Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/viNX-WOKe3YtaIQroOMTXXaf5uc.roa
File: viNX-WOKe3YtaIQroOMTXXaf5uc.roa (raw, json)
Hash identifier: ZSP/GncSw5fAKPNficO8G3O7T/THzJmiSiiivLmMtQY=
Subject key identifier: BE:23:57:F9:63:8A:7B:76:2D:68:84:2B:A0:E3:13:5D:76:9F:E6:E7
Certificate issuer: /CN=61a5d217759e861696fc77ed9aa63b94edb3be7d
Certificate serial: 018CC64B1CB94F99DAD108FE851A2C03BE89
Authority key identifier: 61:A5:D2:17:75:9E:86:16:96:FC:77:ED:9A:A6:3B:94:ED:B3:BE:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/viNX-WOKe3YtaIQroOMTXXaf5uc.roa
Signing time: Mon 01 Jan 2024 18:31:00 +0000
ROA not before: Mon 01 Jan 2024 18:31:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60632
IP address blocks: 185.27.248.0/24 maxlen: 24
185.27.251.0/24 maxlen: 24
185.27.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 19:03:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:1c:b9:4f:99:da:d1:08:fe:85:1a:2c:03:be:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61a5d217759e861696fc77ed9aa63b94edb3be7d
Validity
Not Before: Jan 1 18:31:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be2357f9638a7b762d68842ba0e3135d769fe6e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:eb:e7:a1:37:d6:14:f4:23:e0:6b:e4:1a:42:
4e:14:7a:25:59:d9:b8:d6:92:61:5c:23:6a:e0:cd:
b6:04:10:5c:a2:ef:a6:4d:b9:4a:d2:8d:4f:80:8c:
b1:96:85:ee:e9:02:88:1e:e8:a2:64:58:17:c0:5c:
b5:ea:04:67:4c:a7:5b:dc:45:da:0e:d6:f0:89:90:
46:21:c4:ad:d6:92:63:80:62:82:6b:57:f0:23:42:
43:78:b8:30:1c:6c:25:78:ef:f7:9e:86:60:44:3f:
98:64:6c:d4:d3:72:40:43:e6:55:30:1b:15:e4:79:
d7:ce:0e:de:d7:95:cc:82:6a:71:4a:0d:96:15:cc:
28:d1:fa:49:d1:4e:3c:d2:c6:fd:55:8b:db:d4:06:
26:56:b8:7e:a1:fa:41:c1:bc:b8:b4:b7:94:99:80:
de:9b:95:dc:56:ed:b5:7c:fc:97:62:ed:e5:75:a1:
e5:bd:7f:1f:13:10:df:5e:33:33:ae:a5:ae:51:f3:
82:f7:5a:d2:fe:63:3d:19:7d:7b:a0:7d:5e:7c:90:
43:7e:8f:a8:3e:a7:2c:7c:6d:b4:fc:32:94:36:1c:
86:44:ad:18:ae:82:7d:91:06:6b:a6:f0:93:4a:8d:
9a:cb:4f:59:96:c3:c6:12:6e:2b:b9:2a:fd:74:ed:
ba:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:23:57:F9:63:8A:7B:76:2D:68:84:2B:A0:E3:13:5D:76:9F:E6:E7
X509v3 Authority Key Identifier:
keyid:61:A5:D2:17:75:9E:86:16:96:FC:77:ED:9A:A6:3B:94:ED:B3:BE:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/viNX-WOKe3YtaIQroOMTXXaf5uc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.27.248.0/24
185.27.250.0/23
Signature Algorithm: sha256WithRSAEncryption
38:a3:4e:d4:52:ee:77:1c:21:80:61:48:bc:a0:f8:d8:73:8c:
58:e9:d8:0c:92:35:32:a4:27:9c:ad:cb:17:96:1e:fa:bd:13:
8a:b8:b5:6d:45:5e:b7:c8:b4:d7:4e:7b:7a:61:c8:fb:91:5d:
ad:41:6e:01:ff:d9:c3:fe:31:94:af:87:37:d1:ba:8d:77:c6:
31:6c:a2:70:6e:6b:87:e7:15:23:b4:0c:6e:5d:be:f5:92:18:
0f:cc:4e:16:75:02:84:88:3f:8e:fa:06:27:34:4d:04:3a:e8:
d2:e7:22:d2:fb:07:73:e6:08:b4:53:4a:9e:41:2a:cb:88:51:
cd:18:11:a5:df:f9:8a:f7:28:60:37:20:c5:86:b5:76:bf:8e:
79:d6:a2:39:45:9b:d8:3d:79:ee:ee:7e:98:d5:af:ab:dd:94:
2a:88:ff:2c:54:57:4d:b7:8c:76:25:69:04:e8:3d:7c:f5:ec:
e7:04:5e:44:af:9b:1d:33:fa:64:77:75:9a:87:10:9c:3a:3b:
0b:a0:5c:40:7c:93:8f:59:1e:23:4a:7b:bd:c4:5a:32:c8:36:
7d:38:e4:2c:42:03:0f:0c:0b:38:31:0c:b7:c6:58:12:16:0a:
27:29:6b:2c:e3:b3:27:42:4a:89:b3:47:db:cc:ce:be:90:73:
6a:14:16:86
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzGSxy5T5na0Qj+hRosA76JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxYTVkMjE3NzU5ZTg2MTY5NmZjNzdlZDlhYTYzYjk0ZWRi
M2JlN2QwHhcNMjQwMTAxMTgzMTAwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTIzNTdmOTYzOGE3Yjc2MmQ2ODg0MmJhMGUzMTM1ZDc2OWZlNmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyevnoTfWFPQj4GvkGkJOFHolWdm4
1pJhXCNq4M22BBBcou+mTblK0o1PgIyxloXu6QKIHuiiZFgXwFy16gRnTKdb3EXa
DtbwiZBGIcSt1pJjgGKCa1fwI0JDeLgwHGwleO/3noZgRD+YZGzU03JAQ+ZVMBsV
5HnXzg7e15XMgmpxSg2WFcwo0fpJ0U480sb9VYvb1AYmVrh+ofpBwby4tLeUmYDe
m5XcVu21fPyXYu3ldaHlvX8fExDfXjMzrqWuUfOC91rS/mM9GX17oH1efJBDfo+o
PqcsfG20/DKUNhyGRK0YroJ9kQZrpvCTSo2ay09ZlsPGEm4ruSr9dO26ywIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFL4jV/ljint2LWiEK6DjE112n+bnMB8GA1UdIwQY
MBaAFGGl0hd1noYWlvx37ZqmO5Tts759MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWFYU0YzV2VoaGFXX0hmdG1xWTdsTzJ6dm4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS83MmY2Y2YtOWJkNC00NjdhLWE5MmEt
NWE2NGE1ZmM4YTY0LzEvdmlOWC1XT0tlM1l0YUlRcm9PTVRYWGFmNXVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS83MmY2Y2YtOWJkNC00NjdhLWE5MmEtNWE2NGE1ZmM4YTY0
LzEvWWFYU0YzV2VoaGFXX0hmdG1xWTdsTzJ6dm4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuRv4AwQB
uRv6MA0GCSqGSIb3DQEBCwUAA4IBAQA4o07UUu53HCGAYUi8oPjYc4xY6dgMkjUy
pCecrcsXlh76vROKuLVtRV63yLTXTnt6Ycj7kV2tQW4B/9nD/jGUr4c30bqNd8Yx
bKJwbmuH5xUjtAxuXb71khgPzE4WdQKEiD+O+gYnNE0EOujS5yLS+wdz5gi0U0qe
QSrLiFHNGBGl3/mK9yhgNyDFhrV2v4551qI5RZvYPXnu7n6Y1a+r3ZQqiP8sVFdN
t4x2JWkE6D189eznBF5Er5sdM/pkd3WahxCcOjsLoFxAfJOPWR4jSnu9xFoyyDZ9
OOQsQgMPDAs4MQy3xlgSFgonKWss47MnQkqJs0fbzM6+kHNqFBaG
-----END CERTIFICATE-----
Generated at Sun Jun 2 23:21:42 2024 by rpki-client on console-ams.rpki-client.org