Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/vMirVsoIngVnP1qrRL1xUmGJz1I.roa
File: vMirVsoIngVnP1qrRL1xUmGJz1I.roa (raw, json)
Hash identifier: V5cwZ3tT3QHR7SZluH0/tf8n0UWteGfjTrtwdBo+Ln8=
Subject key identifier: BC:C8:AB:56:CA:08:9E:05:67:3F:5A:AB:44:BD:71:52:61:89:CF:52
Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Certificate serial: 018DB22B0B37F8127B179E86935C909826F0
Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/vMirVsoIngVnP1qrRL1xUmGJz1I.roa
Signing time: Fri 16 Feb 2024 13:46:21 +0000
ROA not before: Fri 16 Feb 2024 13:46:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 92.60.74.0/24 maxlen: 24
92.60.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b2:2b:0b:37:f8:12:7b:17:9e:86:93:5c:90:98:26:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Validity
Not Before: Feb 16 13:46:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bcc8ab56ca089e05673f5aab44bd71526189cf52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9c:f4:71:53:e8:9c:3a:db:4c:02:21:a4:47:
2b:9c:02:4a:5b:0f:c0:e3:cb:20:d4:86:fc:cc:a5:
f5:d4:da:25:2c:80:8e:05:41:49:6c:eb:7b:43:b8:
5e:2c:5a:3a:85:58:c7:03:55:47:31:81:23:e8:d1:
4d:9c:35:d1:62:ee:30:2a:24:77:a4:d6:48:97:5b:
15:71:ac:82:8c:c5:9d:f4:ca:ee:ff:27:7f:48:79:
10:59:1c:8c:3b:4b:41:d7:e7:b1:33:07:69:e9:3d:
9b:15:77:d4:f1:26:04:e1:15:0f:f8:6c:6c:e8:09:
ab:23:df:6e:02:26:df:21:6b:af:ff:b4:9a:e8:b6:
f4:8c:55:15:02:49:93:71:73:e6:f9:a0:77:34:32:
2e:db:47:d7:63:7d:91:42:20:08:e3:e5:f1:fc:6f:
5d:e3:b9:98:c2:68:c3:a4:3f:4a:62:9e:66:c6:1f:
e9:67:8b:5c:c0:24:98:b2:81:2e:d1:a0:2a:71:62:
70:b6:e2:e8:ae:a0:22:42:3a:08:cd:fa:82:34:16:
1f:a6:38:3d:4e:71:37:c9:14:13:14:e8:5e:d5:ff:
66:bc:03:cd:f6:1c:0d:6e:d2:18:42:e6:34:05:55:
60:af:8d:66:4b:41:f0:9f:6f:6e:06:73:19:2b:1a:
7a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C8:AB:56:CA:08:9E:05:67:3F:5A:AB:44:BD:71:52:61:89:CF:52
X509v3 Authority Key Identifier:
keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/vMirVsoIngVnP1qrRL1xUmGJz1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.60.74.0/23
Signature Algorithm: sha256WithRSAEncryption
94:81:b1:f2:d0:53:cb:07:40:8e:2a:66:e0:6b:93:e9:67:83:
86:cd:d5:81:a5:1e:2c:30:6a:9f:dc:ab:90:1e:f3:2c:1b:8a:
29:5a:70:0d:a7:ef:1f:02:d1:ae:ff:09:b6:5d:da:54:3c:31:
68:98:4f:91:46:4a:70:fb:65:12:41:8b:d8:a4:41:c5:7c:54:
bb:00:27:a9:ea:83:89:67:f7:60:2a:8c:21:84:b8:a8:10:95:
c5:ff:d7:28:2b:48:2c:0d:a0:6f:58:f6:20:9e:57:37:26:f7:
cc:a7:13:8b:8d:84:1d:06:cd:b5:27:ed:e6:9d:03:02:a1:43:
4a:2d:9e:72:38:c0:50:1f:f1:43:49:92:2d:ae:8c:21:f0:ab:
23:83:1d:a2:c9:36:e1:35:c4:c6:a7:3a:ad:e4:ea:2c:87:03:
19:c2:e8:c2:2f:80:03:5e:63:9d:8a:1e:4d:88:41:3b:6c:c7:
f2:8c:c4:f6:35:48:bf:cf:1a:ce:4e:79:32:81:32:7b:a0:1b:
65:0e:98:6b:2b:d8:23:a9:c2:0f:2a:8f:dc:f7:ae:9b:7c:b9:
79:40:78:2f:c6:57:13:16:36:9d:8d:44:b2:91:f8:d0:92:66:
f6:9b:17:86:79:a2:17:41:ef:4f:1d:c4:49:ec:b8:85:17:bb:
f1:30:bd:0a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY2yKws3+BJ7F56Gk1yQmCbwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZGRlNzFiNDFiZmZiMWI1MTZlMDdiMGM2MTM5MWJkZjRk
M2JmMTEwHhcNMjQwMjE2MTM0NjIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiY2M4YWI1NmNhMDg5ZTA1NjczZjVhYWI0NGJkNzE1MjYxODljZjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZz0cVPonDrbTAIhpEcrnAJKWw/A
48sg1Ib8zKX11NolLICOBUFJbOt7Q7heLFo6hVjHA1VHMYEj6NFNnDXRYu4wKiR3
pNZIl1sVcayCjMWd9Mru/yd/SHkQWRyMO0tB1+exMwdp6T2bFXfU8SYE4RUP+Gxs
6AmrI99uAibfIWuv/7Sa6Lb0jFUVAkmTcXPm+aB3NDIu20fXY32RQiAI4+Xx/G9d
47mYwmjDpD9KYp5mxh/pZ4tcwCSYsoEu0aAqcWJwtuLorqAiQjoIzfqCNBYfpjg9
TnE3yRQTFOhe1f9mvAPN9hwNbtIYQuY0BVVgr41mS0Hwn29uBnMZKxp6FQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLzIq1bKCJ4FZz9aq0S9cVJhic9SMB8GA1UdIwQY
MBaAFEDd5xtBv/sbUW4HsMYTkb30078RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYt
MmJhZGNlNDY2ODUzLzEvdk1pclZzb0luZ1ZuUDFxclJMMXhVbUdKejFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYtMmJhZGNlNDY2ODUz
LzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXDxKMA0G
CSqGSIb3DQEBCwUAA4IBAQCUgbHy0FPLB0COKmbga5PpZ4OGzdWBpR4sMGqf3KuQ
HvMsG4opWnANp+8fAtGu/wm2XdpUPDFomE+RRkpw+2USQYvYpEHFfFS7ACep6oOJ
Z/dgKowhhLioEJXF/9coK0gsDaBvWPYgnlc3JvfMpxOLjYQdBs21J+3mnQMCoUNK
LZ5yOMBQH/FDSZItrowh8Ksjgx2iyTbhNcTGpzqt5OoshwMZwujCL4ADXmOdih5N
iEE7bMfyjMT2NUi/zxrOTnkygTJ7oBtlDphrK9gjqcIPKo/c966bfLl5QHgvxlcT
FjadjUSykfjQkmb2mxeGeaIXQe9PHcRJ7LiFF7vxML0K
-----END CERTIFICATE-----
Generated at Thu May 2 22:21:58 2024 by rpki-client on console-fra.rpki-client.org