Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/vEeTFRvnWfqwVaKiGS01YaUld1s.roa
File: vEeTFRvnWfqwVaKiGS01YaUld1s.roa (raw, json)
Hash identifier: IlAcHm321dOBBTUpgpv/HkIRlc9rBKBNJ8Fi+jCGxqY=
Subject key identifier: BC:47:93:15:1B:E7:59:FA:B0:55:A2:A2:19:2D:35:61:A5:25:77:5B
Certificate issuer: /CN=d3600cbafd26fee5064fc89f301dfc8e3c1d3ca5
Certificate serial: 018CC425346E2C5CF27F7144774C1668247C
Authority key identifier: D3:60:0C:BA:FD:26:FE:E5:06:4F:C8:9F:30:1D:FC:8E:3C:1D:3C:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/vEeTFRvnWfqwVaKiGS01YaUld1s.roa
Signing time: Mon 01 Jan 2024 08:30:21 +0000
ROA not before: Mon 01 Jan 2024 08:30:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207269
IP address blocks: 45.153.180.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:34:6e:2c:5c:f2:7f:71:44:77:4c:16:68:24:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3600cbafd26fee5064fc89f301dfc8e3c1d3ca5
Validity
Not Before: Jan 1 08:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc4793151be759fab055a2a2192d3561a525775b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8e:d5:0a:8f:a4:73:22:b5:00:8c:ec:3a:50:
da:cd:37:06:7e:79:07:ec:df:75:f4:36:d5:24:d3:
37:fa:ee:6c:eb:50:4e:42:60:ce:6a:36:44:fb:3d:
d7:dc:13:3c:6e:ae:0b:33:91:3f:2a:aa:64:b1:3f:
b6:d8:8f:bd:51:90:f0:10:27:91:1c:00:a0:44:dc:
6e:1f:37:ee:01:05:af:fc:c8:6b:05:45:90:b2:2a:
75:2e:1e:f9:c6:25:08:30:5a:67:81:f5:ea:77:3f:
58:07:ae:71:db:5a:33:b6:95:0e:6b:c7:d0:9a:c1:
34:b2:1d:0c:20:eb:d9:4f:5f:ad:aa:f7:36:03:86:
98:31:4a:2a:2a:c0:47:74:d5:71:36:6a:a9:14:7c:
44:13:05:82:36:19:7f:13:16:fb:51:9c:a1:53:69:
95:35:e4:fb:f8:4b:63:15:06:57:24:a5:fa:cd:7a:
7c:8c:47:35:e5:79:12:7a:8a:68:4e:e7:b7:ef:45:
be:42:ae:72:82:1d:5e:80:f5:ce:59:7d:df:a6:43:
49:9a:77:a2:81:5a:2e:93:26:6f:1c:03:c8:a7:4f:
97:2f:cc:92:0d:44:6e:d5:b3:02:81:ca:47:53:c7:
23:1b:b7:78:99:9d:32:38:eb:92:b7:80:c7:68:a8:
cd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:47:93:15:1B:E7:59:FA:B0:55:A2:A2:19:2D:35:61:A5:25:77:5B
X509v3 Authority Key Identifier:
keyid:D3:60:0C:BA:FD:26:FE:E5:06:4F:C8:9F:30:1D:FC:8E:3C:1D:3C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/vEeTFRvnWfqwVaKiGS01YaUld1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.180.0/23
Signature Algorithm: sha256WithRSAEncryption
06:89:a3:7a:4f:c2:15:36:9a:e7:9d:73:54:29:64:ec:7b:7d:
33:ee:04:a2:d6:46:d5:51:82:6b:77:f6:a9:78:57:a2:43:7e:
0a:45:72:7a:ca:52:60:ce:87:2a:1b:88:c5:4d:e6:e7:70:a3:
74:b0:fa:36:5f:d0:13:60:b1:7e:e3:43:3f:57:23:d7:23:3f:
ba:83:f5:85:28:1e:a9:b1:9b:16:a2:cc:10:c5:4b:18:bd:a0:
6e:a3:fd:65:c5:a7:9d:f2:35:65:50:3b:24:14:e3:4d:f8:0a:
e4:40:df:6d:95:c7:5f:e1:d7:26:b7:65:ca:8d:19:7c:f2:a2:
83:27:ed:2d:4e:33:a3:c9:76:19:40:6b:ce:d0:85:ed:fc:ff:
af:3e:d5:d2:4c:b5:14:f9:6f:45:e9:f7:e1:1a:87:f2:e0:4a:
16:f8:01:ff:fa:dc:a2:4e:01:4d:88:e1:9d:88:ab:47:fa:f2:
fa:3b:e7:4f:d5:72:62:ac:d6:77:f3:f2:e4:17:33:b3:c7:ec:
4d:d2:21:45:32:1e:b0:f5:81:45:35:77:93:43:0b:2c:7e:1f:
1d:4c:8a:44:f0:ac:93:c7:73:11:e2:37:02:59:7b:23:db:a9:
e5:bb:e4:b2:7a:c1:f6:24:87:f7:12:a1:0e:1c:5d:29:bd:a8:
95:50:fc:39
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEJTRuLFzyf3FEd0wWaCR8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNjAwY2JhZmQyNmZlZTUwNjRmYzg5ZjMwMWRmYzhlM2Mx
ZDNjYTUwHhcNMjQwMTAxMDgzMDIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzQ3OTMxNTFiZTc1OWZhYjA1NWEyYTIxOTJkMzU2MWE1MjU3NzViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApY7VCo+kcyK1AIzsOlDazTcGfnkH
7N919DbVJNM3+u5s61BOQmDOajZE+z3X3BM8bq4LM5E/KqpksT+22I+9UZDwECeR
HACgRNxuHzfuAQWv/MhrBUWQsip1Lh75xiUIMFpngfXqdz9YB65x21oztpUOa8fQ
msE0sh0MIOvZT1+tqvc2A4aYMUoqKsBHdNVxNmqpFHxEEwWCNhl/Exb7UZyhU2mV
NeT7+EtjFQZXJKX6zXp8jEc15XkSeopoTue370W+Qq5ygh1egPXOWX3fpkNJmnei
gVoukyZvHAPIp0+XL8ySDURu1bMCgcpHU8cjG7d4mZ0yOOuSt4DHaKjNbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLxHkxUb51n6sFWiohktNWGlJXdbMB8GA1UdIwQY
MBaAFNNgDLr9Jv7lBk/InzAd/I48HTylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDJBTXV2MG1fdVVHVDhpZk1CMzhqandkUEtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9iNzA2NTgtZTFkYy00OTQ0LWEwNmIt
MWM2ODBhZGY3YTI2LzEvdkVlVEZSdm5XZnF3VmFLaUdTMDFZYVVsZDFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9iNzA2NTgtZTFkYy00OTQ0LWEwNmItMWM2ODBhZGY3YTI2
LzEvMDJBTXV2MG1fdVVHVDhpZk1CMzhqandkUEtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZm0MA0G
CSqGSIb3DQEBCwUAA4IBAQAGiaN6T8IVNprnnXNUKWTse30z7gSi1kbVUYJrd/ap
eFeiQ34KRXJ6ylJgzocqG4jFTebncKN0sPo2X9ATYLF+40M/VyPXIz+6g/WFKB6p
sZsWoswQxUsYvaBuo/1lxaed8jVlUDskFONN+ArkQN9tlcdf4dcmt2XKjRl88qKD
J+0tTjOjyXYZQGvO0IXt/P+vPtXSTLUU+W9F6ffhGofy4EoW+AH/+tyiTgFNiOGd
iKtH+vL6O+dP1XJirNZ38/LkFzOzx+xN0iFFMh6w9YFFNXeTQwssfh8dTIpE8KyT
x3MR4jcCWXsj26nlu+SyesH2JIf3EqEOHF0pvaiVUPw5
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:08:29 2024 by rpki-client on console-fra.rpki-client.org