Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/vLUS4WuB7jDQYA10JeGLyqyjmuA.roa
File: vLUS4WuB7jDQYA10JeGLyqyjmuA.roa (raw, json)
Hash identifier: sG7OVyhSC+ZzI4sGxvfm6ZSxCkae10/WjyKPFfiQuGU=
Subject key identifier: BC:B5:12:E1:6B:81:EE:30:D0:60:0D:74:25:E1:8B:CA:AC:A3:9A:E0
Certificate issuer: /CN=576567334e035639dd7ccb4976a9b270f726321d
Certificate serial: 018CC8DD37279B6B484639C249FD796D0C51
Authority key identifier: 57:65:67:33:4E:03:56:39:DD:7C:CB:49:76:A9:B2:70:F7:26:32:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V2VnM04DVjndfMtJdqmycPcmMh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/vLUS4WuB7jDQYA10JeGLyqyjmuA.roa
Signing time: Tue 02 Jan 2024 06:29:49 +0000
ROA not before: Tue 02 Jan 2024 06:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35271
IP address blocks: 93.185.192.0/20 maxlen: 20
31.10.64.0/18 maxlen: 18
2a03:700::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/V2VnM04DVjndfMtJdqmycPcmMh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dd:37:27:9b:6b:48:46:39:c2:49:fd:79:6d:0c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576567334e035639dd7ccb4976a9b270f726321d
Validity
Not Before: Jan 2 06:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bcb512e16b81ee30d0600d7425e18bcaaca39ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:32:86:8a:1b:c2:a7:f1:45:a1:c8:dc:c1:1c:
12:f8:d1:35:a4:2a:32:8a:53:7f:37:bd:c4:47:19:
1f:d2:06:6c:92:01:c4:50:50:f2:1e:8b:db:7c:ce:
b7:f0:55:d0:5b:b4:4a:0b:92:5c:d6:63:cc:b4:3e:
e3:7d:c3:90:4c:55:ab:dd:4f:12:3b:44:42:a9:6f:
74:59:40:40:cb:ac:c1:db:24:63:c0:ba:4b:07:3b:
6e:47:d0:69:18:38:8a:3b:27:29:9a:b6:f3:42:88:
36:a6:ad:b4:30:1d:d5:44:7c:63:8e:04:4f:79:8f:
5c:4d:44:10:35:20:98:9d:3b:c8:8c:10:a1:85:38:
f2:48:74:cc:51:cc:10:c8:69:56:b9:10:8a:9f:c8:
58:ae:ce:1e:e0:e3:7e:52:9d:c7:65:01:f0:64:c5:
cd:b4:f9:40:3a:18:5d:31:76:c4:ce:16:9d:ca:04:
d9:65:cc:e8:50:9f:92:27:31:42:15:52:75:4a:31:
76:5b:78:01:4e:c4:a8:e1:a5:bc:62:d9:76:03:4c:
d6:c0:2c:6f:86:7b:bb:0a:f9:b8:37:0d:c6:ff:cd:
eb:9b:14:cd:1a:ab:f4:82:9a:04:03:83:de:84:d5:
1b:28:9e:3a:d1:62:ed:68:fb:d9:08:17:0e:fa:35:
f4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B5:12:E1:6B:81:EE:30:D0:60:0D:74:25:E1:8B:CA:AC:A3:9A:E0
X509v3 Authority Key Identifier:
keyid:57:65:67:33:4E:03:56:39:DD:7C:CB:49:76:A9:B2:70:F7:26:32:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2VnM04DVjndfMtJdqmycPcmMh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/vLUS4WuB7jDQYA10JeGLyqyjmuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.10.64.0/18
93.185.192.0/20
IPv6:
2a03:700::/32
Signature Algorithm: sha256WithRSAEncryption
21:13:08:6c:43:f3:ab:d4:cf:bc:ed:6c:95:13:a6:b4:91:f8:
9d:b5:1a:6b:42:93:b6:9f:70:ae:15:00:cd:37:48:97:5f:31:
a9:f8:e6:16:e9:2d:5a:cc:49:ea:e2:64:8c:90:83:ae:26:36:
51:73:85:e2:a9:c7:4b:ab:67:a3:13:20:8f:e4:71:06:d8:60:
aa:f7:95:a7:5c:53:7b:2a:1f:4c:9f:9d:1b:95:7b:f5:ad:ea:
76:43:a7:24:e8:46:49:fc:b3:9a:e5:68:f5:d1:d9:65:91:4f:
02:58:b9:1f:84:b4:55:3d:48:6b:0e:96:46:f7:6d:70:c8:3a:
f8:ab:db:24:94:37:58:b9:f4:e2:c2:69:9c:61:76:d1:ba:24:
17:b6:15:7d:7d:1d:85:9d:97:17:b5:fb:f9:d5:76:f9:63:5d:
3d:48:30:87:63:44:ff:dd:00:bf:72:40:03:72:68:b8:cb:55:
70:76:d9:78:ef:88:36:62:a0:ed:68:5d:47:bf:33:4a:89:64:
23:e5:c3:96:7c:6a:5f:e8:96:e1:9d:a9:6d:eb:54:a1:44:da:
85:f9:65:19:94:b1:4e:ff:f6:88:39:1a:50:08:29:06:a4:bc:
c9:af:fe:e8:45:e8:b3:c1:66:00:19:4d:f8:69:ab:10:11:bd:
cc:3e:b0:a1
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYzI3Tcnm2tIRjnCSf15bQxRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NjU2NzMzNGUwMzU2MzlkZDdjY2I0OTc2YTliMjcwZjcy
NjMyMWQwHhcNMjQwMTAyMDYyOTQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiY2I1MTJlMTZiODFlZTMwZDA2MDBkNzQyNWUxOGJjYWFjYTM5YWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDKGihvCp/FFocjcwRwS+NE1pCoy
ilN/N73ERxkf0gZskgHEUFDyHovbfM638FXQW7RKC5Jc1mPMtD7jfcOQTFWr3U8S
O0RCqW90WUBAy6zB2yRjwLpLBztuR9BpGDiKOycpmrbzQog2pq20MB3VRHxjjgRP
eY9cTUQQNSCYnTvIjBChhTjySHTMUcwQyGlWuRCKn8hYrs4e4ON+Up3HZQHwZMXN
tPlAOhhdMXbEzhadygTZZczoUJ+SJzFCFVJ1SjF2W3gBTsSo4aW8Ytl2A0zWwCxv
hnu7Cvm4Nw3G/83rmxTNGqv0gpoEA4PehNUbKJ460WLtaPvZCBcO+jX0KwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFLy1EuFrge4w0GANdCXhi8qso5rgMB8GA1UdIwQY
MBaAFFdlZzNOA1Y53XzLSXapsnD3JjIdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjJWbk0wNERWam5kZk10SmRxbXljUGNtTWgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC83ZTk4NjctYzUzNC00NjhjLThkNWUt
ZTRmNjRiMGRlMzZhLzEvdkxVUzRXdUI3akRRWUExMEplR0x5cXlqbXVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC83ZTk4NjctYzUzNC00NjhjLThkNWUtZTRmNjRiMGRlMzZh
LzEvVjJWbk0wNERWam5kZk10SmRxbXljUGNtTWgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQGHwpAAwQE
XbnAMA0EAgACMAcDBQAqAwcAMA0GCSqGSIb3DQEBCwUAA4IBAQAhEwhsQ/Or1M+8
7WyVE6a0kfidtRprQpO2n3CuFQDNN0iXXzGp+OYW6S1azEnq4mSMkIOuJjZRc4Xi
qcdLq2ejEyCP5HEG2GCq95WnXFN7Kh9Mn50blXv1rep2Q6ck6EZJ/LOa5Wj10dll
kU8CWLkfhLRVPUhrDpZG921wyDr4q9sklDdYufTiwmmcYXbRuiQXthV9fR2FnZcX
tfv51Xb5Y109SDCHY0T/3QC/ckADcmi4y1Vwdtl474g2YqDtaF1HvzNKiWQj5cOW
fGpf6Jbhnalt61ShRNqF+WUZlLFO//aIORpQCCkGpLzJr/7oReizwWYAGU34aasQ
Eb3MPrCh
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:58:50 2024 by rpki-client on console-ams.rpki-client.org