Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/vMidwOuzvbz0l8De02vd7GDHgcQ.roa
File: vMidwOuzvbz0l8De02vd7GDHgcQ.roa (raw, json)
Hash identifier: 2MqBeyAa2lZlY+1++UOX3slylsFxn6ZnAE3minDVt6Y=
Subject key identifier: BC:C8:9D:C0:EB:B3:BD:BC:F4:97:C0:DE:D3:6B:DD:EC:60:C7:81:C4
Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Certificate serial: 018EE785232DF07A89241A856171CAF0DB2E
Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/vMidwOuzvbz0l8De02vd7GDHgcQ.roa
Signing time: Tue 16 Apr 2024 15:27:25 +0000
ROA not before: Tue 16 Apr 2024 15:27:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51765
IP address blocks: 109.120.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 07:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e7:85:23:2d:f0:7a:89:24:1a:85:61:71:ca:f0:db:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Validity
Not Before: Apr 16 15:27:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bcc89dc0ebb3bdbcf497c0ded36bddec60c781c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1d:ca:c4:55:30:3a:3f:b5:c0:27:96:8a:03:
c9:7d:00:af:46:73:e8:4e:cd:7a:c2:02:9c:32:5e:
94:38:2b:40:5a:5a:57:c3:8c:46:d2:da:c7:a1:c9:
78:c3:07:2f:c3:a1:21:98:2a:9f:ed:e0:d0:26:9f:
7b:f7:ee:39:e9:fe:08:56:ad:53:90:10:b7:c4:67:
ee:1c:c0:7f:d1:72:d3:a0:99:f6:3a:a2:c3:23:08:
d4:eb:78:55:18:16:26:31:77:59:8d:c1:52:71:d4:
b3:97:fa:c4:0b:40:43:97:22:11:42:76:47:49:bb:
93:ff:b0:cb:bf:bc:0e:2a:91:12:bf:ad:37:f2:5f:
20:65:af:20:a6:06:20:4c:77:cf:76:17:24:8d:ef:
fe:db:b9:03:46:94:0e:50:77:a5:47:d1:20:8d:73:
e2:4b:77:68:b8:6a:b6:b9:c8:15:29:8e:43:c4:fd:
a9:6e:dd:0f:02:56:17:0d:1c:f5:52:bb:db:51:ae:
c7:1e:63:1f:fe:f4:fa:a7:bc:b9:be:02:c1:d0:96:
b9:2b:2a:66:ac:15:0a:32:6f:a3:56:0c:b2:c3:7d:
70:f3:f9:86:34:61:87:24:de:d5:6c:5d:e2:a6:42:
32:82:53:be:06:41:98:72:ef:3e:e0:c7:61:0b:c3:
c2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C8:9D:C0:EB:B3:BD:BC:F4:97:C0:DE:D3:6B:DD:EC:60:C7:81:C4
X509v3 Authority Key Identifier:
keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/vMidwOuzvbz0l8De02vd7GDHgcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.120.157.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:70:ba:59:67:7c:4a:bc:50:a6:b2:f5:76:57:a9:5a:b5:34:
cc:32:d0:12:27:f6:12:d4:c7:65:71:9d:10:79:8f:9c:ca:0c:
d0:3f:01:90:3c:2f:f3:76:a4:d9:65:d6:93:b4:11:b0:db:b4:
e2:b2:3d:f9:f8:94:65:86:66:29:2f:85:ba:66:4b:60:c3:67:
b1:b2:30:b6:b3:10:5a:53:e1:c0:0f:0b:b4:c8:de:85:1c:92:
23:65:82:51:89:45:4c:26:07:0b:d2:ec:90:c8:9f:4b:29:a1:
60:2a:a0:3b:7e:1a:e7:d2:a5:21:15:94:c5:c8:8b:ac:70:5c:
2e:a5:32:6a:98:22:f5:ff:94:d6:41:f4:0a:97:60:59:61:db:
a7:fd:4f:59:d5:ec:98:30:1e:be:2d:e6:2a:92:1b:20:69:e0:
5b:87:d2:17:16:b1:28:03:f5:e2:49:aa:d0:8b:f9:d0:4d:52:
f6:4d:9d:41:60:ca:fb:8c:9e:11:aa:cf:cc:e1:6f:5d:6a:3c:
0d:6d:07:9b:66:fd:2b:d7:8f:7c:02:07:60:df:78:7b:f9:89:
31:5b:f8:09:bb:d6:f3:fd:64:1b:8f:0c:18:17:8b:2b:04:7a:
94:1e:38:71:11:ce:6c:d5:e8:50:47:57:9c:ca:0d:41:6d:09:
f1:94:be:98
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY7nhSMt8HqJJBqFYXHK8NsuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMmMyMTlmM2MyOTdiNzc1ODgwYzNiNjUxYTIwMDNmOWJl
NmRlNWUwHhcNMjQwNDE2MTUyNzI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiY2M4OWRjMGViYjNiZGJjZjQ5N2MwZGVkMzZiZGRlYzYwYzc4MWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyx3KxFUwOj+1wCeWigPJfQCvRnPo
Ts16wgKcMl6UOCtAWlpXw4xG0trHocl4wwcvw6EhmCqf7eDQJp979+456f4IVq1T
kBC3xGfuHMB/0XLToJn2OqLDIwjU63hVGBYmMXdZjcFScdSzl/rEC0BDlyIRQnZH
SbuT/7DLv7wOKpESv6038l8gZa8gpgYgTHfPdhckje/+27kDRpQOUHelR9EgjXPi
S3douGq2ucgVKY5DxP2pbt0PAlYXDRz1UrvbUa7HHmMf/vT6p7y5vgLB0Ja5Kypm
rBUKMm+jVgyyw31w8/mGNGGHJN7VbF3ipkIyglO+BkGYcu8+4MdhC8PC4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLzIncDrs7289JfA3tNr3exgx4HEMB8GA1UdIwQY
MBaAFBssIZ88KXt3WIDDtlGiAD+b5t5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEt
OTJjODFmMjJlNzEyLzEvdk1pZHdPdXp2YnowbDhEZTAydmQ3R0RIZ2NRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEtOTJjODFmMjJlNzEy
LzEvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXidMA0G
CSqGSIb3DQEBCwUAA4IBAQAqcLpZZ3xKvFCmsvV2V6latTTMMtASJ/YS1MdlcZ0Q
eY+cygzQPwGQPC/zdqTZZdaTtBGw27Tisj35+JRlhmYpL4W6Zktgw2exsjC2sxBa
U+HADwu0yN6FHJIjZYJRiUVMJgcL0uyQyJ9LKaFgKqA7fhrn0qUhFZTFyIuscFwu
pTJqmCL1/5TWQfQKl2BZYdun/U9Z1eyYMB6+LeYqkhsgaeBbh9IXFrEoA/XiSarQ
i/nQTVL2TZ1BYMr7jJ4Rqs/M4W9dajwNbQebZv0r1498Agdg33h7+YkxW/gJu9bz
/WQbjwwYF4srBHqUHjhxEc5s1ehQR1ecyg1BbQnxlL6Y
-----END CERTIFICATE-----
Generated at Fri May 17 10:35:43 2024 by rpki-client on console-fra.rpki-client.org