Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/bLxaVfkYZpagy8yJ-LzbhMHDoI0.roa
File: bLxaVfkYZpagy8yJ-LzbhMHDoI0.roa (raw, json)
Hash identifier: 6W9N+L7CjZj7tV1Lip9S2j7UWzt1UoAfdp6ilOPy4Vo=
Subject key identifier: 6C:BC:5A:55:F9:18:66:96:A0:CB:CC:89:F8:BC:DB:84:C1:C3:A0:8D
Certificate issuer: /CN=553f4bc416639a7e1b6c4f0199e02e3160a1e642
Certificate serial: 018CC94BF121B93841100F845A7E4B90A7B1
Authority key identifier: 55:3F:4B:C4:16:63:9A:7E:1B:6C:4F:01:99:E0:2E:31:60:A1:E6:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/bLxaVfkYZpagy8yJ-LzbhMHDoI0.roa
Signing time: Tue 02 Jan 2024 08:30:46 +0000
ROA not before: Tue 02 Jan 2024 08:30:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43108
IP address blocks: 185.242.184.0/24 maxlen: 24
2a13:6000::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 20:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4b:f1:21:b9:38:41:10:0f:84:5a:7e:4b:90:a7:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553f4bc416639a7e1b6c4f0199e02e3160a1e642
Validity
Not Before: Jan 2 08:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6cbc5a55f9186696a0cbcc89f8bcdb84c1c3a08d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ee:06:d9:b9:00:d5:d2:06:43:a9:9f:ca:c1:
a3:19:1d:1c:0f:2d:eb:b8:71:54:47:78:ce:92:63:
50:f7:4e:5c:82:e5:af:9e:98:c9:d9:77:23:16:98:
05:1d:cd:62:5f:d6:87:6e:d1:98:4c:6b:99:77:4a:
c6:70:09:cb:41:cb:cf:34:5a:26:6f:a3:55:df:8c:
16:7f:52:97:16:eb:77:b2:84:df:7c:36:58:44:cd:
68:2a:d7:d7:d8:c0:b2:2a:4e:e2:c7:37:90:f2:94:
47:58:36:06:13:9f:1e:69:bb:d1:91:ad:05:cc:f2:
24:29:86:be:d9:1c:86:71:8e:90:5b:f7:ed:5b:b6:
6d:b4:a0:8d:8a:97:cc:d4:cd:f1:c2:fb:91:c2:41:
03:1b:66:bf:a4:b0:f4:fd:ad:b2:2d:44:ee:2c:37:
63:3e:ca:67:67:41:b2:6f:09:a0:4c:bb:25:4d:dc:
d8:84:a3:b1:53:6e:39:de:9a:f0:22:6f:03:72:fc:
a3:35:93:f0:d5:fe:22:cd:22:87:de:71:20:df:7c:
13:4b:9e:51:0d:d1:d0:ce:85:1b:17:64:62:f0:a4:
7c:cc:e0:89:8d:eb:09:db:7c:aa:29:56:29:2e:dd:
61:49:95:8e:48:1e:a2:b0:6f:18:01:4a:ec:b7:7f:
98:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:BC:5A:55:F9:18:66:96:A0:CB:CC:89:F8:BC:DB:84:C1:C3:A0:8D
X509v3 Authority Key Identifier:
keyid:55:3F:4B:C4:16:63:9A:7E:1B:6C:4F:01:99:E0:2E:31:60:A1:E6:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/bLxaVfkYZpagy8yJ-LzbhMHDoI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.184.0/24
IPv6:
2a13:6000::/29
Signature Algorithm: sha256WithRSAEncryption
59:c8:05:19:7c:da:9e:7c:e3:ac:54:d7:c8:a3:fd:49:e6:da:
c5:fe:7c:3a:03:27:b8:cb:39:f6:7b:9a:39:c6:57:ac:1b:46:
56:6c:1e:ea:eb:76:3f:55:de:e2:83:f3:62:c0:a2:c0:d9:db:
9f:19:33:22:d7:31:78:b5:60:b2:56:b1:76:f6:be:cd:65:a5:
25:16:23:87:b2:3d:d9:c1:87:e1:1e:ce:b0:89:ca:9a:bb:8f:
61:a2:3c:32:f2:39:2a:5a:a6:1e:f8:d1:6e:e3:2f:e4:66:62:
ca:80:5f:ca:9d:ba:c4:c3:ed:45:33:c7:9e:8d:78:c0:62:23:
27:1d:36:9a:62:1d:31:da:51:b7:c6:13:b3:00:f9:48:ef:76:
9b:99:ae:59:56:45:07:72:08:e8:99:32:57:4b:64:ec:59:27:
69:a9:0a:e3:5a:d1:6a:c8:3b:e1:5a:c6:53:8e:d7:0a:f9:b7:
8d:40:9f:b7:1b:70:60:53:58:62:f4:84:69:7c:e1:55:30:e1:
07:ce:0f:28:51:04:b8:e2:6b:ac:d9:a8:b3:81:76:55:77:1f:
0c:18:05:dd:56:11:f7:f2:6a:35:16:76:cd:de:a5:5a:3d:fb:
02:31:12:fe:93:91:75:20:de:76:34:24:1f:a1:5d:6e:71:e5:
a3:22:b2:65
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzJS/EhuThBEA+EWn5LkKexMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1M2Y0YmM0MTY2MzlhN2UxYjZjNGYwMTk5ZTAyZTMxNjBh
MWU2NDIwHhcNMjQwMTAyMDgzMDQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Y2JjNWE1NWY5MTg2Njk2YTBjYmNjODlmOGJjZGI4NGMxYzNhMDhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAju4G2bkA1dIGQ6mfysGjGR0cDy3r
uHFUR3jOkmNQ905cguWvnpjJ2XcjFpgFHc1iX9aHbtGYTGuZd0rGcAnLQcvPNFom
b6NV34wWf1KXFut3soTffDZYRM1oKtfX2MCyKk7ixzeQ8pRHWDYGE58eabvRka0F
zPIkKYa+2RyGcY6QW/ftW7ZttKCNipfM1M3xwvuRwkEDG2a/pLD0/a2yLUTuLDdj
PspnZ0GybwmgTLslTdzYhKOxU2453prwIm8DcvyjNZPw1f4izSKH3nEg33wTS55R
DdHQzoUbF2Ri8KR8zOCJjesJ23yqKVYpLt1hSZWOSB6isG8YAUrst3+Y7wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFGy8WlX5GGaWoMvMifi824TBw6CNMB8GA1UdIwQY
MBaAFFU/S8QWY5p+G2xPAZngLjFgoeZCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlQ5THhCWmptbjRiYkU4Qm1lQXVNV0NoNWtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9kMTE5ZjYtODgwZC00ZjViLWIwNzkt
NWRkYWZiNTk1NGJhLzEvYkx4YVZma1lacGFneTh5Si1MemJoTUhEb0kwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9kMTE5ZjYtODgwZC00ZjViLWIwNzktNWRkYWZiNTk1NGJh
LzEvVlQ5THhCWmptbjRiYkU4Qm1lQXVNV0NoNWtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAufK4MA0E
AgACMAcDBQMqE2AAMA0GCSqGSIb3DQEBCwUAA4IBAQBZyAUZfNqefOOsVNfIo/1J
5trF/nw6Aye4yzn2e5o5xlesG0ZWbB7q63Y/Vd7ig/NiwKLA2dufGTMi1zF4tWCy
VrF29r7NZaUlFiOHsj3ZwYfhHs6wicqau49hojwy8jkqWqYe+NFu4y/kZmLKgF/K
nbrEw+1FM8eejXjAYiMnHTaaYh0x2lG3xhOzAPlI73abma5ZVkUHcgjomTJXS2Ts
WSdpqQrjWtFqyDvhWsZTjtcK+beNQJ+3G3BgU1hi9IRpfOFVMOEHzg8oUQS44mus
2aizgXZVdx8MGAXdVhH38mo1FnbN3qVaPfsCMRL+k5F1IN52NCQfoV1uceWjIrJl
-----END CERTIFICATE-----
Generated at Sat Jun 8 04:24:10 2024 by rpki-client on console-ams.rpki-client.org