Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/vERC82ycom8_DPWGZU3g78Nyutg.roa
File: vERC82ycom8_DPWGZU3g78Nyutg.roa (raw, json)
Hash identifier: kLqQ6Zdw2AJBlowYph7nntMBhqHkIwHH/HmBpy8vk8k=
Subject key identifier: BC:44:42:F3:6C:9C:A2:6F:3F:0C:F5:86:65:4D:E0:EF:C3:72:BA:D8
Certificate issuer: /CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Certificate serial: 01920ED3B6A2675E008938DEA18C6B704337
Authority key identifier: 96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/vERC82ycom8_DPWGZU3g78Nyutg.roa
Signing time: Fri 20 Sep 2024 09:46:48 +0000
ROA not before: Fri 20 Sep 2024 09:46:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 5.42.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 08:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:0e:d3:b6:a2:67:5e:00:89:38:de:a1:8c:6b:70:43:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Validity
Not Before: Sep 20 09:46:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc4442f36c9ca26f3f0cf586654de0efc372bad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7a:d4:1c:a7:ee:9f:58:70:b2:a9:4b:2d:d0:
2f:23:18:ba:77:db:07:1c:d8:8b:7d:3f:96:ed:e7:
f8:b2:b0:1e:57:01:a4:18:be:ce:a0:84:d0:6f:99:
61:b9:b0:cb:fb:17:84:1c:af:e4:84:0c:91:dc:51:
7a:3c:eb:ed:d2:7f:17:00:68:12:1a:d9:f1:9c:b3:
ce:18:fa:36:cd:eb:ae:43:28:f0:37:b0:ae:2e:10:
c8:4f:58:a2:0b:65:18:22:a5:0d:6a:c8:2b:19:8f:
00:66:35:48:97:d3:fd:95:79:36:c8:37:77:a1:84:
63:75:ba:71:00:13:ec:92:55:d9:4d:7a:78:32:5e:
b2:37:bf:80:d8:4f:ae:3b:6b:11:df:e8:f7:25:a7:
fb:3e:5c:b0:d4:0e:45:7d:20:b7:77:53:6e:33:bc:
47:4a:fa:95:f2:a5:31:31:f8:ad:cf:0e:f3:7c:66:
f5:53:09:62:64:40:14:64:13:05:b2:73:39:8a:b3:
9f:2e:89:10:08:f5:f0:ed:bc:23:f4:4d:87:3f:6e:
ad:b7:22:25:fa:f3:a6:3a:ba:cb:bd:82:c3:14:29:
c0:4e:46:94:f3:14:12:20:77:f8:2a:35:c9:58:75:
4a:3c:6e:b0:a0:f2:03:05:7e:58:5c:57:1f:7e:ac:
89:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:44:42:F3:6C:9C:A2:6F:3F:0C:F5:86:65:4D:E0:EF:C3:72:BA:D8
X509v3 Authority Key Identifier:
keyid:96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/vERC82ycom8_DPWGZU3g78Nyutg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.67.0/24
Signature Algorithm: sha256WithRSAEncryption
e5:45:11:a6:68:ca:0f:be:40:ca:16:98:3a:e2:20:85:0f:d0:
9e:35:17:90:0b:90:71:c3:b2:f4:75:f3:b8:ce:ef:67:d8:bb:
84:d3:6c:38:a3:70:af:2b:d9:dc:4c:cd:30:5a:ab:26:61:78:
04:21:1c:67:bd:23:65:c2:9d:a5:e6:65:4c:7e:26:8d:cc:71:
ae:6a:e2:70:a5:47:cb:05:bb:a8:34:61:70:42:91:e3:bd:2f:
b5:d3:0b:ae:75:94:87:7e:0c:ad:cf:da:61:00:44:5e:86:10:
a9:77:a8:b0:4f:fb:d2:19:bf:88:ba:f3:da:72:58:c5:8f:a9:
4f:8b:fe:20:10:e1:a6:19:eb:1c:52:1a:f7:5c:ba:ed:cf:c4:
86:d2:8e:84:ab:b8:ea:31:d9:55:b2:d7:2f:67:09:6a:c4:82:
ee:f6:04:a4:b8:50:ea:10:4f:a8:7a:76:6c:f8:1b:85:a4:e2:
c7:b6:fd:7e:d2:c6:12:33:7d:22:a1:3d:ae:9c:48:2b:79:0a:
bb:11:31:b7:70:b4:fd:be:07:33:9c:c7:af:0a:33:8b:d2:2a:
09:05:10:f0:25:7a:87:37:3d:e7:b8:2b:21:a1:62:a1:5e:34:
05:62:43:30:9d:bd:98:ac:fc:8f:06:63:4b:a2:9f:21:f6:95:
03:08:93:af
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZIO07aiZ14AiTjeoYxrcEM3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MDYyZjVkZGIxOGY5NmQ3ODQ5MmIzNTM4ZDc3NDVjYzQ3
MTRhMjYwHhcNMjQwOTIwMDk0NjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzQ0NDJmMzZjOWNhMjZmM2YwY2Y1ODY2NTRkZTBlZmMzNzJiYWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XrUHKfun1hwsqlLLdAvIxi6d9sH
HNiLfT+W7ef4srAeVwGkGL7OoITQb5lhubDL+xeEHK/khAyR3FF6POvt0n8XAGgS
GtnxnLPOGPo2zeuuQyjwN7CuLhDIT1iiC2UYIqUNasgrGY8AZjVIl9P9lXk2yDd3
oYRjdbpxABPsklXZTXp4Ml6yN7+A2E+uO2sR3+j3Jaf7Plyw1A5FfSC3d1NuM7xH
SvqV8qUxMfitzw7zfGb1UwliZEAUZBMFsnM5irOfLokQCPXw7bwj9E2HP26ttyIl
+vOmOrrLvYLDFCnATkaU8xQSIHf4KjXJWHVKPG6woPIDBX5YXFcffqyJ2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLxEQvNsnKJvPwz1hmVN4O/DcrrYMB8GA1UdIwQY
MBaAFJYGL13bGPlteEkrNTjXdFzEcUomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGdZdlhkc1ktVzE0U1NzMU9OZDBYTVJ4U2lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9lMDU5NzUtZGE4ZS00NjBiLTllYmIt
M2ZjYjVmM2YzYzU5LzEvdkVSQzgyeWNvbThfRFBXR1pVM2c3OE55dXRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9lMDU5NzUtZGE4ZS00NjBiLTllYmItM2ZjYjVmM2YzYzU5
LzEvbGdZdlhkc1ktVzE0U1NzMU9OZDBYTVJ4U2lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABSpDMA0G
CSqGSIb3DQEBCwUAA4IBAQDlRRGmaMoPvkDKFpg64iCFD9CeNReQC5Bxw7L0dfO4
zu9n2LuE02w4o3CvK9ncTM0wWqsmYXgEIRxnvSNlwp2l5mVMfiaNzHGuauJwpUfL
BbuoNGFwQpHjvS+10wuudZSHfgytz9phAERehhCpd6iwT/vSGb+IuvPacljFj6lP
i/4gEOGmGescUhr3XLrtz8SG0o6Eq7jqMdlVstcvZwlqxILu9gSkuFDqEE+oenZs
+BuFpOLHtv1+0sYSM30ioT2unEgreQq7ETG3cLT9vgcznMevCjOL0ioJBRDwJXqH
Nz3nuCshoWKhXjQFYkMwnb2YrPyPBmNLop8h9pUDCJOv
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:43:19 2024 by rpki-client on console-fra.rpki-client.org