Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/VbgGgvbnC__FcAQyxwyjs7zxyXA.roa
File: VbgGgvbnC__FcAQyxwyjs7zxyXA.roa (raw, json)
Hash identifier: XDrhzGKE52q/yRRBw3iQRQDzzvfiMGxkpVkhbQioPZM=
Subject key identifier: 55:B8:06:82:F6:E7:0B:FF:C5:70:04:32:C7:0C:A3:B3:BC:F1:C9:70
Certificate issuer: /CN=2f08df165d497d7a9b99e0e71f15ba07d184615a
Certificate serial: 018CC34898744327E07B13FC2784860FD8C1
Authority key identifier: 2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/VbgGgvbnC__FcAQyxwyjs7zxyXA.roa
Signing time: Mon 01 Jan 2024 04:29:23 +0000
ROA not before: Mon 01 Jan 2024 04:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1239
IP address blocks: 193.36.179.0/24 maxlen: 24
193.36.185.0/24 maxlen: 24
193.36.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Oct 2024 14:44:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:98:74:43:27:e0:7b:13:fc:27:84:86:0f:d8:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f08df165d497d7a9b99e0e71f15ba07d184615a
Validity
Not Before: Jan 1 04:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55b80682f6e70bffc5700432c70ca3b3bcf1c970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:27:fd:e2:31:e7:48:4c:95:d5:cd:0c:4b:72:
3f:5e:f6:d1:9d:a3:1c:79:4b:a8:4c:81:28:f6:7b:
67:ee:f5:09:37:f8:94:3a:98:b0:cb:7e:59:62:20:
db:15:46:cb:94:ce:f9:c9:2c:83:aa:c9:e3:78:7b:
28:f2:34:43:71:f3:f8:e0:00:28:f9:98:1a:6b:cd:
d3:79:74:84:fd:a8:fd:06:74:d1:7c:3d:39:0f:49:
93:e4:b2:ba:74:51:4f:df:31:5c:cb:73:d9:55:50:
b1:a9:85:d2:aa:6a:e6:db:de:74:ab:57:d3:d9:76:
3f:d6:70:86:d6:e2:20:d7:37:df:36:5f:5d:2d:b4:
8f:59:08:d0:70:88:41:3b:d0:9b:e8:84:bb:d2:8e:
99:c8:e9:3c:c0:b3:2a:41:47:18:25:8a:d4:54:8f:
a0:32:a5:02:ad:1a:28:19:19:ee:8a:b1:50:af:83:
4c:64:cd:09:b1:c6:fa:2a:b3:79:90:66:a0:b4:3c:
65:b4:a1:a7:7c:d3:7b:1a:81:19:6b:59:5a:3f:a3:
11:fc:ba:0c:78:c5:65:ba:cd:e3:46:f6:da:a1:fa:
d1:1f:37:97:d3:8f:90:c1:9d:44:c0:f7:51:c5:a2:
bf:1b:f5:f8:2e:70:3a:aa:70:40:52:36:8f:80:e1:
a2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B8:06:82:F6:E7:0B:FF:C5:70:04:32:C7:0C:A3:B3:BC:F1:C9:70
X509v3 Authority Key Identifier:
keyid:2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/VbgGgvbnC__FcAQyxwyjs7zxyXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.179.0/24
193.36.185.0/24
193.36.187.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:55:57:57:33:33:58:1e:4b:7f:9a:20:29:42:88:83:46:1c:
b6:0f:44:92:82:c6:27:77:20:e8:cf:af:34:6d:7d:10:79:29:
4c:35:c5:9b:83:83:3e:ea:47:ba:11:01:eb:fb:f4:99:64:a4:
be:82:42:bb:3e:07:70:25:17:12:f0:12:68:bd:01:0b:fb:4c:
a5:0f:85:83:6f:2b:bd:5e:54:db:59:dc:49:0b:46:9b:fa:b1:
27:dd:f8:88:d8:c1:44:45:aa:fc:c4:1f:a9:25:11:f4:ad:3c:
22:ce:07:14:e1:4a:a6:0a:67:0e:c0:ac:e5:76:86:82:85:dc:
61:0c:58:19:9f:c9:cb:94:29:56:36:b7:37:b9:72:e5:f9:41:
da:ab:09:c7:59:23:b9:c9:a8:f9:00:37:74:d0:ff:88:c3:b5:
92:49:87:8b:a6:1d:17:e8:b4:b6:61:6f:92:ff:7b:85:ee:2e:
77:05:a8:b8:37:19:79:96:03:ee:52:89:e5:49:3a:ed:cc:5a:
e4:b9:32:47:0d:fb:1a:d2:35:0a:56:4c:c9:19:2e:34:84:c7:
a0:9b:0a:50:04:65:32:1c:52:da:1f:f1:00:26:2e:a6:28:a3:
fc:2a:2c:79:dc:62:cd:91:f7:5c:5e:be:4b:0a:a1:21:00:6f:
3f:62:f2:cc
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzDSJh0QyfgexP8J4SGD9jBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMDhkZjE2NWQ0OTdkN2E5Yjk5ZTBlNzFmMTViYTA3ZDE4
NDYxNWEwHhcNMjQwMTAxMDQyOTIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NWI4MDY4MmY2ZTcwYmZmYzU3MDA0MzJjNzBjYTNiM2JjZjFjOTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqif94jHnSEyV1c0MS3I/XvbRnaMc
eUuoTIEo9ntn7vUJN/iUOpiwy35ZYiDbFUbLlM75ySyDqsnjeHso8jRDcfP44AAo
+Zgaa83TeXSE/aj9BnTRfD05D0mT5LK6dFFP3zFcy3PZVVCxqYXSqmrm2950q1fT
2XY/1nCG1uIg1zffNl9dLbSPWQjQcIhBO9Cb6IS70o6ZyOk8wLMqQUcYJYrUVI+g
MqUCrRooGRnuirFQr4NMZM0Jscb6KrN5kGagtDxltKGnfNN7GoEZa1laP6MR/LoM
eMVlus3jRvbaofrRHzeX04+QwZ1EwPdRxaK/G/X4LnA6qnBAUjaPgOGiJwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFW4BoL25wv/xXAEMscMo7O88clwMB8GA1UdIwQY
MBaAFC8I3xZdSX16m5ng5x8VugfRhGFaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHdqZkZsMUpmWHFibWVEbkh4VzZCOUdFWVZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi84ZDAzNjAtZmJjMi00NmViLTlhYzIt
Y2FjM2U0MmFlMDNmLzEvVmJnR2d2Ym5DX19GY0FReXh3eWpzN3p4eVhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi84ZDAzNjAtZmJjMi00NmViLTlhYzItY2FjM2U0MmFlMDNm
LzEvTHdqZkZsMUpmWHFibWVEbkh4VzZCOUdFWVZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwSSzAwQA
wSS5AwQAwSS7MA0GCSqGSIb3DQEBCwUAA4IBAQB9VVdXMzNYHkt/miApQoiDRhy2
D0SSgsYndyDoz680bX0QeSlMNcWbg4M+6ke6EQHr+/SZZKS+gkK7PgdwJRcS8BJo
vQEL+0ylD4WDbyu9XlTbWdxJC0ab+rEn3fiI2MFERar8xB+pJRH0rTwizgcU4Uqm
CmcOwKzldoaChdxhDFgZn8nLlClWNrc3uXLl+UHaqwnHWSO5yaj5ADd00P+Iw7WS
SYeLph0X6LS2YW+S/3uF7i53Bai4Nxl5lgPuUonlSTrtzFrkuTJHDfsa0jUKVkzJ
GS40hMegmwpQBGUyHFLaH/EAJi6mKKP8Kix53GLNkfdcXr5LCqEhAG8/YvLM
-----END CERTIFICATE-----
Generated at Tue Oct 22 18:58:32 2024 by rpki-client on console-fra.rpki-client.org