Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/vsm_JlHKdN8gSSJidjQlR9Yr9_M.roa
File: vsm_JlHKdN8gSSJidjQlR9Yr9_M.roa (raw, json)
Hash identifier: HwU22PK01rBgtN18WDZiMNETC5BXPbijBWsldZQr/us=
Subject key identifier: BE:C9:BF:26:51:CA:74:DF:20:49:22:62:76:34:25:47:D6:2B:F7:F3
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 018CC492D2A10BCAC47226583A8199998613
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/vsm_JlHKdN8gSSJidjQlR9Yr9_M.roa
Signing time: Mon 01 Jan 2024 10:30:05 +0000
ROA not before: Mon 01 Jan 2024 10:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39074
IP address blocks: 5.160.206.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:d2:a1:0b:ca:c4:72:26:58:3a:81:99:99:86:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 10:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bec9bf2651ca74df2049226276342547d62bf7f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4b:be:8e:f6:52:6d:1c:39:84:b3:1c:70:9a:
6f:fb:31:e8:55:2d:de:12:c8:08:93:6b:92:68:35:
51:0d:13:9e:2e:78:10:15:b7:af:a9:a2:85:03:2a:
3b:60:73:3b:2d:2d:ba:f5:15:95:8a:cc:21:1a:cb:
bb:57:83:76:52:08:d2:3f:15:12:14:0d:b5:60:40:
fd:3f:5c:9f:3a:92:27:3b:c4:17:df:3d:9c:a1:72:
c5:e2:ba:9b:1f:51:8f:5c:50:44:17:81:2d:4f:a8:
69:20:9d:7b:0b:97:30:a7:d3:ab:99:2c:30:1d:fa:
cd:52:5d:3a:21:2c:ac:12:46:a1:ec:26:09:07:59:
19:1b:f4:45:72:4b:98:05:86:1c:58:9f:7d:6d:37:
d3:a2:5e:bd:b6:fb:7c:a5:af:ae:2c:68:45:3a:78:
f8:2b:44:d4:22:23:99:a6:07:9d:91:2a:47:be:14:
c7:2d:ec:00:6c:a4:37:18:ff:f0:b5:22:f0:7c:2c:
ca:87:e4:96:e3:f1:9c:2e:0c:da:93:ed:9b:c5:e9:
54:ed:a3:19:32:a3:68:d1:64:4d:32:ad:99:c2:72:
42:2d:3a:0f:9e:2d:d9:2f:70:a2:43:d1:cd:34:75:
45:6c:1c:ec:ee:3a:8a:48:b3:d9:a2:9b:52:d8:5e:
6d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C9:BF:26:51:CA:74:DF:20:49:22:62:76:34:25:47:D6:2B:F7:F3
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/vsm_JlHKdN8gSSJidjQlR9Yr9_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.206.0/23
Signature Algorithm: sha256WithRSAEncryption
37:2f:2a:0e:2e:30:1b:c9:37:7b:1a:29:6a:d3:da:eb:ae:d1:
08:fb:65:23:c0:e5:6b:5c:54:f0:e2:51:9f:15:1d:6f:44:80:
92:21:f6:9f:49:5b:4a:4d:56:74:96:63:ec:1c:26:20:dc:7d:
f5:64:15:6b:7c:4b:d3:3c:65:0f:c0:18:c3:a6:59:c4:56:b3:
50:14:fc:eb:99:b5:95:ab:58:bf:7b:54:fd:1d:ae:b1:9c:f3:
fe:e5:76:ce:b7:b9:c3:a5:2f:ae:23:5b:53:2d:9b:23:29:69:
36:7b:b6:a5:1b:dd:63:a3:fc:10:8b:68:c2:65:15:aa:04:0e:
6e:c7:a3:59:2b:b6:e6:db:f4:cc:18:7c:ae:50:c4:fd:51:86:
92:57:33:52:30:b9:3e:f2:5d:35:11:f4:22:b2:58:dd:dd:44:
f3:5b:63:ee:32:28:45:b7:55:02:45:65:bd:21:d0:f8:95:e6:
5a:8b:b9:34:14:07:66:57:8a:a8:9a:ff:5a:c0:a4:93:09:24:
95:3e:1c:63:1f:1b:eb:f9:f5:ab:91:2c:60:07:14:be:04:c2:
2e:b8:16:e8:65:4b:db:cf:7e:d8:fa:31:d8:fa:9b:f8:05:a1:
88:b9:c5:e8:24:cc:f2:dd:b5:bf:18:6b:69:dd:57:f7:40:09:
8a:66:2c:dd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEktKhC8rEciZYOoGZmYYTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxY2NhOWYxNWUxOTIxOTUzYTYyOGM4YWQyYWM0YmU5Nzdi
NmMzMDMwHhcNMjQwMTAxMTAzMDA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZWM5YmYyNjUxY2E3NGRmMjA0OTIyNjI3NjM0MjU0N2Q2MmJmN2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA50u+jvZSbRw5hLMccJpv+zHoVS3e
EsgIk2uSaDVRDROeLngQFbevqaKFAyo7YHM7LS269RWViswhGsu7V4N2UgjSPxUS
FA21YED9P1yfOpInO8QX3z2coXLF4rqbH1GPXFBEF4EtT6hpIJ17C5cwp9OrmSww
HfrNUl06ISysEkah7CYJB1kZG/RFckuYBYYcWJ99bTfTol69tvt8pa+uLGhFOnj4
K0TUIiOZpgedkSpHvhTHLewAbKQ3GP/wtSLwfCzKh+SW4/GcLgzak+2bxelU7aMZ
MqNo0WRNMq2ZwnJCLToPni3ZL3CiQ9HNNHVFbBzs7jqKSLPZoptS2F5tGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL7JvyZRynTfIEkiYnY0JUfWK/fzMB8GA1UdIwQY
MBaAFIHMqfFeGSGVOmKMitKsS+l3tsMDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xZWEyYjAtNmI5YS00NGQ3LWEyZTUt
MjIwNmNjMmU2OTFjLzEvdnNtX0psSEtkTjhnU1NKaWRqUWxSOVlyOV9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8xZWEyYjAtNmI5YS00NGQ3LWEyZTUtMjIwNmNjMmU2OTFj
LzEvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBaDOMA0G
CSqGSIb3DQEBCwUAA4IBAQA3LyoOLjAbyTd7Gilq09rrrtEI+2UjwOVrXFTw4lGf
FR1vRICSIfafSVtKTVZ0lmPsHCYg3H31ZBVrfEvTPGUPwBjDplnEVrNQFPzrmbWV
q1i/e1T9Ha6xnPP+5XbOt7nDpS+uI1tTLZsjKWk2e7alG91jo/wQi2jCZRWqBA5u
x6NZK7bm2/TMGHyuUMT9UYaSVzNSMLk+8l01EfQisljd3UTzW2PuMihFt1UCRWW9
IdD4leZai7k0FAdmV4qomv9awKSTCSSVPhxjHxvr+fWrkSxgBxS+BMIuuBboZUvb
z37Y+jHY+pv4BaGIucXoJMzy3bW/GGtp3Vf3QAmKZizd
-----END CERTIFICATE-----
Generated at Wed Jun 26 08:33:22 2024 by rpki-client on console-ams.rpki-client.org