Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/VzuGi7whJ6UKGyhYyvQt4_qibQ8.roa
File: VzuGi7whJ6UKGyhYyvQt4_qibQ8.roa (raw, json)
Hash identifier: n1pUuWmnA57NjbiV3saG2sQe9gnykEOJtuehy1NWF34=
Subject key identifier: 57:3B:86:8B:BC:21:27:A5:0A:1B:28:58:CA:F4:2D:E3:FA:A2:6D:0F
Certificate issuer: /CN=5e066de9829b761edce171e8ea3c5935e44f4e9a
Certificate serial: 018E3DAD34BCAA38F507C649E62A5A2CF3A8
Authority key identifier: 5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/VzuGi7whJ6UKGyhYyvQt4_qibQ8.roa
Signing time: Thu 14 Mar 2024 15:55:45 +0000
ROA not before: Thu 14 Mar 2024 15:55:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1299
IP address blocks: 194.120.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3d:ad:34:bc:aa:38:f5:07:c6:49:e6:2a:5a:2c:f3:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e066de9829b761edce171e8ea3c5935e44f4e9a
Validity
Not Before: Mar 14 15:55:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=573b868bbc2127a50a1b2858caf42de3faa26d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:45:6f:21:51:4c:ad:30:37:a9:0b:c5:ab:4d:
f6:c1:fa:87:91:52:85:04:b7:79:76:5b:0f:b8:f3:
c2:0d:3e:48:26:5b:e7:7a:4d:c6:5e:d7:af:e7:ff:
ce:de:0e:73:52:f6:8d:61:b7:a0:20:33:18:83:78:
a7:22:31:cf:3a:4e:f0:01:58:c5:d6:a7:b0:9a:1e:
8c:bd:e4:f0:16:2c:47:22:f2:df:c5:95:66:f5:1f:
ff:94:5c:f4:26:5d:a3:99:61:cd:3a:e5:52:a7:61:
e9:13:b7:13:1a:33:db:93:c8:a0:51:73:51:ec:35:
73:2f:6d:3b:d1:24:5a:8c:12:26:e0:d7:bb:0d:77:
44:cd:47:84:5c:4d:bc:b1:08:cf:b1:17:25:51:28:
0a:de:a0:b0:1a:7d:80:6e:6b:78:a1:49:c5:71:0f:
bf:91:94:6d:6e:17:d4:5d:0a:0d:69:27:c9:b1:af:
da:0e:bc:b6:1c:b3:83:e7:6b:22:ea:af:c8:bd:86:
78:2c:34:aa:bd:98:e3:45:db:0a:d4:30:07:8b:3b:
a9:20:89:d4:ee:30:40:8d:02:76:05:78:f5:05:b6:
be:a4:c1:54:5b:79:12:c4:93:1b:4e:41:b6:ec:fe:
4d:6b:77:2a:04:7f:5a:b4:72:0a:3e:c1:98:e3:ab:
5d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3B:86:8B:BC:21:27:A5:0A:1B:28:58:CA:F4:2D:E3:FA:A2:6D:0F
X509v3 Authority Key Identifier:
keyid:5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/VzuGi7whJ6UKGyhYyvQt4_qibQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.120.173.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:39:b9:5c:05:20:d5:dc:15:05:ad:39:ab:92:0a:f9:85:36:
ea:44:58:3d:c6:3f:f3:92:e3:84:c4:d0:c7:d9:42:cd:9b:97:
5f:a2:51:33:60:a7:e2:e0:7d:82:b5:aa:dc:af:8f:10:06:cc:
bf:7d:75:0b:fe:8a:7f:e9:52:2d:6a:38:9f:16:42:2e:08:64:
04:9e:21:5c:8d:48:70:28:55:8b:4f:bc:11:0d:bc:bc:e1:4f:
d5:3b:96:7f:06:6c:ab:b6:21:96:19:a8:e6:0f:db:85:ab:2e:
a9:d1:34:b4:56:3d:47:79:85:06:ae:ff:3f:98:24:d3:ec:91:
58:a3:ab:bd:40:6a:3c:02:95:73:83:f2:bc:49:8e:f1:47:d6:
6c:73:dd:24:12:51:e0:f3:48:dc:b6:0a:9b:cf:8a:7c:de:9b:
f4:45:70:62:54:fd:85:3e:23:1a:88:aa:24:f5:3e:21:22:a9:
6c:38:a0:65:e8:9a:07:2c:54:28:87:88:a6:48:8a:ba:00:03:
b0:21:a2:95:90:56:cc:a5:1a:f1:c3:5f:54:f2:6f:b5:b5:4b:
49:bf:bd:a6:8a:70:74:a8:86:8a:13:25:0b:68:68:07:ea:4f:
4d:9b:c4:af:f0:40:ba:cd:38:3b:93:a9:ed:12:3e:9d:37:46:
25:66:56:11
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY49rTS8qjj1B8ZJ5ipaLPOoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMDY2ZGU5ODI5Yjc2MWVkY2UxNzFlOGVhM2M1OTM1ZTQ0
ZjRlOWEwHhcNMjQwMzE0MTU1NTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzNiODY4YmJjMjEyN2E1MGExYjI4NThjYWY0MmRlM2ZhYTI2ZDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0VvIVFMrTA3qQvFq032wfqHkVKF
BLd5dlsPuPPCDT5IJlvnek3GXtev5//O3g5zUvaNYbegIDMYg3inIjHPOk7wAVjF
1qewmh6MveTwFixHIvLfxZVm9R//lFz0Jl2jmWHNOuVSp2HpE7cTGjPbk8igUXNR
7DVzL2070SRajBIm4Ne7DXdEzUeEXE28sQjPsRclUSgK3qCwGn2Abmt4oUnFcQ+/
kZRtbhfUXQoNaSfJsa/aDry2HLOD52si6q/IvYZ4LDSqvZjjRdsK1DAHizupIInU
7jBAjQJ2BXj1Bba+pMFUW3kSxJMbTkG27P5Na3cqBH9atHIKPsGY46tdhQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFc7hou8ISelChsoWMr0LeP6om0PMB8GA1UdIwQY
MBaAFF4GbemCm3Ye3OFx6Oo8WTXkT06aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGdadDZZS2JkaDdjNFhIbzZqeFpOZVJQVHBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jYWM5YzQtZjliYi00NmQ0LWJiNjIt
NDc1YWRmM2FhN2IxLzEvVnp1R2k3d2hKNlVLR3loWXl2UXQ0X3FpYlE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9jYWM5YzQtZjliYi00NmQ0LWJiNjItNDc1YWRmM2FhN2Ix
LzEvWGdadDZZS2JkaDdjNFhIbzZqeFpOZVJQVHBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwnitMA0G
CSqGSIb3DQEBCwUAA4IBAQA6OblcBSDV3BUFrTmrkgr5hTbqRFg9xj/zkuOExNDH
2ULNm5dfolEzYKfi4H2Ctarcr48QBsy/fXUL/op/6VItajifFkIuCGQEniFcjUhw
KFWLT7wRDby84U/VO5Z/BmyrtiGWGajmD9uFqy6p0TS0Vj1HeYUGrv8/mCTT7JFY
o6u9QGo8ApVzg/K8SY7xR9Zsc90kElHg80jctgqbz4p83pv0RXBiVP2FPiMaiKok
9T4hIqlsOKBl6JoHLFQoh4imSIq6AAOwIaKVkFbMpRrxw19U8m+1tUtJv72minB0
qIaKEyULaGgH6k9Nm8Sv8EC6zTg7k6ntEj6dN0YlZlYR
-----END CERTIFICATE-----
Generated at Wed May 15 19:10:53 2024 by rpki-client on console-fra.rpki-client.org