Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/VvIjLBJSoHody6XL9uDtrBpuSCE.roa
File: VvIjLBJSoHody6XL9uDtrBpuSCE.roa (raw, json)
Hash identifier: veRndXGQmSV1KW26HEHex+Z2ZYzEfdgiR7mezQYVAys=
Subject key identifier: 56:F2:23:2C:12:52:A0:7A:1D:CB:A5:CB:F6:E0:ED:AC:1A:6E:48:21
Certificate issuer: /CN=0d4ee193b301665b56f6780f225fd44d144093af
Certificate serial: 018CCA2B05509F5AF2A019E8AEA64905E3E3
Authority key identifier: 0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/VvIjLBJSoHody6XL9uDtrBpuSCE.roa
Signing time: Tue 02 Jan 2024 12:34:26 +0000
ROA not before: Tue 02 Jan 2024 12:34:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207969
IP address blocks: 193.236.96.0/24 maxlen: 24
2001:694::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 22:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:05:50:9f:5a:f2:a0:19:e8:ae:a6:49:05:e3:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4ee193b301665b56f6780f225fd44d144093af
Validity
Not Before: Jan 2 12:34:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56f2232c1252a07a1dcba5cbf6e0edac1a6e4821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d1:aa:4d:21:6f:e4:65:c5:db:bd:8a:3d:ac:
ba:32:7f:47:37:4c:ee:c4:06:12:48:e2:f5:64:54:
c2:04:38:25:e7:a6:27:cb:b0:d4:75:5b:65:07:d0:
56:8d:1c:99:24:5c:47:54:b8:c3:42:46:58:9e:ee:
47:a9:8f:11:02:27:92:4e:61:42:e8:d6:a5:42:6e:
66:68:ab:b3:d9:0b:77:be:7a:3f:dc:24:dc:74:1a:
9a:99:15:5f:dd:ea:2b:c6:dd:35:27:99:ca:6e:a5:
f2:a5:cf:ce:38:ea:33:f4:05:5b:24:75:1f:13:2f:
a1:41:18:20:d5:d6:bf:3e:ee:7d:8c:a3:d1:6e:8d:
5d:cd:85:93:88:b4:b9:f0:d9:5e:4d:89:95:f3:e3:
93:86:18:89:f2:27:ef:11:2a:da:51:bf:3e:8b:a2:
19:22:84:e1:9b:a7:77:df:91:1d:c0:68:cc:78:0f:
4a:29:ac:11:b5:ef:d5:7d:6a:92:08:ff:5a:2e:c1:
32:81:21:21:17:74:94:4c:49:2d:83:cc:ba:f2:c8:
da:98:17:0a:9f:be:84:f1:05:6c:73:16:a5:4b:54:
4b:e3:c3:1f:99:48:70:b5:7b:1e:35:91:4d:fc:29:
75:e2:3f:c9:6d:ec:07:10:30:5f:38:b7:37:c5:a3:
18:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F2:23:2C:12:52:A0:7A:1D:CB:A5:CB:F6:E0:ED:AC:1A:6E:48:21
X509v3 Authority Key Identifier:
keyid:0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/VvIjLBJSoHody6XL9uDtrBpuSCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.236.96.0/24
IPv6:
2001:694::/48
Signature Algorithm: sha256WithRSAEncryption
31:17:7b:ee:63:99:48:4b:95:dd:75:9f:c1:e4:11:01:d5:8b:
ec:f3:df:8d:3a:8f:91:31:8a:3f:af:3c:69:84:0c:48:9d:ae:
85:f0:66:1a:16:10:f5:dc:43:c2:56:f2:09:0c:4a:92:06:da:
9d:94:f2:e6:c9:3d:99:34:95:38:ec:ff:9e:c3:b9:9c:01:c1:
94:d4:99:18:af:53:96:0f:a5:92:d0:e1:62:d4:37:cf:81:03:
2e:21:94:22:17:b0:6a:d8:b0:85:94:34:0d:69:46:75:f8:1e:
dc:79:8d:5c:94:d6:39:ae:8b:5d:ec:d4:21:d3:ac:f6:ea:d6:
06:9a:db:0e:0d:14:6e:2e:d5:e4:a7:11:9b:67:a9:b5:a3:93:
95:2c:67:de:03:e2:f8:f9:4f:37:22:39:86:36:60:54:b0:59:
5a:30:3a:13:45:04:fd:a2:21:4f:80:8b:00:a6:ad:67:bf:6e:
1c:a2:42:64:bd:44:e7:31:fb:4a:3d:af:15:cd:30:6f:c0:d3:
d6:4d:1d:57:de:74:63:27:65:52:42:38:c7:1b:64:21:5c:c5:
2f:0b:9e:b6:f7:f2:7a:83:f3:f3:13:3a:67:f5:96:1d:1e:08:
07:62:6a:64:41:3a:4c:72:b1:a0:f0:85:4c:43:c8:be:7a:58:
80:5a:90:a1
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzKKwVQn1ryoBnorqZJBePjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNGVlMTkzYjMwMTY2NWI1NmY2NzgwZjIyNWZkNDRkMTQ0
MDkzYWYwHhcNMjQwMTAyMTIzNDI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NmYyMjMyYzEyNTJhMDdhMWRjYmE1Y2JmNmUwZWRhYzFhNmU0ODIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dGqTSFv5GXF272KPay6Mn9HN0zu
xAYSSOL1ZFTCBDgl56Yny7DUdVtlB9BWjRyZJFxHVLjDQkZYnu5HqY8RAieSTmFC
6NalQm5maKuz2Qt3vno/3CTcdBqamRVf3eorxt01J5nKbqXypc/OOOoz9AVbJHUf
Ey+hQRgg1da/Pu59jKPRbo1dzYWTiLS58NleTYmV8+OThhiJ8ifvESraUb8+i6IZ
IoThm6d335EdwGjMeA9KKawRte/VfWqSCP9aLsEygSEhF3SUTEktg8y68sjamBcK
n76E8QVscxalS1RL48MfmUhwtXseNZFN/Cl14j/JbewHEDBfOLc3xaMYnQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFbyIywSUqB6Hculy/bg7awabkghMB8GA1UdIwQY
MBaAFA1O4ZOzAWZbVvZ4DyJf1E0UQJOvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFU3aGs3TUJabHRXOW5nUElsX1VUUlJBazY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wOTcxMTEtMzA5OC00Y2Y3LWFjMGYt
OWY3ZTBmODYyZjFlLzEvVnZJakxCSlNvSG9keTZYTDl1RHRyQnB1U0NFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8wOTcxMTEtMzA5OC00Y2Y3LWFjMGYtOWY3ZTBmODYyZjFl
LzEvRFU3aGs3TUJabHRXOW5nUElsX1VUUlJBazY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwexgMA8E
AgACMAkDBwAgAQaUAAAwDQYJKoZIhvcNAQELBQADggEBADEXe+5jmUhLld11n8Hk
EQHVi+zz3406j5Exij+vPGmEDEidroXwZhoWEPXcQ8JW8gkMSpIG2p2U8ubJPZk0
lTjs/57DuZwBwZTUmRivU5YPpZLQ4WLUN8+BAy4hlCIXsGrYsIWUNA1pRnX4Htx5
jVyU1jmui13s1CHTrPbq1gaa2w4NFG4u1eSnEZtnqbWjk5UsZ94D4vj5TzciOYY2
YFSwWVowOhNFBP2iIU+AiwCmrWe/bhyiQmS9ROcx+0o9rxXNMG/A09ZNHVfedGMn
ZVJCOMcbZCFcxS8Lnrb38nqD8/MTOmf1lh0eCAdiamRBOkxysaDwhUxDyL56WIBa
kKE=
-----END CERTIFICATE-----
Generated at Wed May 29 01:08:54 2024 by rpki-client on console-fra.rpki-client.org