Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/vF-S2QlgKkZZhL8Ia915JewO3Nc.roa
File: vF-S2QlgKkZZhL8Ia915JewO3Nc.roa (raw, json)
Hash identifier: k/AogYI6wVHHElv+v9LaQ8kCfXm1FilsYOLx57gSr+I=
Subject key identifier: BC:5F:92:D9:09:60:2A:46:59:84:BF:08:6B:DD:79:25:EC:0E:DC:D7
Certificate issuer: /CN=ca19abeb8ab9e63890a223c2fd6ba568498bdbba
Certificate serial: 018CC3B6B033C1915AC888CA050420F92047
Authority key identifier: CA:19:AB:EB:8A:B9:E6:38:90:A2:23:C2:FD:6B:A5:68:49:8B:DB:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhmr64q55jiQoiPC_WulaEmL27o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/vF-S2QlgKkZZhL8Ia915JewO3Nc.roa
Signing time: Mon 01 Jan 2024 06:29:38 +0000
ROA not before: Mon 01 Jan 2024 06:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48918
IP address blocks: 94.186.128.0/17 maxlen: 24
2a02:c98::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.mft
rsync://rpki.ripe.net/repository/DEFAULT/yhmr64q55jiQoiPC_WulaEmL27o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:b0:33:c1:91:5a:c8:88:ca:05:04:20:f9:20:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca19abeb8ab9e63890a223c2fd6ba568498bdbba
Validity
Not Before: Jan 1 06:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc5f92d909602a465984bf086bdd7925ec0edcd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:74:9c:c8:73:b7:9a:c1:0b:9f:a5:66:93:15:
94:29:f2:6b:ea:f8:24:b2:19:cb:4f:b9:53:7e:f8:
88:26:dd:ad:b2:81:2e:ce:4b:6b:fe:47:d5:c2:db:
4e:8b:e2:3b:5e:f6:e7:be:d7:fb:87:53:62:34:5e:
26:47:3d:9a:ad:2c:fc:ee:fc:58:9f:47:ef:4d:56:
18:b5:ca:71:ed:bb:15:d4:57:d7:c8:c3:14:6a:ec:
41:ce:bc:70:09:e0:15:5c:9f:90:b2:e2:6e:db:2a:
24:27:a4:80:44:a8:03:90:b6:cd:23:b0:14:f1:f4:
2e:69:23:4b:1e:cc:53:21:38:19:cd:99:d9:95:cb:
b6:bb:f9:31:19:f3:76:b8:0d:02:f4:84:ed:7e:ca:
06:16:ed:cd:c1:a2:89:83:bc:74:59:90:be:77:70:
c0:a4:c9:df:c3:6c:19:c8:21:b2:9e:a2:14:97:8d:
39:c0:92:df:98:ea:84:69:76:45:62:4a:aa:8f:3f:
a9:5e:39:19:23:82:c8:49:66:13:fe:f5:a6:d3:70:
f7:3e:b9:21:ee:0f:39:d4:ee:ee:5a:e7:6e:e8:e8:
24:f3:79:21:bd:90:da:40:17:b4:17:fc:ef:8c:35:
4c:03:c0:fb:18:c9:85:73:6a:b6:62:d4:76:47:23:
95:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:5F:92:D9:09:60:2A:46:59:84:BF:08:6B:DD:79:25:EC:0E:DC:D7
X509v3 Authority Key Identifier:
keyid:CA:19:AB:EB:8A:B9:E6:38:90:A2:23:C2:FD:6B:A5:68:49:8B:DB:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhmr64q55jiQoiPC_WulaEmL27o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/vF-S2QlgKkZZhL8Ia915JewO3Nc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.186.128.0/17
IPv6:
2a02:c98::/32
Signature Algorithm: sha256WithRSAEncryption
20:26:25:c0:48:de:fb:10:f2:f4:f9:64:7d:48:b6:5d:38:f1:
b5:8b:60:c2:cf:1c:c8:d6:62:b9:d6:6b:42:65:9d:64:fc:cf:
4a:0d:57:3f:55:2e:8a:c3:d0:ca:d6:79:53:69:b8:fa:94:6b:
8d:c1:5a:60:eb:1c:29:54:a3:5c:35:f7:43:66:d7:00:3b:e4:
08:a0:04:e1:a1:db:e1:08:62:13:94:47:33:8c:a0:e7:eb:ed:
23:98:ab:a6:90:10:f5:e7:d4:40:c3:71:a6:a2:9d:7b:b2:75:
08:d9:b6:61:1a:f0:49:b3:00:13:f8:4c:6a:f4:57:93:e0:eb:
e3:4e:80:1d:7d:e5:0a:99:50:c1:e3:97:b6:25:1e:68:2d:52:
a7:92:45:15:96:7b:82:6d:e8:9c:4b:e6:0f:c2:64:77:09:09:
53:d8:ef:02:bc:27:63:a3:55:88:e5:45:40:57:a0:dc:46:1a:
40:42:52:21:aa:5f:16:22:17:8e:36:f9:45:95:26:52:c8:3c:
61:76:12:e6:d3:88:4f:6b:aa:e1:0c:5a:78:c9:6d:60:00:1f:
3f:83:83:e4:3d:4f:d4:29:5a:c2:f3:ff:98:2b:b9:8e:28:c0:
aa:74:1b:f1:ee:a7:5d:ea:85:2a:c7:60:d0:56:b1:c5:0e:3e:
bc:95:27:7a
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzDtrAzwZFayIjKBQQg+SBHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMTlhYmViOGFiOWU2Mzg5MGEyMjNjMmZkNmJhNTY4NDk4
YmRiYmEwHhcNMjQwMTAxMDYyOTM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzVmOTJkOTA5NjAyYTQ2NTk4NGJmMDg2YmRkNzkyNWVjMGVkY2Q3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3ScyHO3msELn6VmkxWUKfJr6vgk
shnLT7lTfviIJt2tsoEuzktr/kfVwttOi+I7Xvbnvtf7h1NiNF4mRz2arSz87vxY
n0fvTVYYtcpx7bsV1FfXyMMUauxBzrxwCeAVXJ+QsuJu2yokJ6SARKgDkLbNI7AU
8fQuaSNLHsxTITgZzZnZlcu2u/kxGfN2uA0C9ITtfsoGFu3NwaKJg7x0WZC+d3DA
pMnfw2wZyCGynqIUl405wJLfmOqEaXZFYkqqjz+pXjkZI4LISWYT/vWm03D3Prkh
7g851O7uWudu6Ogk83khvZDaQBe0F/zvjDVMA8D7GMmFc2q2YtR2RyOVdwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFLxfktkJYCpGWYS/CGvdeSXsDtzXMB8GA1UdIwQY
MBaAFMoZq+uKueY4kKIjwv1rpWhJi9u6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWhtcjY0cTU1amlRb2lQQ19XdWxhRW1MMjdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9iMTdlMWQtZmQ5MS00OTIzLTlkM2Mt
MTNiYmNkMGY5Mzc2LzEvdkYtUzJRbGdLa1paaEw4SWE5MTVKZXdPM05jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9iMTdlMWQtZmQ5MS00OTIzLTlkM2MtMTNiYmNkMGY5Mzc2
LzEveWhtcjY0cTU1amlRb2lQQ19XdWxhRW1MMjdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQHXrqAMA0E
AgACMAcDBQAqAgyYMA0GCSqGSIb3DQEBCwUAA4IBAQAgJiXASN77EPL0+WR9SLZd
OPG1i2DCzxzI1mK51mtCZZ1k/M9KDVc/VS6Kw9DK1nlTabj6lGuNwVpg6xwpVKNc
NfdDZtcAO+QIoAThodvhCGITlEczjKDn6+0jmKumkBD159RAw3Gmop17snUI2bZh
GvBJswAT+Exq9FeT4OvjToAdfeUKmVDB45e2JR5oLVKnkkUVlnuCbeicS+YPwmR3
CQlT2O8CvCdjo1WI5UVAV6DcRhpAQlIhql8WIheONvlFlSZSyDxhdhLm04hPa6rh
DFp4yW1gAB8/g4PkPU/UKVrC8/+YK7mOKMCqdBvx7qdd6oUqx2DQVrHFDj68lSd6
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:50:07 2024 by rpki-client on console-fra.rpki-client.org