Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/Vz0-bunSPYqG6Y1fldcfQCTTU5k.roa
File: Vz0-bunSPYqG6Y1fldcfQCTTU5k.roa (raw, json)
Hash identifier: UOJRqIip9Oc8TooeCQSRNQ9QxXyVO8ufhcQAAbPfyI4=
Subject key identifier: 57:3D:3E:6E:E9:D2:3D:8A:86:E9:8D:5F:95:D7:1F:40:24:D3:53:99
Certificate issuer: /CN=111d895492ed4b69d5aa6eda5f702fe763a27ba0
Certificate serial: 018CC26D447B45FEA470BB1509AE1D12DC8D
Authority key identifier: 11:1D:89:54:92:ED:4B:69:D5:AA:6E:DA:5F:70:2F:E7:63:A2:7B:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER2JVJLtS2nVqm7aX3Av52Oie6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/Vz0-bunSPYqG6Y1fldcfQCTTU5k.roa
Signing time: Mon 01 Jan 2024 00:29:50 +0000
ROA not before: Mon 01 Jan 2024 00:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 559
IP address blocks: 130.125.0.0/16 maxlen: 16
192.42.42.0/23 maxlen: 23
192.42.44.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ER2JVJLtS2nVqm7aX3Av52Oie6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 01:03:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:44:7b:45:fe:a4:70:bb:15:09:ae:1d:12:dc:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111d895492ed4b69d5aa6eda5f702fe763a27ba0
Validity
Not Before: Jan 1 00:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=573d3e6ee9d23d8a86e98d5f95d71f4024d35399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:03:f1:71:18:37:51:db:2d:96:1b:b2:f0:5d:
17:f8:be:4a:2b:2e:b6:a4:eb:77:d7:51:d7:a5:fb:
b3:ad:ca:64:1d:c7:91:d4:a3:9c:53:63:bd:70:4a:
9a:51:7d:4e:5d:ba:dd:75:3a:8c:db:42:47:89:17:
bb:a4:6c:ed:a4:7b:48:9d:1f:a8:94:b2:64:f0:3e:
8e:59:3c:c7:6c:e6:21:2e:70:75:49:78:84:18:e7:
84:f3:fd:a4:5c:f0:c8:14:2f:72:5c:84:95:e1:da:
76:63:83:a8:20:da:0b:0b:0f:07:b9:2d:dd:89:87:
0b:8f:4d:76:e2:f2:e1:f6:1c:66:78:c8:17:01:5d:
6b:0e:b6:10:47:76:69:02:48:f5:a6:40:0a:97:65:
c5:fe:2a:07:f4:79:6c:41:11:91:91:89:47:ab:4c:
d9:cf:4c:18:05:44:3f:e9:78:5c:44:15:ae:01:6f:
8a:46:9e:64:ff:58:4a:a4:4a:db:4c:23:09:a2:7b:
b4:54:80:ad:2f:75:9a:f9:0a:84:e5:08:aa:15:ed:
2f:07:2e:72:aa:f4:9c:c5:0b:8f:51:b6:b9:a6:d3:
be:06:1a:56:44:3e:b0:52:00:b7:cc:bf:ff:38:f9:
ad:47:d1:1d:9c:2b:94:d1:7d:b8:16:84:d2:1b:f9:
bb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3D:3E:6E:E9:D2:3D:8A:86:E9:8D:5F:95:D7:1F:40:24:D3:53:99
X509v3 Authority Key Identifier:
keyid:11:1D:89:54:92:ED:4B:69:D5:AA:6E:DA:5F:70:2F:E7:63:A2:7B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER2JVJLtS2nVqm7aX3Av52Oie6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/Vz0-bunSPYqG6Y1fldcfQCTTU5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.125.0.0/16
192.42.42.0-192.42.47.255
Signature Algorithm: sha256WithRSAEncryption
01:e1:dc:d8:34:08:f7:8d:ae:22:41:cc:e0:2d:d5:07:c1:0a:
4c:79:db:21:74:d0:b0:fc:42:ff:ca:78:59:d6:58:69:3d:53:
be:05:e3:3c:ce:cf:cb:cf:80:7f:0d:72:bb:9d:cd:19:9b:4d:
29:1d:ad:6b:31:d3:95:a3:8e:3c:10:b1:db:a5:1d:68:d4:45:
37:5d:bc:f2:86:3b:92:7f:07:db:40:dc:a1:25:30:e3:ef:d8:
98:3f:f0:cf:8b:7b:87:59:9d:ab:b1:7a:53:cd:e9:59:ac:54:
c9:1e:f2:7c:f0:0f:1c:8c:4b:c0:ab:ff:c4:11:77:6b:69:0b:
95:da:54:ef:42:de:05:34:41:cd:be:79:98:2d:cf:ed:7c:51:
ed:e3:e2:ed:aa:26:ed:5b:2b:be:29:f9:13:8a:90:5f:c8:4e:
ae:f2:09:3d:5f:25:12:2c:c8:1b:40:dc:33:1e:87:e5:55:4b:
b1:05:24:2c:1d:16:57:a4:2e:6a:8b:76:4c:4f:a9:f9:86:9d:
30:c8:e0:cf:60:21:8c:48:8d:6a:34:fd:a7:3e:ba:4b:40:a9:
57:9c:85:7d:55:c1:d2:b0:be:cc:fd:52:4e:78:9b:76:c6:c3:
e3:e6:54:43:88:4e:35:c4:3d:a9:49:f1:79:1a:60:8b:ce:70:
57:71:9a:b5
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAYzCbUR7Rf6kcLsVCa4dEtyNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMWQ4OTU0OTJlZDRiNjlkNWFhNmVkYTVmNzAyZmU3NjNh
MjdiYTAwHhcNMjQwMTAxMDAyOTUwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzNkM2U2ZWU5ZDIzZDhhODZlOThkNWY5NWQ3MWY0MDI0ZDM1Mzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgPxcRg3Udstlhuy8F0X+L5KKy62
pOt311HXpfuzrcpkHceR1KOcU2O9cEqaUX1OXbrddTqM20JHiRe7pGztpHtInR+o
lLJk8D6OWTzHbOYhLnB1SXiEGOeE8/2kXPDIFC9yXISV4dp2Y4OoINoLCw8HuS3d
iYcLj0124vLh9hxmeMgXAV1rDrYQR3ZpAkj1pkAKl2XF/ioH9HlsQRGRkYlHq0zZ
z0wYBUQ/6XhcRBWuAW+KRp5k/1hKpErbTCMJonu0VICtL3Wa+QqE5QiqFe0vBy5y
qvScxQuPUba5ptO+BhpWRD6wUgC3zL//OPmtR9EdnCuU0X24FoTSG/m7BQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFFc9Pm7p0j2KhumNX5XXH0Ak01OZMB8GA1UdIwQY
MBaAFBEdiVSS7Utp1apu2l9wL+djonugMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVIySlZKTHRTMm5WcW03YVgzQXY1Mk9pZTZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny84MGQxY2MtNDUzZi00MmUzLTlmZDQt
ODdiZWNmNzRkNTY0LzEvVnowLWJ1blNQWXFHNlkxZmxkY2ZRQ1RUVTVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny84MGQxY2MtNDUzZi00MmUzLTlmZDQtODdiZWNmNzRkNTY0
LzEvRVIySlZKTHRTMm5WcW03YVgzQXY1Mk9pZTZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATAwMAgn0wDAME
AcAqKgMEBMAqIDANBgkqhkiG9w0BAQsFAAOCAQEAAeHc2DQI942uIkHM4C3VB8EK
THnbIXTQsPxC/8p4WdZYaT1TvgXjPM7Py8+Afw1yu53NGZtNKR2tazHTlaOOPBCx
26UdaNRFN1288oY7kn8H20DcoSUw4+/YmD/wz4t7h1mdq7F6U83pWaxUyR7yfPAP
HIxLwKv/xBF3a2kLldpU70LeBTRBzb55mC3P7XxR7ePi7aom7Vsrvin5E4qQX8hO
rvIJPV8lEizIG0DcMx6H5VVLsQUkLB0WV6Quaot2TE+p+YadMMjgz2AhjEiNajT9
pz66S0CpV5yFfVXB0rC+zP1STnibdsbD4+ZUQ4hONcQ9qUnxeRpgi85wV3GatQ==
-----END CERTIFICATE-----
Generated at Sat May 18 05:49:51 2024 by rpki-client on console-fra.rpki-client.org