Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/VCkudttHDwzLgKdq7AlDI9fZY5A.roa
File: VCkudttHDwzLgKdq7AlDI9fZY5A.roa (raw, json)
Hash identifier: PjJJO/fa1W2VJ9b5WeywZqHwUSxI3r1AWWeyN+Vleuk=
Subject key identifier: 54:29:2E:76:DB:47:0F:0C:CB:80:A7:6A:EC:09:43:23:D7:D9:63:90
Certificate issuer: /CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7
Certificate serial: 018CC8DCF349F339C9054482293980953E1B
Authority key identifier: 6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/VCkudttHDwzLgKdq7AlDI9fZY5A.roa
Signing time: Tue 02 Jan 2024 06:29:32 +0000
ROA not before: Tue 02 Jan 2024 06:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43791
IP address blocks: 185.212.221.0/24 maxlen: 24
185.212.220.0/24 maxlen: 24
185.212.223.0/24 maxlen: 24
185.212.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:f3:49:f3:39:c9:05:44:82:29:39:80:95:3e:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7
Validity
Not Before: Jan 2 06:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=54292e76db470f0ccb80a76aec094323d7d96390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:36:db:4d:45:14:e7:cd:b8:fa:bf:30:1d:20:
af:28:62:c5:8f:ee:4d:e8:9c:73:fd:83:59:d6:80:
8b:fb:56:79:84:92:3e:3a:de:6b:9b:61:be:78:fe:
0f:1d:5e:ac:85:be:0b:87:1a:f0:ec:e7:45:b2:0f:
ff:b2:77:f9:20:a7:5f:e4:a2:fa:a6:b3:12:fb:13:
bd:9c:12:e3:f3:19:a8:16:b8:24:61:17:63:60:fb:
62:3d:81:7f:f4:5b:43:62:52:8c:56:89:0d:65:dd:
4c:aa:73:dc:74:04:65:7b:f0:58:3a:23:79:28:31:
43:ca:01:ab:d9:79:01:80:f7:54:48:69:e2:97:e1:
5b:fb:ee:d5:ca:52:0c:5f:bd:84:1d:b1:65:24:e3:
b4:2e:76:38:9d:42:b9:54:ab:c4:e7:2f:e0:e6:02:
82:c0:d7:d2:6c:a7:10:1d:43:fc:d3:44:a0:27:e5:
5f:d1:d9:b7:0f:d7:93:7a:2c:0a:e6:c1:c8:80:91:
5d:a2:0c:ff:a7:09:36:8e:47:f2:24:29:fc:33:95:
0c:6b:e8:d7:58:05:03:3b:1c:bc:de:c4:96:88:13:
28:81:00:f6:58:01:88:0d:d3:79:8b:44:f8:12:d1:
ce:a9:6b:8c:b6:4e:cb:db:73:e4:61:c3:2e:5c:05:
17:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:29:2E:76:DB:47:0F:0C:CB:80:A7:6A:EC:09:43:23:D7:D9:63:90
X509v3 Authority Key Identifier:
keyid:6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/VCkudttHDwzLgKdq7AlDI9fZY5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.220.0/22
Signature Algorithm: sha256WithRSAEncryption
02:ea:f5:46:85:7a:74:a1:64:54:5c:ff:58:ae:f6:a4:bf:ed:
ba:e5:d4:84:0c:4f:62:3d:b3:0c:2e:ba:c1:6d:3d:48:90:0a:
01:94:98:8b:b4:c4:6d:8e:44:ce:ba:43:00:19:a1:fd:0e:d6:
9a:61:02:64:8c:61:64:b2:0d:75:62:36:10:8e:c1:de:e5:61:
ec:1a:0c:66:22:bf:a5:aa:df:2f:65:5a:bf:b0:16:28:50:5f:
93:0c:97:cc:b2:e1:84:cf:97:30:76:f7:ea:5c:74:07:32:15:
f9:3d:00:37:94:a2:13:e9:94:d5:64:6b:99:5b:c8:5f:9a:f3:
9b:08:4c:41:95:af:49:71:4b:9d:5f:98:cc:7b:6f:d0:59:3c:
e9:ee:75:7d:da:37:6a:9a:d2:5b:bd:8f:41:7d:b6:e5:15:7b:
69:db:5d:64:a2:41:66:9d:8a:f0:09:66:44:77:00:95:39:45:
85:ef:03:47:ad:f4:76:99:8f:e4:63:f6:9d:69:cd:52:db:b4:
43:0a:8d:51:41:c3:c6:23:c5:44:93:61:3f:b6:f5:3a:90:c4:
9e:4e:fe:f1:8c:cc:a0:2d:c5:f7:e6:dd:36:79:97:fe:27:bf:
77:14:70:fe:57:d1:2f:ce:dd:99:20:58:07:9e:6a:b9:36:f2:
9f:ad:00:ae
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI3PNJ8znJBUSCKTmAlT4bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkYmQ1Y2IyOTk0MGFjMmE4NTUzYjZlYzBhOGNlYzdjMjA5
ZjdjZTcwHhcNMjQwMTAyMDYyOTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDI5MmU3NmRiNDcwZjBjY2I4MGE3NmFlYzA5NDMyM2Q3ZDk2MzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizbbTUUU5824+r8wHSCvKGLFj+5N
6Jxz/YNZ1oCL+1Z5hJI+Ot5rm2G+eP4PHV6shb4Lhxrw7OdFsg//snf5IKdf5KL6
prMS+xO9nBLj8xmoFrgkYRdjYPtiPYF/9FtDYlKMVokNZd1MqnPcdARle/BYOiN5
KDFDygGr2XkBgPdUSGnil+Fb++7VylIMX72EHbFlJOO0LnY4nUK5VKvE5y/g5gKC
wNfSbKcQHUP800SgJ+Vf0dm3D9eTeiwK5sHIgJFdogz/pwk2jkfyJCn8M5UMa+jX
WAUDOxy83sSWiBMogQD2WAGIDdN5i0T4EtHOqWuMtk7L23PkYcMuXAUXfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFQpLnbbRw8My4CnauwJQyPX2WOQMB8GA1UdIwQY
MBaAFG29XLKZQKwqhVO27AqM7Hwgn3znMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmIxY3NwbEFyQ3FGVTdic0NvenNmQ0NmZk9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC82MTRiMDUtNzQ0NS00MDQ2LTlmYjEt
MmZkZTgwNDM1ZjRkLzEvVkNrdWR0dEhEd3pMZ0tkcTdBbERJOWZaWTVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC82MTRiMDUtNzQ0NS00MDQ2LTlmYjEtMmZkZTgwNDM1ZjRk
LzEvYmIxY3NwbEFyQ3FGVTdic0NvenNmQ0NmZk9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCudTcMA0G
CSqGSIb3DQEBCwUAA4IBAQAC6vVGhXp0oWRUXP9Yrvakv+265dSEDE9iPbMMLrrB
bT1IkAoBlJiLtMRtjkTOukMAGaH9DtaaYQJkjGFksg11YjYQjsHe5WHsGgxmIr+l
qt8vZVq/sBYoUF+TDJfMsuGEz5cwdvfqXHQHMhX5PQA3lKIT6ZTVZGuZW8hfmvOb
CExBla9JcUudX5jMe2/QWTzp7nV92jdqmtJbvY9BfbblFXtp211kokFmnYrwCWZE
dwCVOUWF7wNHrfR2mY/kY/adac1S27RDCo1RQcPGI8VEk2E/tvU6kMSeTv7xjMyg
LcX35t02eZf+J793FHD+V9Evzt2ZIFgHnmq5NvKfrQCu
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:12:34 2024 by rpki-client on console-fra.rpki-client.org