Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/VjFmwRAXCBaAhX2JrnJHkJ52kMw.roa
File: VjFmwRAXCBaAhX2JrnJHkJ52kMw.roa (raw, json)
Hash identifier: TxXwz1TVlvmsDGbbzA+xOJ6HNa6ANl4CvzwhDTFJGa4=
Subject key identifier: 56:31:66:C1:10:17:08:16:80:85:7D:89:AE:72:47:90:9E:76:90:CC
Certificate issuer: /CN=2abcc5c664a4a82305892a8c433e94ffe32dadb7
Certificate serial: 018CC26D6697B39078E16C57EB4164738E2D
Authority key identifier: 2A:BC:C5:C6:64:A4:A8:23:05:89:2A:8C:43:3E:94:FF:E3:2D:AD:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/VjFmwRAXCBaAhX2JrnJHkJ52kMw.roa
Signing time: Mon 01 Jan 2024 00:29:58 +0000
ROA not before: Mon 01 Jan 2024 00:29:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206070
IP address blocks: 185.197.104.0/22 maxlen: 22
185.212.160.0/22 maxlen: 22
185.245.24.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:66:97:b3:90:78:e1:6c:57:eb:41:64:73:8e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2abcc5c664a4a82305892a8c433e94ffe32dadb7
Validity
Not Before: Jan 1 00:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=563166c11017081680857d89ae7247909e7690cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:bd:0e:a6:1c:73:13:ae:1e:9a:85:bd:95:3c:
4f:4e:18:99:a9:e9:6f:2b:4c:29:5b:2c:aa:63:a0:
7f:04:dc:de:a3:05:b6:92:b2:26:4c:6c:ac:1a:9d:
cb:28:e8:9e:03:5f:ee:7c:6e:91:e8:47:41:e7:3f:
23:01:2c:5a:44:a1:fc:9d:9d:9b:43:c4:77:a7:ee:
0e:43:d0:a9:02:87:4a:d5:02:85:5e:98:f7:b9:0d:
76:43:6a:71:75:24:39:80:84:15:e5:2c:e3:94:f7:
f4:3a:44:58:52:88:50:d1:bd:a7:cd:18:8a:0c:6a:
c5:e6:b7:d6:b8:62:12:fe:92:c2:67:99:c4:0b:27:
43:82:64:ba:f9:b6:f6:9d:3e:40:1d:bc:4a:8b:74:
43:54:ac:3f:eb:4d:c1:a9:bd:14:ff:e3:70:f8:0e:
71:c0:96:78:33:15:d7:2a:af:d4:af:bd:65:15:a1:
1d:1c:34:b4:c0:35:51:a6:49:65:88:66:fd:09:a1:
47:c7:a7:57:95:07:6e:14:29:7a:6f:3c:8b:6d:23:
50:90:af:d2:fa:80:f2:47:3e:87:0c:77:4c:06:23:
ec:12:6b:fd:4c:ea:6b:e3:61:a4:44:84:6b:cf:97:
9b:a7:7c:a4:1a:67:00:9a:77:e4:ac:90:ad:6b:98:
5b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:31:66:C1:10:17:08:16:80:85:7D:89:AE:72:47:90:9E:76:90:CC
X509v3 Authority Key Identifier:
keyid:2A:BC:C5:C6:64:A4:A8:23:05:89:2A:8C:43:3E:94:FF:E3:2D:AD:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/VjFmwRAXCBaAhX2JrnJHkJ52kMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.104.0/22
185.212.160.0/22
185.245.24.0/22
Signature Algorithm: sha256WithRSAEncryption
05:59:b8:88:b7:07:80:44:98:cc:1c:d6:a6:d7:71:ca:28:92:
ff:b4:b3:d2:f3:8a:10:df:9a:6b:0d:cb:f4:7b:9c:81:20:35:
dd:77:a8:ae:4f:a0:cf:8a:83:39:64:73:c2:f4:21:50:6e:77:
b3:24:76:82:7a:0a:8a:47:1f:ca:a7:f3:a4:a4:73:4b:ea:31:
8e:ad:53:0e:8c:eb:7f:27:56:7d:b9:f5:ba:04:19:78:a9:40:
1e:4c:64:9e:32:6f:7f:93:ca:c7:06:2a:5a:86:96:c6:e7:7e:
ca:f8:a0:84:a3:bd:65:d1:7d:bf:02:86:d5:a7:5d:f7:e0:ce:
35:f8:b0:cd:f0:e3:69:f4:a5:73:d7:63:af:06:0a:a4:d2:1f:
4d:79:5d:76:83:a5:2e:86:72:d5:21:e1:0c:de:31:69:e7:e1:
67:0a:a1:78:2c:d9:04:ce:77:3a:3d:f5:15:90:a0:4c:26:4b:
9d:de:72:f0:fe:f1:e9:de:4d:b7:96:f0:50:67:96:1d:a5:a5:
30:2f:b6:e9:85:b5:7a:68:e9:75:c9:d3:c5:fe:c5:af:73:b4:
7e:94:17:af:f4:39:5a:3f:d5:19:0d:8d:0d:30:1f:fa:ef:8d:
2d:99:83:ea:04:d4:92:77:5c:fd:44:db:dc:56:a0:f6:92:0a:
73:51:9c:03
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzCbWaXs5B44WxX60Fkc44tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYmNjNWM2NjRhNGE4MjMwNTg5MmE4YzQzM2U5NGZmZTMy
ZGFkYjcwHhcNMjQwMTAxMDAyOTU4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjMxNjZjMTEwMTcwODE2ODA4NTdkODlhZTcyNDc5MDllNzY5MGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg70OphxzE64emoW9lTxPThiZqelv
K0wpWyyqY6B/BNzeowW2krImTGysGp3LKOieA1/ufG6R6EdB5z8jASxaRKH8nZ2b
Q8R3p+4OQ9CpAodK1QKFXpj3uQ12Q2pxdSQ5gIQV5SzjlPf0OkRYUohQ0b2nzRiK
DGrF5rfWuGIS/pLCZ5nECydDgmS6+bb2nT5AHbxKi3RDVKw/603Bqb0U/+Nw+A5x
wJZ4MxXXKq/Ur71lFaEdHDS0wDVRpklliGb9CaFHx6dXlQduFCl6bzyLbSNQkK/S
+oDyRz6HDHdMBiPsEmv9TOpr42GkRIRrz5ebp3ykGmcAmnfkrJCta5hbzwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFYxZsEQFwgWgIV9ia5yR5CedpDMMB8GA1UdIwQY
MBaAFCq8xcZkpKgjBYkqjEM+lP/jLa23MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3J6RnhtU2txQ01GaVNxTVF6NlVfLU10cmJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9kYzczNDUtNzVjYi00NDIwLWEzZjAt
NjVmYjEwYTA2ZTg5LzEvVmpGbXdSQVhDQmFBaFgySnJuSkhrSjUya013LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9kYzczNDUtNzVjYi00NDIwLWEzZjAtNjVmYjEwYTA2ZTg5
LzEvS3J6RnhtU2txQ01GaVNxTVF6NlVfLU10cmJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCucVoAwQC
udSgAwQCufUYMA0GCSqGSIb3DQEBCwUAA4IBAQAFWbiItweARJjMHNam13HKKJL/
tLPS84oQ35prDcv0e5yBIDXdd6iuT6DPioM5ZHPC9CFQbnezJHaCegqKRx/Kp/Ok
pHNL6jGOrVMOjOt/J1Z9ufW6BBl4qUAeTGSeMm9/k8rHBipahpbG537K+KCEo71l
0X2/AobVp1334M41+LDN8ONp9KVz12OvBgqk0h9NeV12g6UuhnLVIeEM3jFp5+Fn
CqF4LNkEznc6PfUVkKBMJkud3nLw/vHp3k23lvBQZ5YdpaUwL7bphbV6aOl1ydPF
/sWvc7R+lBev9DlaP9UZDY0NMB/6740tmYPqBNSSd1z9RNvcVqD2kgpzUZwD
-----END CERTIFICATE-----
Generated at Sat Jun 1 14:03:53 2024 by rpki-client on console-ams.rpki-client.org