Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/vhHiSG8me1wG2hIEr58iOQV11cM.roa
File: vhHiSG8me1wG2hIEr58iOQV11cM.roa (raw, json)
Hash identifier: vp/f0t50XC7ldS5QsoqhD8EEup/UpCFwlMu7VxPoTFA=
Subject key identifier: BE:11:E2:48:6F:26:7B:5C:06:DA:12:04:AF:9F:22:39:05:75:D5:C3
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 0190475E82EF7D9361B06F0A546160AD4207
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/vhHiSG8me1wG2hIEr58iOQV11cM.roa
Signing time: Sun 23 Jun 2024 23:11:34 +0000
ROA not before: Sun 23 Jun 2024 23:11:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5650
IP address blocks: 95.82.40.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:47:5e:82:ef:7d:93:61:b0:6f:0a:54:61:60:ad:42:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jun 23 23:11:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be11e2486f267b5c06da1204af9f22390575d5c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:2b:8b:d4:af:f4:1e:0a:86:f3:e8:7d:7c:e9:
f3:17:b8:ff:91:c5:1d:06:09:f8:38:0d:29:cd:60:
38:c2:7c:3f:ec:a8:e1:f9:c3:3e:13:15:10:c4:a5:
12:3d:19:52:b5:90:f6:a5:04:1a:45:7b:fa:94:40:
6f:be:67:f6:37:1b:77:30:08:b0:b0:6d:ec:9b:f5:
82:35:91:a2:2b:89:17:13:d2:e9:4e:f4:1e:24:9c:
f9:30:34:d7:3d:61:6a:a2:5c:f7:bc:1a:ad:72:e6:
87:39:88:89:97:ba:fc:80:c3:20:a9:1e:7b:8d:e0:
49:0c:5b:b7:8b:38:4f:af:37:36:74:19:9d:6a:23:
60:0e:95:8c:54:3c:92:ea:e0:ff:10:21:9c:6d:00:
bb:92:1b:6c:05:6c:05:0d:81:99:56:ca:b6:ba:49:
bb:93:97:c4:b9:83:6e:34:53:a7:89:c3:dd:2b:84:
eb:cc:c2:62:59:36:02:08:1e:61:35:52:15:61:e3:
3f:77:68:df:bc:7d:3b:b4:82:e9:61:89:7f:a9:65:
73:f3:f5:a5:56:d9:c9:4f:77:35:5d:d9:09:e4:00:
19:5b:19:60:41:7a:d3:aa:c6:ce:20:4a:81:27:e3:
ab:b7:40:20:14:85:be:0e:c1:c9:fc:b9:f8:a9:45:
a1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:11:E2:48:6F:26:7B:5C:06:DA:12:04:AF:9F:22:39:05:75:D5:C3
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/vhHiSG8me1wG2hIEr58iOQV11cM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.82.40.0/21
Signature Algorithm: sha256WithRSAEncryption
31:a6:be:e5:c4:86:54:e6:9c:a9:69:af:b0:dc:17:c9:5f:ad:
c6:b8:44:d2:0c:15:8a:4a:5b:49:91:f5:29:dd:32:0e:79:9f:
6d:50:aa:cc:b6:b1:f1:1a:37:0c:57:ac:72:28:2b:2e:5c:e7:
55:3c:7f:f5:b6:4c:2d:ae:38:38:aa:3f:50:e4:a2:b0:b1:d2:
28:56:5c:bf:77:1b:03:62:f5:58:26:58:27:3d:47:21:c9:ca:
00:61:39:b6:1e:62:7c:b1:4d:b4:86:26:85:dc:11:26:71:ea:
f6:b5:17:95:e8:e1:46:9d:f3:19:21:97:ce:9c:1c:7e:96:2b:
ba:6a:81:ab:82:f1:54:7c:88:02:ee:f0:3d:dc:6c:a2:c6:5c:
57:ac:93:47:0a:e2:43:12:53:00:57:54:80:1f:af:04:6b:e1:
ba:84:09:d8:26:70:f5:ec:8a:3b:54:dc:46:fa:d3:db:4e:53:
e2:02:e5:95:79:ef:4d:96:13:26:f5:2e:5e:b6:d1:77:e2:cf:
51:ee:6f:99:b7:14:aa:c3:3a:17:5c:68:75:cd:d9:4c:e4:2f:
11:27:d6:ea:2a:e1:08:c6:14:90:2c:3e:aa:16:00:52:9a:b1:
e9:f0:86:54:f6:bd:26:34:87:f6:18:4a:de:5a:e1:a8:ea:95:
86:e9:8a:20
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZBHXoLvfZNhsG8KVGFgrUIHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNzVlNGU5NGI1Y2I3NDUxN2I3YjAxNTY4MDE1ZGE5ZTZl
ZWNkYjYwHhcNMjQwNjIzMjMxMTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTExZTI0ODZmMjY3YjVjMDZkYTEyMDRhZjlmMjIzOTA1NzVkNWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6yuL1K/0HgqG8+h9fOnzF7j/kcUd
Bgn4OA0pzWA4wnw/7Kjh+cM+ExUQxKUSPRlStZD2pQQaRXv6lEBvvmf2Nxt3MAiw
sG3sm/WCNZGiK4kXE9LpTvQeJJz5MDTXPWFqolz3vBqtcuaHOYiJl7r8gMMgqR57
jeBJDFu3izhPrzc2dBmdaiNgDpWMVDyS6uD/ECGcbQC7khtsBWwFDYGZVsq2ukm7
k5fEuYNuNFOnicPdK4TrzMJiWTYCCB5hNVIVYeM/d2jfvH07tILpYYl/qWVz8/Wl
VtnJT3c1XdkJ5AAZWxlgQXrTqsbOIEqBJ+Ort0AgFIW+DsHJ/Ln4qUWh1QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL4R4khvJntcBtoSBK+fIjkFddXDMB8GA1UdIwQY
MBaAFG915OlLXLdFF7ewFWgBXanm7s22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzIt
NjY0NTc3MjRjMmQzLzEvdmhIaVNHOG1lMXdHMmhJRXI1OGlPUVYxMWNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzItNjY0NTc3MjRjMmQz
LzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDX1IoMA0G
CSqGSIb3DQEBCwUAA4IBAQAxpr7lxIZU5pypaa+w3BfJX63GuETSDBWKSltJkfUp
3TIOeZ9tUKrMtrHxGjcMV6xyKCsuXOdVPH/1tkwtrjg4qj9Q5KKwsdIoVly/dxsD
YvVYJlgnPUchycoAYTm2HmJ8sU20hiaF3BEmcer2tReV6OFGnfMZIZfOnBx+liu6
aoGrgvFUfIgC7vA93GyixlxXrJNHCuJDElMAV1SAH68Ea+G6hAnYJnD17Io7VNxG
+tPbTlPiAuWVee9NlhMm9S5ettF34s9R7m+ZtxSqwzoXXGh1zdlM5C8RJ9bqKuEI
xhSQLD6qFgBSmrHp8IZU9r0mNIf2GEreWuGo6pWG6Yog
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:47 2024 by rpki-client on console-ams.rpki-client.org