Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/Vh9z6ZEq-fKvx3GMthxBx0CV10Y.roa
File: Vh9z6ZEq-fKvx3GMthxBx0CV10Y.roa (raw, json)
Hash identifier: 6lbI36Ksg4Yxqih1iyLskd9bWLlca2xRWWSrbFLC6ro=
Subject key identifier: 56:1F:73:E9:91:2A:F9:F2:AF:C7:71:8C:B6:1C:41:C7:40:95:D7:46
Certificate issuer: /CN=79101035d53377c5a72bedca522fc1456e0b8419
Certificate serial: 018CC64AC36DD13F09D0EB0565219AE55703
Authority key identifier: 79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/Vh9z6ZEq-fKvx3GMthxBx0CV10Y.roa
Signing time: Mon 01 Jan 2024 18:30:37 +0000
ROA not before: Mon 01 Jan 2024 18:30:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201992
IP address blocks: 217.23.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 06:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:c3:6d:d1:3f:09:d0:eb:05:65:21:9a:e5:57:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79101035d53377c5a72bedca522fc1456e0b8419
Validity
Not Before: Jan 1 18:30:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=561f73e9912af9f2afc7718cb61c41c74095d746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f4:50:cf:ed:a0:6b:f3:f4:65:02:81:92:8e:
35:4a:ce:52:08:9b:53:02:bc:fd:c6:68:0e:40:96:
fd:5a:ce:f6:46:9b:34:f4:15:64:d0:e5:23:b9:46:
e5:60:11:22:32:38:ed:e2:1d:0a:9a:ac:71:b5:9a:
ba:30:ef:d9:67:61:0d:5e:5b:dc:b8:80:8f:fe:b4:
3f:6a:13:4e:6a:8a:98:2f:3f:12:b7:88:14:47:5b:
d9:bc:c7:2f:42:52:ee:6e:67:5d:3c:aa:f2:06:79:
60:92:96:14:69:32:07:78:3a:51:5b:8a:11:ad:aa:
b2:ab:39:19:ea:f8:af:26:02:b3:e0:cd:96:df:b9:
90:57:58:fb:bf:71:a9:b5:49:01:d9:a0:d7:71:0c:
87:2f:7d:77:c2:35:1d:c4:2e:0b:c3:38:d4:22:b6:
58:79:6d:19:b7:be:54:ae:e9:b6:47:03:a9:23:4e:
7b:88:78:38:51:08:30:fb:4c:85:46:7b:bf:ee:1f:
c8:cf:95:bf:27:5a:d6:33:9e:e3:5e:21:f6:d0:40:
b5:66:a3:4d:c5:ff:80:9c:92:ba:3d:b4:27:5d:38:
da:e0:05:cb:c2:6e:8c:78:84:01:61:e4:30:45:0c:
6f:ec:ef:9f:69:2e:12:3e:a4:ac:07:72:b5:4e:d4:
e8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:1F:73:E9:91:2A:F9:F2:AF:C7:71:8C:B6:1C:41:C7:40:95:D7:46
X509v3 Authority Key Identifier:
keyid:79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/Vh9z6ZEq-fKvx3GMthxBx0CV10Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.23.112.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:0a:0e:4f:68:87:9e:5a:88:8b:24:61:28:6e:0f:73:b5:51:
ba:5f:a8:4b:28:62:01:09:f4:4e:c3:8f:80:8a:be:52:7d:1a:
bf:97:dd:d9:a6:d7:21:68:ca:5c:c8:3d:fa:69:7c:2b:29:32:
40:7d:63:6e:55:71:31:26:d8:ee:fb:15:0e:e1:36:43:9b:f9:
28:07:ef:9c:13:08:c6:e5:fd:3f:af:bf:cf:c7:0a:13:7e:1d:
74:5e:25:56:3b:22:4c:02:c4:08:85:7a:c4:bd:38:e9:59:18:
e1:77:52:10:47:2d:52:62:c1:b9:d2:cd:39:9c:fa:89:05:7b:
f0:f7:9d:c2:0d:80:e6:7d:3b:f4:7b:1a:ca:3e:ad:f1:fe:c9:
7e:08:3f:18:2e:37:11:bc:01:90:f3:75:d9:35:76:28:f6:09:
4c:d2:39:d1:9e:4c:dd:ce:04:27:0f:eb:07:a2:8a:ae:8e:0e:
05:18:68:2a:6f:cf:de:52:4e:17:4a:6c:09:00:1c:00:5d:62:
7c:c0:51:62:16:c2:76:69:b7:2b:06:38:a2:a3:a5:09:aa:9e:
47:c1:21:fe:13:d2:3b:22:e1:6d:bc:5e:9a:e8:e0:0a:c6:30:
36:f0:cb:c5:c2:83:82:8f:71:ee:f3:8e:17:a8:1e:49:8a:8a:
b0:d0:13:7b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGSsNt0T8J0OsFZSGa5VcDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MTAxMDM1ZDUzMzc3YzVhNzJiZWRjYTUyMmZjMTQ1NmUw
Yjg0MTkwHhcNMjQwMTAxMTgzMDM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjFmNzNlOTkxMmFmOWYyYWZjNzcxOGNiNjFjNDFjNzQwOTVkNzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfRQz+2ga/P0ZQKBko41Ss5SCJtT
Arz9xmgOQJb9Ws72Rps09BVk0OUjuUblYBEiMjjt4h0KmqxxtZq6MO/ZZ2ENXlvc
uICP/rQ/ahNOaoqYLz8St4gUR1vZvMcvQlLubmddPKryBnlgkpYUaTIHeDpRW4oR
raqyqzkZ6vivJgKz4M2W37mQV1j7v3GptUkB2aDXcQyHL313wjUdxC4LwzjUIrZY
eW0Zt75Urum2RwOpI057iHg4UQgw+0yFRnu/7h/Iz5W/J1rWM57jXiH20EC1ZqNN
xf+AnJK6PbQnXTja4AXLwm6MeIQBYeQwRQxv7O+faS4SPqSsB3K1TtToHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFYfc+mRKvnyr8dxjLYcQcdAlddGMB8GA1UdIwQY
MBaAFHkQEDXVM3fFpyvtylIvwUVuC4QZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVJBUU5kVXpkOFduSy0zS1VpX0JSVzRMaEJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS85NThjMmMtYjRjMy00MzJkLTlhYjEt
MGNjODNiMDBmYzU4LzEvVmg5ejZaRXEtZkt2eDNHTXRoeEJ4MENWMTBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS85NThjMmMtYjRjMy00MzJkLTlhYjEtMGNjODNiMDBmYzU4
LzEvZVJBUU5kVXpkOFduSy0zS1VpX0JSVzRMaEJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2RdwMA0G
CSqGSIb3DQEBCwUAA4IBAQC/Cg5PaIeeWoiLJGEobg9ztVG6X6hLKGIBCfROw4+A
ir5SfRq/l93ZptchaMpcyD36aXwrKTJAfWNuVXExJtju+xUO4TZDm/koB++cEwjG
5f0/r7/PxwoTfh10XiVWOyJMAsQIhXrEvTjpWRjhd1IQRy1SYsG50s05nPqJBXvw
953CDYDmfTv0exrKPq3x/sl+CD8YLjcRvAGQ83XZNXYo9glM0jnRnkzdzgQnD+sH
ooqujg4FGGgqb8/eUk4XSmwJABwAXWJ8wFFiFsJ2abcrBjiio6UJqp5HwSH+E9I7
IuFtvF6a6OAKxjA28MvFwoOCj3Hu844XqB5Jioqw0BN7
-----END CERTIFICATE-----
Generated at Mon Jun 17 13:08:54 2024 by rpki-client on console-ams.rpki-client.org