Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/vAqUQsEL7sM1uownQZoir7MOakM.roa
File: vAqUQsEL7sM1uownQZoir7MOakM.roa (raw, json)
Hash identifier: 1Xe8rs2e5k/OluMdtcQZxYNF+LwysQke5jjCAGm3hZQ=
Subject key identifier: BC:0A:94:42:C1:0B:EE:C3:35:BA:8C:27:41:9A:22:AF:B3:0E:6A:43
Certificate issuer: /CN=a333114cbfc6bf668371c5687ee98a442fd8ea36
Certificate serial: 018CC26CFFC51AC8E8ED02A00E35133FEA0C
Authority key identifier: A3:33:11:4C:BF:C6:BF:66:83:71:C5:68:7E:E9:8A:44:2F:D8:EA:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ozMRTL_Gv2aDccVofumKRC_Y6jY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/vAqUQsEL7sM1uownQZoir7MOakM.roa
Signing time: Mon 01 Jan 2024 00:29:32 +0000
ROA not before: Mon 01 Jan 2024 00:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35228
IP address blocks: 93.97.12.0/22 maxlen: 24
87.194.202.0/24 maxlen: 24
87.194.216.0/23 maxlen: 24
93.97.44.0/22 maxlen: 24
87.194.0.0/16 maxlen: 24
93.97.48.0/22 maxlen: 24
93.97.60.0/22 maxlen: 24
93.97.176.0/22 maxlen: 24
93.97.180.0/22 maxlen: 24
93.97.212.0/22 maxlen: 24
93.97.0.0/22 maxlen: 24
93.97.216.0/22 maxlen: 24
93.97.0.0/16 maxlen: 24
93.97.8.0/22 maxlen: 24
87.194.102.0/23 maxlen: 24
87.194.100.0/23 maxlen: 24
87.194.118.0/24 maxlen: 24
87.194.116.0/24 maxlen: 24
87.194.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ozMRTL_Gv2aDccVofumKRC_Y6jY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:ff:c5:1a:c8:e8:ed:02:a0:0e:35:13:3f:ea:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a333114cbfc6bf668371c5687ee98a442fd8ea36
Validity
Not Before: Jan 1 00:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc0a9442c10beec335ba8c27419a22afb30e6a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7d:9f:8a:be:5d:71:03:6e:a9:e6:22:59:e7:
16:7c:9d:9c:c2:1b:4a:de:c0:97:5f:8c:6d:77:31:
5f:8a:f0:24:ed:d6:b4:20:03:a6:46:e8:93:6a:36:
7f:a9:f6:22:10:6d:6f:4c:53:cb:63:b4:90:67:c8:
27:21:c9:8b:d9:13:33:85:95:9e:4b:1c:3c:7b:63:
3f:3f:b6:ee:45:08:53:8c:a5:65:ef:f6:b1:05:2b:
74:1e:59:46:77:8b:ad:e2:cf:2b:ca:3c:e9:a6:6f:
4f:66:c1:1e:22:8e:c8:f2:1c:e4:93:d4:ba:2d:30:
15:cb:9b:0b:bc:e7:3f:a5:39:e9:15:47:c7:f7:94:
c9:74:ba:d0:db:52:d2:c6:71:7f:09:76:b0:44:74:
8a:57:09:f4:93:54:c3:53:a0:76:78:42:08:eb:c7:
5e:fe:9d:1a:d7:98:cf:7f:bd:d4:28:7c:fa:0e:3d:
62:6b:a0:25:e4:18:94:43:e7:af:c9:9b:5f:cc:73:
94:06:85:2f:6a:cd:03:ae:68:43:43:4a:55:92:af:
28:c3:f7:a4:3c:62:f9:de:1e:95:14:62:c5:e6:70:
b3:02:24:9b:6f:f6:9e:63:55:b2:b1:1d:4d:66:73:
64:66:17:6d:25:02:73:2a:07:a9:97:4b:dc:a4:69:
91:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:0A:94:42:C1:0B:EE:C3:35:BA:8C:27:41:9A:22:AF:B3:0E:6A:43
X509v3 Authority Key Identifier:
keyid:A3:33:11:4C:BF:C6:BF:66:83:71:C5:68:7E:E9:8A:44:2F:D8:EA:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ozMRTL_Gv2aDccVofumKRC_Y6jY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/vAqUQsEL7sM1uownQZoir7MOakM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.194.0.0/16
93.97.0.0/16
Signature Algorithm: sha256WithRSAEncryption
60:ad:42:bd:80:ca:94:9f:29:30:ef:83:b8:5b:ba:16:47:10:
a6:07:77:9d:d9:6c:49:47:16:65:3e:ad:75:45:de:d6:02:83:
bf:cd:86:e6:eb:73:5c:2f:c8:23:bc:55:37:23:eb:1c:73:6a:
49:ca:95:9b:01:d9:80:34:d3:29:d6:36:ae:30:19:f0:96:5c:
07:89:a2:be:4d:0a:c8:c3:06:47:c5:81:5d:c1:26:75:74:ee:
da:30:ec:96:1f:32:1e:93:6a:f9:00:92:dd:86:b7:ef:4e:05:
f7:b1:78:30:34:ca:93:b8:b2:d2:c5:09:e4:be:b0:0b:10:92:
c5:39:90:79:ef:ff:2c:c6:b9:3e:0b:5c:24:8d:d5:6c:12:d6:
76:ec:86:92:06:d3:0f:e2:56:45:19:a1:b9:9b:78:d5:a4:1d:
58:5c:72:36:ee:b5:72:fd:43:b3:7a:b5:c7:50:b5:d8:d3:ba:
d0:a6:a5:a0:66:95:cb:a5:e8:f0:53:ae:57:5b:0d:f0:99:67:
75:6e:e3:22:a9:91:2b:e9:9b:03:6b:77:5e:2f:6d:89:dc:1b:
8f:f2:05:0d:ce:ce:fe:78:88:ea:32:73:6d:63:ce:bd:b1:90:
e4:d6:f0:27:5b:fc:56:51:e1:1d:19:99:62:d8:de:b3:5b:f6:
e8:56:3b:ae
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgISAYzCbP/FGsjo7QKgDjUTP+oMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzMzMxMTRjYmZjNmJmNjY4MzcxYzU2ODdlZTk4YTQ0MmZk
OGVhMzYwHhcNMjQwMTAxMDAyOTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzBhOTQ0MmMxMGJlZWMzMzViYThjMjc0MTlhMjJhZmIzMGU2YTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkX2fir5dcQNuqeYiWecWfJ2cwhtK
3sCXX4xtdzFfivAk7da0IAOmRuiTajZ/qfYiEG1vTFPLY7SQZ8gnIcmL2RMzhZWe
Sxw8e2M/P7buRQhTjKVl7/axBSt0HllGd4ut4s8ryjzppm9PZsEeIo7I8hzkk9S6
LTAVy5sLvOc/pTnpFUfH95TJdLrQ21LSxnF/CXawRHSKVwn0k1TDU6B2eEII68de
/p0a15jPf73UKHz6Dj1ia6Al5BiUQ+evyZtfzHOUBoUvas0DrmhDQ0pVkq8ow/ek
PGL53h6VFGLF5nCzAiSbb/aeY1WysR1NZnNkZhdtJQJzKgepl0vcpGmRtQIDAQAB
o4ICDTCCAgkwHQYDVR0OBBYEFLwKlELBC+7DNbqMJ0GaIq+zDmpDMB8GA1UdIwQY
MBaAFKMzEUy/xr9mg3HFaH7pikQv2Oo2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3pNUlRMX0d2MmFEY2NWb2Z1bUtSQ19ZNmpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC81MzA2MjUtNGU0Ni00NTYzLWFlMmMt
Y2Q0OTI2NGVhZjBiLzEvdkFxVVFzRUw3c00xdW93blFab2lyN01PYWtNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC81MzA2MjUtNGU0Ni00NTYzLWFlMmMtY2Q0OTI2NGVhZjBi
LzEvb3pNUlRMX0d2MmFEY2NWb2Z1bUtSQ19ZNmpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMAV8IDAwBd
YTANBgkqhkiG9w0BAQsFAAOCAQEAYK1CvYDKlJ8pMO+DuFu6FkcQpgd3ndlsSUcW
ZT6tdUXe1gKDv82G5utzXC/II7xVNyPrHHNqScqVmwHZgDTTKdY2rjAZ8JZcB4mi
vk0KyMMGR8WBXcEmdXTu2jDslh8yHpNq+QCS3Ya3704F97F4MDTKk7iy0sUJ5L6w
CxCSxTmQee//LMa5PgtcJI3VbBLWduyGkgbTD+JWRRmhuZt41aQdWFxyNu61cv1D
s3q1x1C12NO60KaloGaVy6Xo8FOuV1sN8JlndW7jIqmRK+mbA2t3Xi9tidwbj/IF
Dc7O/niI6jJzbWPOvbGQ5NbwJ1v8VlHhHRmZYtjes1v26FY7rg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:42:07 2024 by rpki-client on console-ams.rpki-client.org