5:70:3b:79:5f:92:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Apr 24 18:03:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55c3c90ea6bee5c3c2e541cd9343adea76cc57e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e7:86:e1:fc:ac:05:72:d7:ad:62:0f:1a:ce:
f9:52:20:e0:40:f9:76:87:cc:c7:4b:06:bb:d2:a4:
0d:41:1c:07:b1:36:b7:ab:78:c2:6c:00:b6:01:93:
ff:58:8b:ad:38:05:be:0a:d5:fe:ae:3b:e8:20:eb:
99:cf:41:48:54:cc:58:31:5f:20:72:97:ef:ef:16:
29:79:e8:16:2e:9d:ae:02:e1:ed:e6:65:61:e1:b1:
10:38:bb:3b:d7:ab:11:f4:52:23:a7:db:ea:0d:3a:
ef:8c:98:fb:0a:9a:46:ed:52:16:40:ae:f2:6d:66:
0e:7b:d5:ba:e0:02:5f:65:17:b5:c0:5b:a9:0a:36:
51:cc:6b:d4:69:fd:62:7e:0d:d1:23:77:81:20:62:
db:de:04:1f:7b:e7:d1:d9:5e:7a:a7:c9:01:31:db:
a9:bc:82:1d:f4:9e:b9:2f:54:de:77:00:a3:02:0d:
0c:e5:3a:d8:76:06:aa:e3:6f:20:b2:7c:06:96:19:
f5:dc:1f:ef:7c:1c:1a:c5:e7:96:aa:40:db:c6:0a:
ab:86:1e:70:86:65:83:6a:4c:62:6a:c7:b6:f7:a0:
be:b2:5a:01:3e:ac:a3:e7:d5:74:17:64:7e:8f:fe:
66:bf:85:68:62:b0:fa:b3:82:57:30:02:d7:d2:3d:
19:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C3:C9:0E:A6:BE:E5:C3:C2:E5:41:CD:93:43:AD:EA:76:CC:57:E5
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/VcPJDqa-5cPC5UHNk0Ot6nbMV-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.225.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:a7:4b:cf:11:69:7c:81:cd:f9:7b:ae:67:83:6f:8e:07:4f:
59:1d:64:01:6a:2e:98:21:52:ac:55:83:b2:a6:1b:1d:53:66:
09:32:b9:b8:14:72:72:17:cf:11:c6:4f:c2:47:ba:11:84:fe:
c3:39:a7:71:17:ea:6d:fe:51:e3:8c:22:cc:7a:5b:1c:13:4c:
56:67:d6:58:ea:3d:5c:f4:8c:f9:bd:e6:1a:ab:5b:70:39:22:
d9:45:cb:76:11:fa:01:e3:5d:10:69:0c:8e:b0:e9:e9:86:63:
a9:a0:b3:69:0e:48:c0:0a:09:01:59:cb:d2:2a:33:2b:5d:0f:
8b:e5:91:f5:45:a9:5c:b0:4f:ce:5d:11:bb:d1:92:2e:73:7d:
a2:22:e1:8c:dc:92:a6:d1:94:e3:f2:bc:df:34:ad:1a:47:36:
da:08:25:6f:0a:c4:6b:44:1b:af:83:d8:aa:aa:f9:f5:19:94:
32:75:e4:84:98:79:1a:f9:e8:4d:4e:6d:c4:48:c1:4d:bd:bd:
04:a5:44:4b:59:2d:71:0c:ad:2f:53:0b:29:d0:d0:20:ca:37:
c5:15:3c:59:0a:21:b3:91:7d:0b:b8:cd:ef:13:4f:6d:c7:87:
52:ad:51:ef:e0:2b:12:c9:79:7f:49:6a:85:8e:a3:6c:8d:0b:
75:69:9c:ff
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY8RRpIc38Y8ZUDFcDt5X5K/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz
YjUwMzQwHhcNMjQwNDI0MTgwMzA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NWMzYzkwZWE2YmVlNWMzYzJlNTQxY2Q5MzQzYWRlYTc2Y2M1N2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiueG4fysBXLXrWIPGs75UiDgQPl2
h8zHSwa70qQNQRwHsTa3q3jCbAC2AZP/WIutOAW+CtX+rjvoIOuZz0FIVMxYMV8g
cpfv7xYpeegWLp2uAuHt5mVh4bEQOLs716sR9FIjp9vqDTrvjJj7CppG7VIWQK7y
bWYOe9W64AJfZRe1wFupCjZRzGvUaf1ifg3RI3eBIGLb3gQfe+fR2V56p8kBMdup
vIId9J65L1TedwCjAg0M5TrYdgaq428gsnwGlhn13B/vfBwaxeeWqkDbxgqrhh5w
hmWDakxiase296C+sloBPqyj59V0F2R+j/5mv4VoYrD6s4JXMALX0j0ZswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFXDyQ6mvuXDwuVBzZNDrep2zFflMB8GA1UdIwQY
MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It
Mzk0YWNkMjFmMzliLzEvVmNQSkRxYS01Y1BDNVVITmswT3Q2bmJNVi1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli
LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufLhMA0G
CSqGSIb3DQEBCwUAA4IBAQBtp0vPEWl8gc35e65ng2+OB09ZHWQBai6YIVKsVYOy
phsdU2YJMrm4FHJyF88Rxk/CR7oRhP7DOadxF+pt/lHjjCLMelscE0xWZ9ZY6j1c
9Iz5veYaq1twOSLZRct2EfoB410QaQyOsOnphmOpoLNpDkjACgkBWcvSKjMrXQ+L
5ZH1RalcsE/OXRG70ZIuc32iIuGM3JKm0ZTj8rzfNK0aRzbaCCVvCsRrRBuvg9iq
qvn1GZQydeSEmHka+ehNTm3ESMFNvb0EpURLWS1xDK0vUwsp0NAgyjfFFTxZCiGz
kX0LuM3vE09tx4dSrVHv4CsSyXl/SWqFjqNsjQt1aZz/
-----END CERTIFICATE-----
Generated at Mon Nov 25 18:07:55 2024 by rpki-client on console-fra.rpki-client.org