Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1c444d-058d-475c-abff-5cdfa117aec6/1/vJS0TcIODQA292S4BMtQZU7h1VI.roa
File: vJS0TcIODQA292S4BMtQZU7h1VI.roa (raw, json)
Hash identifier: S9UPi3LsKhha9a47jadHGsviICi98d4jkumWOeYI/pk=
Subject key identifier: BC:94:B4:4D:C2:0E:0D:00:36:F7:64:B8:04:CB:50:65:4E:E1:D5:52
Certificate issuer: /CN=dd53f63f13a0c952a079f4578a10edbf6e3aa58b
Certificate serial: 018CC80157A8490D1A13D9812113C4CD91F1
Authority key identifier: DD:53:F6:3F:13:A0:C9:52:A0:79:F4:57:8A:10:ED:BF:6E:3A:A5:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VP2PxOgyVKgefRXihDtv246pYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1c444d-058d-475c-abff-5cdfa117aec6/1/vJS0TcIODQA292S4BMtQZU7h1VI.roa
Signing time: Tue 02 Jan 2024 02:29:40 +0000
ROA not before: Tue 02 Jan 2024 02:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6720
IP address blocks: 217.149.224.0/20 maxlen: 20
141.203.0.0/16 maxlen: 16
2a00:1ba0:2::/48 maxlen: 48
2a00:1ba0:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/1c444d-058d-475c-abff-5cdfa117aec6/1/3VP2PxOgyVKgefRXihDtv246pYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/1c444d-058d-475c-abff-5cdfa117aec6/1/3VP2PxOgyVKgefRXihDtv246pYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3VP2PxOgyVKgefRXihDtv246pYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 04:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:57:a8:49:0d:1a:13:d9:81:21:13:c4:cd:91:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd53f63f13a0c952a079f4578a10edbf6e3aa58b
Validity
Not Before: Jan 2 02:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc94b44dc20e0d0036f764b804cb50654ee1d552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ac:61:87:7a:7a:a4:52:8d:d8:c3:46:2d:74:
3b:c6:0c:08:31:fa:e6:7b:b9:0f:7f:6e:5f:f1:f3:
cb:e7:26:ae:1c:9b:b2:45:bc:e5:74:ad:20:14:c5:
b0:c4:78:d8:e9:88:72:b2:64:a1:36:f9:a0:4e:b9:
3c:a7:6c:51:8f:c9:e4:72:4e:48:2d:8f:cc:f3:cd:
d4:4b:5c:7c:6a:67:36:f2:69:9b:23:12:01:83:2a:
2a:b6:56:c3:03:bc:c1:2b:e1:69:b8:65:9d:5c:a6:
5b:25:0a:53:58:eb:11:aa:dc:87:6a:93:8f:a3:0d:
36:8d:de:99:22:d2:ce:49:3a:72:d1:b3:03:31:55:
67:1f:ec:b1:c8:6d:98:34:5c:9f:d7:cc:30:1f:30:
c4:ec:3e:9b:ac:a6:ca:30:6e:6f:0f:ce:a8:2f:41:
b2:b7:72:a8:b6:f7:1f:f1:7d:f8:f9:04:e4:11:35:
8a:9e:d5:37:01:3e:33:56:92:0e:57:01:08:db:df:
b1:1a:40:b3:23:03:15:1b:ff:9d:0a:f7:9e:ca:d0:
d3:5c:56:59:0f:1a:2c:94:f8:d1:b4:f7:4e:45:ab:
f3:f3:be:fd:af:aa:59:d3:d1:c7:a2:16:90:b5:aa:
bf:a1:88:ff:1a:ed:49:12:e2:6e:82:57:8f:86:7e:
34:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:94:B4:4D:C2:0E:0D:00:36:F7:64:B8:04:CB:50:65:4E:E1:D5:52
X509v3 Authority Key Identifier:
keyid:DD:53:F6:3F:13:A0:C9:52:A0:79:F4:57:8A:10:ED:BF:6E:3A:A5:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VP2PxOgyVKgefRXihDtv246pYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1c444d-058d-475c-abff-5cdfa117aec6/1/vJS0TcIODQA292S4BMtQZU7h1VI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1c444d-058d-475c-abff-5cdfa117aec6/1/3VP2PxOgyVKgefRXihDtv246pYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.203.0.0/16
217.149.224.0/20
IPv6:
2a00:1ba0:2::/47
Signature Algorithm: sha256WithRSAEncryption
7e:66:b4:c8:51:40:ea:b6:d6:8d:b5:55:b5:53:98:ae:ff:16:
e2:03:43:c2:2b:f1:1e:26:ed:1a:50:ea:0e:fd:c1:3e:7f:77:
fc:b3:64:bf:c6:bc:5b:2f:d6:6b:ea:4b:b2:c8:23:e1:f9:d7:
60:c1:9a:3a:d7:12:7a:8a:4c:19:cd:3f:1b:b9:6f:e2:d6:0f:
38:40:ac:01:b5:10:65:07:f3:2a:59:d8:3f:e0:7f:00:4d:f1:
65:ea:0b:f6:4c:19:69:47:dd:bc:19:dc:24:03:06:e1:19:7e:
4a:20:b7:71:6d:0d:58:bd:0e:90:5c:45:b8:77:f6:06:26:bb:
5b:23:c7:dd:2a:f3:a4:19:e6:07:6e:37:19:bb:18:5d:9d:ad:
10:0c:4a:96:a9:2a:e4:0d:ba:9c:20:26:20:ca:f5:65:41:0d:
5c:fa:61:da:b1:16:3d:c6:cb:57:f0:fa:16:26:a1:ce:0e:ea:
88:c4:8d:96:4f:2a:78:f3:e9:f3:0c:79:99:32:ea:df:62:e8:
98:c9:ac:c3:de:4f:aa:f6:ea:d9:34:ec:80:49:85:19:ba:38:
eb:40:29:ec:41:83:0d:a2:4e:28:97:48:85:83:a8:0f:32:71:
54:0f:3a:34:e4:54:ea:8c:b4:57:96:1d:ad:b3:7d:e8:06:1b:
22:3c:57:65
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAYzIAVeoSQ0aE9mBIRPEzZHxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNTNmNjNmMTNhMGM5NTJhMDc5ZjQ1NzhhMTBlZGJmNmUz
YWE1OGIwHhcNMjQwMTAyMDIyOTQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzk0YjQ0ZGMyMGUwZDAwMzZmNzY0YjgwNGNiNTA2NTRlZTFkNTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqxhh3p6pFKN2MNGLXQ7xgwIMfrm
e7kPf25f8fPL5yauHJuyRbzldK0gFMWwxHjY6YhysmShNvmgTrk8p2xRj8nkck5I
LY/M883US1x8amc28mmbIxIBgyoqtlbDA7zBK+FpuGWdXKZbJQpTWOsRqtyHapOP
ow02jd6ZItLOSTpy0bMDMVVnH+yxyG2YNFyf18wwHzDE7D6brKbKMG5vD86oL0Gy
t3Kotvcf8X34+QTkETWKntU3AT4zVpIOVwEI29+xGkCzIwMVG/+dCveeytDTXFZZ
DxoslPjRtPdORavz8779r6pZ09HHohaQtaq/oYj/Gu1JEuJuglePhn40mwIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFLyUtE3CDg0ANvdkuATLUGVO4dVSMB8GA1UdIwQY
MBaAFN1T9j8ToMlSoHn0V4oQ7b9uOqWLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1ZQMlB4T2d5VktnZWZSWGloRHR2MjQ2cFlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xYzQ0NGQtMDU4ZC00NzVjLWFiZmYt
NWNkZmExMTdhZWM2LzEvdkpTMFRjSU9EUUEyOTJTNEJNdFFaVTdoMVZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8xYzQ0NGQtMDU4ZC00NzVjLWFiZmYtNWNkZmExMTdhZWM2
LzEvM1ZQMlB4T2d5VktnZWZSWGloRHR2MjQ2cFlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDARBAIAATALAwMAjcsDBATZ
leAwDwQCAAIwCQMHASoAG6AAAjANBgkqhkiG9w0BAQsFAAOCAQEAfma0yFFA6rbW
jbVVtVOYrv8W4gNDwivxHibtGlDqDv3BPn93/LNkv8a8Wy/Wa+pLssgj4fnXYMGa
OtcSeopMGc0/G7lv4tYPOECsAbUQZQfzKlnYP+B/AE3xZeoL9kwZaUfdvBncJAMG
4Rl+SiC3cW0NWL0OkFxFuHf2Bia7WyPH3SrzpBnmB243GbsYXZ2tEAxKlqkq5A26
nCAmIMr1ZUENXPph2rEWPcbLV/D6Fiahzg7qiMSNlk8qePPp8wx5mTLq32LomMms
w95Pqvbq2TTsgEmFGbo460Ap7EGDDaJOKJdIhYOoDzJxVA86NORU6oy0V5YdrbN9
6AYbIjxXZQ==
-----END CERTIFICATE-----
Generated at Fri May 10 06:01:02 2024 by rpki-client on console-ams.rpki-client.org