Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/VdKdMvVou4TygVLVFMddeRt7Cvs.roa
File: VdKdMvVou4TygVLVFMddeRt7Cvs.roa (raw, json)
Hash identifier: VXAiLf72jI/25hySB2Uy1T5UV5MK6NrZ1MoDOnFbfQc=
Subject key identifier: 55:D2:9D:32:F5:68:BB:84:F2:81:52:D5:14:C7:5D:79:1B:7B:0A:FB
Certificate issuer: /CN=c7e9c7aa534b1300bf724fff0f0c1b0519d505bb
Certificate serial: 018CC7274A543D48A4E4216D58DE6385717D
Authority key identifier: C7:E9:C7:AA:53:4B:13:00:BF:72:4F:FF:0F:0C:1B:05:19:D5:05:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-nHqlNLEwC_ck__DwwbBRnVBbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/VdKdMvVou4TygVLVFMddeRt7Cvs.roa
Signing time: Mon 01 Jan 2024 22:31:30 +0000
ROA not before: Mon 01 Jan 2024 22:31:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 32338
IP address blocks: 185.213.88.0/22 maxlen: 24
45.84.30.0/24 maxlen: 24
45.84.31.0/24 maxlen: 24
45.84.28.0/23 maxlen: 23
185.149.132.0/23 maxlen: 23
185.149.134.0/23 maxlen: 23
185.73.220.0/22 maxlen: 24
2a0b:85c0::/29 maxlen: 32
2a05:44c0::/29 maxlen: 32
2a0e:9480::/29 maxlen: 48
2a07:68c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-nHqlNLEwC_ck__DwwbBRnVBbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:4a:54:3d:48:a4:e4:21:6d:58:de:63:85:71:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7e9c7aa534b1300bf724fff0f0c1b0519d505bb
Validity
Not Before: Jan 1 22:31:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55d29d32f568bb84f28152d514c75d791b7b0afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:75:e1:18:5b:72:f8:a7:9c:74:5c:06:ff:9d:
37:f7:ad:66:34:b7:2e:b0:af:d3:8e:a9:6b:ba:34:
a5:4a:75:9b:87:8b:32:43:ec:35:b8:30:68:79:d2:
9f:d8:71:7c:e3:ad:9e:7d:36:0d:76:6b:e1:f3:18:
e5:d5:de:14:29:fb:b6:94:e5:b2:96:27:d4:d8:83:
ae:66:86:31:fa:ac:6d:83:1b:ea:fa:0c:e2:e0:fe:
e2:86:fc:54:1d:01:0a:46:2e:6d:58:13:ae:40:30:
dd:4c:76:8a:48:84:92:94:f3:85:04:9e:92:8a:05:
56:e6:4e:9b:52:bd:e9:b6:03:70:74:7f:7f:41:66:
8b:48:2d:57:55:41:ac:26:a4:7d:5b:ec:03:95:f1:
f7:ba:24:00:78:8a:96:14:4f:d0:a4:fe:41:e8:ea:
42:60:fb:eb:d0:85:dc:5f:3c:21:15:a1:b1:fc:51:
1b:d9:2f:ab:0a:ed:f2:a8:d1:a9:94:bb:fe:09:6a:
e2:b2:3b:b2:6a:82:40:c7:21:76:f4:96:4d:68:54:
9c:45:dd:82:bf:ef:a7:0d:49:dc:f3:f0:5c:7b:53:
d2:a6:be:b2:92:2e:91:11:08:5b:70:76:c3:33:3e:
9f:bd:66:4d:8b:9b:6b:9f:df:84:ba:6e:1b:a3:03:
e8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D2:9D:32:F5:68:BB:84:F2:81:52:D5:14:C7:5D:79:1B:7B:0A:FB
X509v3 Authority Key Identifier:
keyid:C7:E9:C7:AA:53:4B:13:00:BF:72:4F:FF:0F:0C:1B:05:19:D5:05:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-nHqlNLEwC_ck__DwwbBRnVBbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/VdKdMvVou4TygVLVFMddeRt7Cvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.28.0/22
185.73.220.0/22
185.149.132.0/22
185.213.88.0/22
IPv6:
2a05:44c0::/29
2a07:68c0::/29
2a0b:85c0::/29
2a0e:9480::/29
Signature Algorithm: sha256WithRSAEncryption
64:a7:02:17:7f:ee:0f:06:64:7f:c6:29:72:81:62:da:82:af:
e4:30:b1:9a:bf:41:eb:c8:60:0b:fb:d4:ef:68:d2:be:d6:50:
ee:ae:97:47:b1:09:08:87:02:82:84:48:ec:33:a6:c6:db:fc:
72:97:3b:99:de:6a:fb:2d:a4:a0:ee:13:30:af:64:cc:76:2d:
0d:fd:6b:b6:dc:fb:02:45:21:7f:5a:97:07:01:be:a4:1e:e2:
8b:2b:47:79:22:77:1a:1d:14:0d:0b:8b:33:78:c7:fe:c9:9b:
2c:e4:c5:19:26:e8:09:16:81:6d:f1:26:0c:64:2c:31:f0:cf:
33:37:4f:b2:cf:f6:69:be:1b:4f:e5:83:b5:7f:5d:11:96:b7:
36:97:2e:2b:09:7a:95:d6:7e:23:fd:ce:5d:11:33:85:15:4a:
30:8e:6c:1f:25:28:2c:76:59:0b:00:b9:3d:28:73:66:a3:c5:
54:84:5e:22:4b:b0:5f:30:1f:86:bd:3a:bb:8a:b1:f1:52:93:
82:f6:63:e3:af:5f:67:fa:8c:67:37:74:af:2b:05:90:07:ac:
9b:14:95:d3:69:04:54:33:d5:ad:d8:a7:e3:d2:6d:ab:e7:cd:
12:a8:a1:fb:04:0b:48:71:c8:09:70:54:76:5f:4d:60:f4:1e:
d0:0c:69:f0
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAYzHJ0pUPUik5CFtWN5jhXF9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ZTljN2FhNTM0YjEzMDBiZjcyNGZmZjBmMGMxYjA1MTlk
NTA1YmIwHhcNMjQwMTAxMjIzMTMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NWQyOWQzMmY1NjhiYjg0ZjI4MTUyZDUxNGM3NWQ3OTFiN2IwYWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3XhGFty+KecdFwG/503961mNLcu
sK/TjqlrujSlSnWbh4syQ+w1uDBoedKf2HF8462efTYNdmvh8xjl1d4UKfu2lOWy
lifU2IOuZoYx+qxtgxvq+gzi4P7ihvxUHQEKRi5tWBOuQDDdTHaKSISSlPOFBJ6S
igVW5k6bUr3ptgNwdH9/QWaLSC1XVUGsJqR9W+wDlfH3uiQAeIqWFE/QpP5B6OpC
YPvr0IXcXzwhFaGx/FEb2S+rCu3yqNGplLv+CWrisjuyaoJAxyF29JZNaFScRd2C
v++nDUnc8/Bce1PSpr6yki6REQhbcHbDMz6fvWZNi5trn9+Eum4bowPomQIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFFXSnTL1aLuE8oFS1RTHXXkbewr7MB8GA1UdIwQY
MBaAFMfpx6pTSxMAv3JP/w8MGwUZ1QW7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveC1uSHFsTkxFd0NfY2tfX0R3d2JCUm5WQmJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC81MGFiZWYtMzc0Yy00ZWE2LWI3ZDQt
Y2U1MDA4MjdmZjdmLzEvVmRLZE12Vm91NFR5Z1ZMVkZNZGRlUnQ3Q3ZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC81MGFiZWYtMzc0Yy00ZWE2LWI3ZDQtY2U1MDA4MjdmZjdm
LzEveC1uSHFsTkxFd0NfY2tfX0R3d2JCUm5WQmJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDAeBAIAATAYAwQCLVQcAwQC
uUncAwQCuZWEAwQCudVYMCIEAgACMBwDBQMqBUTAAwUDKgdowAMFAyoLhcADBQMq
DpSAMA0GCSqGSIb3DQEBCwUAA4IBAQBkpwIXf+4PBmR/xilygWLagq/kMLGav0Hr
yGAL+9TvaNK+1lDurpdHsQkIhwKChEjsM6bG2/xylzuZ3mr7LaSg7hMwr2TMdi0N
/Wu23PsCRSF/WpcHAb6kHuKLK0d5IncaHRQNC4szeMf+yZss5MUZJugJFoFt8SYM
ZCwx8M8zN0+yz/ZpvhtP5YO1f10Rlrc2ly4rCXqV1n4j/c5dETOFFUowjmwfJSgs
dlkLALk9KHNmo8VUhF4iS7BfMB+GvTq7irHxUpOC9mPjr19n+oxnN3SvKwWQB6yb
FJXTaQRUM9Wt2Kfj0m2r580SqKH7BAtIccgJcFR2X01g9B7QDGnw
-----END CERTIFICATE-----
Generated at Fri Jun 7 20:00:30 2024 by rpki-client on console-ams.rpki-client.org