Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/VZqtIgtIRw8CRv6rg_uydViN3wk.roa
File: VZqtIgtIRw8CRv6rg_uydViN3wk.roa (raw, json)
Hash identifier: 0/BGZnzO5An44dF83j2WcHigpW++X7L2fBo2ic5EMcg=
Subject key identifier: 55:9A:AD:22:0B:48:47:0F:02:46:FE:AB:83:FB:B2:75:58:8D:DF:09
Certificate issuer: /CN=ad109dee6fbdc256df911460ccc915d066a8ff8b
Certificate serial: 018CC726FAAF9EFEC46EF3C765C80182AB28
Authority key identifier: AD:10:9D:EE:6F:BD:C2:56:DF:91:14:60:CC:C9:15:D0:66:A8:FF:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/VZqtIgtIRw8CRv6rg_uydViN3wk.roa
Signing time: Mon 01 Jan 2024 22:31:09 +0000
ROA not before: Mon 01 Jan 2024 22:31:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60136
IP address blocks: 84.20.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:fa:af:9e:fe:c4:6e:f3:c7:65:c8:01:82:ab:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad109dee6fbdc256df911460ccc915d066a8ff8b
Validity
Not Before: Jan 1 22:31:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=559aad220b48470f0246feab83fbb275588ddf09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:db:f5:de:96:1d:68:ba:b0:f1:c3:d1:47:50:
90:4d:37:30:53:f4:8c:19:88:08:01:e3:5b:c3:d1:
fa:9b:3e:61:f9:d5:5c:60:c0:45:77:dd:da:15:29:
23:de:84:70:66:0c:27:ac:57:48:5d:71:23:cf:d1:
d2:34:17:df:0e:d9:58:34:72:1b:62:94:58:6e:20:
d8:d7:20:ea:e4:45:24:ff:99:ff:93:76:bd:30:26:
32:13:05:1c:fb:b0:61:7d:b2:b9:8d:d6:8d:37:58:
2a:1e:d9:43:73:b2:85:f5:75:e6:68:53:6e:0a:65:
09:1b:2d:bd:73:ca:9b:93:a2:6c:af:6b:4a:36:c7:
9d:9e:b0:49:ea:33:a8:29:60:a6:a2:e8:c4:fb:8a:
10:da:2e:fc:40:18:65:c0:81:2e:a4:a3:8b:ef:47:
0d:f8:9e:f4:e6:87:71:07:a5:39:84:99:bc:98:c6:
a0:df:1b:0e:aa:c5:a4:32:ec:99:56:a8:e6:26:5a:
67:b9:dc:20:22:7f:ea:da:e6:ba:4d:55:b5:23:6f:
51:94:a9:41:77:8b:4b:96:0c:b7:0b:60:c9:aa:f8:
41:5c:70:2f:71:88:91:be:9a:41:e7:8e:76:5a:b3:
cf:2f:8c:74:bd:c0:1e:64:cb:b2:18:80:e4:44:ef:
e6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:9A:AD:22:0B:48:47:0F:02:46:FE:AB:83:FB:B2:75:58:8D:DF:09
X509v3 Authority Key Identifier:
keyid:AD:10:9D:EE:6F:BD:C2:56:DF:91:14:60:CC:C9:15:D0:66:A8:FF:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/VZqtIgtIRw8CRv6rg_uydViN3wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.20.77.0/24
Signature Algorithm: sha256WithRSAEncryption
34:1e:f9:a2:e1:d5:26:55:45:e2:f8:e3:0e:77:2c:09:a0:9c:
6c:ca:4e:e2:72:8e:9e:2f:a5:1f:8e:da:67:4b:bd:8d:71:da:
3d:38:ed:42:80:1c:e5:09:86:f8:eb:39:09:3e:32:7d:ee:68:
d5:b2:05:25:5f:1b:57:75:c8:f4:1f:f8:87:95:44:ee:f2:60:
b2:7d:db:39:0c:59:9d:c5:da:4f:1f:f1:7b:ba:cd:ce:e0:58:
d2:1d:8c:51:ee:75:4f:59:62:33:89:d2:c6:a5:17:10:b9:87:
40:fd:16:82:c5:bc:9c:16:ce:65:5c:0a:52:e1:1e:3e:bf:e9:
8e:76:24:3d:f9:f9:b2:c4:85:99:7d:e3:1d:d7:48:20:c4:ea:
e1:dd:fd:9c:1d:bf:d2:41:44:70:40:9d:4d:56:94:5d:19:71:
72:f2:2d:30:77:e4:8b:e4:28:23:2d:a8:ac:27:fd:86:1f:d5:
d0:ea:4d:e8:82:2f:49:09:a8:77:4f:5b:90:0e:14:8a:54:23:
67:a8:c5:74:82:99:6b:aa:30:cc:ee:78:e1:9c:d2:7c:e6:1f:
04:02:78:b0:32:68:75:18:14:33:b9:81:f6:e1:09:0a:ba:f4:
92:cf:75:98:87:0d:15:d4:b2:63:5e:0f:6a:a1:da:24:40:9f:
7a:94:81:13
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHJvqvnv7EbvPHZcgBgqsoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMTA5ZGVlNmZiZGMyNTZkZjkxMTQ2MGNjYzkxNWQwNjZh
OGZmOGIwHhcNMjQwMTAxMjIzMTA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTlhYWQyMjBiNDg0NzBmMDI0NmZlYWI4M2ZiYjI3NTU4OGRkZjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9v13pYdaLqw8cPRR1CQTTcwU/SM
GYgIAeNbw9H6mz5h+dVcYMBFd93aFSkj3oRwZgwnrFdIXXEjz9HSNBffDtlYNHIb
YpRYbiDY1yDq5EUk/5n/k3a9MCYyEwUc+7BhfbK5jdaNN1gqHtlDc7KF9XXmaFNu
CmUJGy29c8qbk6Jsr2tKNsednrBJ6jOoKWCmoujE+4oQ2i78QBhlwIEupKOL70cN
+J705odxB6U5hJm8mMag3xsOqsWkMuyZVqjmJlpnudwgIn/q2ua6TVW1I29RlKlB
d4tLlgy3C2DJqvhBXHAvcYiRvppB5452WrPPL4x0vcAeZMuyGIDkRO/mTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFWarSILSEcPAkb+q4P7snVYjd8JMB8GA1UdIwQY
MBaAFK0Qne5vvcJW35EUYMzJFdBmqP+LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclJDZDdtLTl3bGJma1JSZ3pNa1YwR2FvXzRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi80NjE1YmUtZTU2Ni00MjUzLTgzZWYt
ZjY2MjZiNjMzODNlLzEvVlpxdElndElSdzhDUnY2cmdfdXlkVmlOM3drLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi80NjE1YmUtZTU2Ni00MjUzLTgzZWYtZjY2MjZiNjMzODNl
LzEvclJDZDdtLTl3bGJma1JSZ3pNa1YwR2FvXzRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVBRNMA0G
CSqGSIb3DQEBCwUAA4IBAQA0Hvmi4dUmVUXi+OMOdywJoJxsyk7ico6eL6Ufjtpn
S72Ncdo9OO1CgBzlCYb46zkJPjJ97mjVsgUlXxtXdcj0H/iHlUTu8mCyfds5DFmd
xdpPH/F7us3O4FjSHYxR7nVPWWIzidLGpRcQuYdA/RaCxbycFs5lXApS4R4+v+mO
diQ9+fmyxIWZfeMd10ggxOrh3f2cHb/SQURwQJ1NVpRdGXFy8i0wd+SL5CgjLais
J/2GH9XQ6k3ogi9JCah3T1uQDhSKVCNnqMV0gplrqjDM7njhnNJ85h8EAniwMmh1
GBQzuYH24QkKuvSSz3WYhw0V1LJjXg9qodokQJ96lIET
-----END CERTIFICATE-----
Generated at Fri Jun 7 21:43:23 2024 by rpki-client on console-fra.rpki-client.org