Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/VQaLu3gr1geSmmjim4pHsB7rfpo.roa
File: VQaLu3gr1geSmmjim4pHsB7rfpo.roa (raw, json)
Hash identifier: qoqgYT4W/082tCKpeo0JBJK/zGb0HN65HDe0ry1oP10=
Subject key identifier: 55:06:8B:BB:78:2B:D6:07:92:9A:68:E2:9B:8A:47:B0:1E:EB:7E:9A
Certificate issuer: /CN=780de16eee947b0a8c75714fc5da6a0259ca1b90
Certificate serial: 018CC8DF265078ED234A96AA0015245BC3BE
Authority key identifier: 78:0D:E1:6E:EE:94:7B:0A:8C:75:71:4F:C5:DA:6A:02:59:CA:1B:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/VQaLu3gr1geSmmjim4pHsB7rfpo.roa
Signing time: Tue 02 Jan 2024 06:31:56 +0000
ROA not before: Tue 02 Jan 2024 06:31:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8455
IP address blocks: 91.208.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Jun 2024 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:26:50:78:ed:23:4a:96:aa:00:15:24:5b:c3:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=780de16eee947b0a8c75714fc5da6a0259ca1b90
Validity
Not Before: Jan 2 06:31:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55068bbb782bd607929a68e29b8a47b01eeb7e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:38:0c:98:54:2b:16:a7:97:ba:13:0c:bf:94:
39:47:e1:e2:6d:d8:78:7c:41:fc:c6:9d:7d:29:c2:
3c:a2:e2:04:94:95:91:48:6d:ec:03:32:73:bc:fc:
34:90:cc:04:56:37:9f:24:ff:3f:14:4c:25:f9:b6:
bf:d3:a2:d3:ce:99:8f:03:81:6a:9b:bf:09:97:14:
fe:ca:18:3b:21:72:45:27:fa:14:42:1b:d5:f2:5a:
59:c1:4e:0b:a6:3a:f4:58:4b:9c:15:76:89:8c:13:
a8:0b:10:92:cc:31:b3:75:89:5c:e4:ca:26:fd:42:
57:51:5a:4a:25:d4:24:ac:87:ab:fd:72:29:93:ad:
fd:47:92:57:bd:05:db:51:f3:0c:49:f2:c1:08:f4:
87:3c:3e:80:af:6a:3d:74:e4:32:af:3d:07:d5:a5:
b3:42:bd:ea:87:50:9d:c8:11:3c:52:b4:3a:e7:cc:
e5:d9:c2:b8:35:18:c2:37:c2:db:26:54:15:d7:bc:
a9:71:be:42:dd:26:77:74:fa:90:a9:f1:55:62:65:
f3:0c:94:22:81:f0:a9:a1:5f:10:c8:9f:47:61:3c:
da:6b:0b:17:06:ec:6d:ca:8f:5c:e2:8b:c7:f4:3c:
02:37:8c:33:9d:e7:b0:02:8a:92:bf:ed:a8:55:53:
32:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:06:8B:BB:78:2B:D6:07:92:9A:68:E2:9B:8A:47:B0:1E:EB:7E:9A
X509v3 Authority Key Identifier:
keyid:78:0D:E1:6E:EE:94:7B:0A:8C:75:71:4F:C5:DA:6A:02:59:CA:1B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/VQaLu3gr1geSmmjim4pHsB7rfpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.49.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:1d:b7:2e:9a:a5:c4:9d:69:f0:de:0e:fa:0f:a6:e4:e6:56:
67:8f:1d:16:24:08:78:29:db:eb:fc:6c:92:72:15:72:48:5c:
35:e5:d4:d0:74:28:c9:d2:d1:9b:dd:79:6f:39:85:14:95:7c:
3f:82:74:5d:ad:e9:75:b5:02:fd:78:6b:5f:f1:3f:93:b2:8c:
cf:0b:e5:52:9e:5d:86:3e:97:f2:e9:a4:7f:2e:b4:6f:37:2c:
25:cc:a1:1e:06:19:87:16:55:9c:3d:93:1f:56:17:cf:80:0b:
38:a1:c3:e1:63:02:d3:8e:bc:b5:3d:88:55:15:95:56:7f:13:
7a:06:fb:08:a7:ef:41:c1:fb:81:99:54:3a:f7:7d:f9:7e:a8:
6b:d6:0b:30:4b:d1:72:59:18:66:cf:38:ad:89:d1:69:c8:d8:
5d:65:5d:8b:9d:13:a5:9c:1d:27:3f:c1:25:1e:85:e2:36:96:
d1:1d:92:67:83:16:ce:c1:bc:3f:45:55:97:63:6b:54:54:0d:
e7:49:1c:17:a1:04:cb:69:c5:dd:2e:a9:7a:4d:30:d0:62:cb:
89:06:66:98:0c:11:c0:3a:f6:55:ca:b4:be:19:33:f6:5b:92:
d7:c5:59:c4:1e:9b:2c:cd:5a:a2:bf:3f:b2:19:5d:d8:d7:f8:
da:70:f2:72
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI3yZQeO0jSpaqABUkW8O+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4MGRlMTZlZWU5NDdiMGE4Yzc1NzE0ZmM1ZGE2YTAyNTlj
YTFiOTAwHhcNMjQwMTAyMDYzMTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTA2OGJiYjc4MmJkNjA3OTI5YTY4ZTI5YjhhNDdiMDFlZWI3ZTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDgMmFQrFqeXuhMMv5Q5R+Hibdh4
fEH8xp19KcI8ouIElJWRSG3sAzJzvPw0kMwEVjefJP8/FEwl+ba/06LTzpmPA4Fq
m78JlxT+yhg7IXJFJ/oUQhvV8lpZwU4Lpjr0WEucFXaJjBOoCxCSzDGzdYlc5Mom
/UJXUVpKJdQkrIer/XIpk639R5JXvQXbUfMMSfLBCPSHPD6Ar2o9dOQyrz0H1aWz
Qr3qh1CdyBE8UrQ658zl2cK4NRjCN8LbJlQV17ypcb5C3SZ3dPqQqfFVYmXzDJQi
gfCpoV8QyJ9HYTzaawsXBuxtyo9c4ovH9DwCN4wzneewAoqSv+2oVVMymQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFUGi7t4K9YHkppo4puKR7Ae636aMB8GA1UdIwQY
MBaAFHgN4W7ulHsKjHVxT8XaagJZyhuQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUEzaGJ1NlVld3FNZFhGUHhkcHFBbG5LRzVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8xMDcxOTUtY2M1MS00NzFiLThkYTIt
ZTAwNTU0M2YwMzc0LzEvVlFhTHUzZ3IxZ2VTbW1qaW00cEhzQjdyZnBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8xMDcxOTUtY2M1MS00NzFiLThkYTItZTAwNTU0M2YwMzc0
LzEvZUEzaGJ1NlVld3FNZFhGUHhkcHFBbG5LRzVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9AxMA0G
CSqGSIb3DQEBCwUAA4IBAQCrHbcumqXEnWnw3g76D6bk5lZnjx0WJAh4Kdvr/GyS
chVySFw15dTQdCjJ0tGb3XlvOYUUlXw/gnRdrel1tQL9eGtf8T+TsozPC+VSnl2G
Ppfy6aR/LrRvNywlzKEeBhmHFlWcPZMfVhfPgAs4ocPhYwLTjry1PYhVFZVWfxN6
BvsIp+9BwfuBmVQ69335fqhr1gswS9FyWRhmzzitidFpyNhdZV2LnROlnB0nP8El
HoXiNpbRHZJngxbOwbw/RVWXY2tUVA3nSRwXoQTLacXdLql6TTDQYsuJBmaYDBHA
OvZVyrS+GTP2W5LXxVnEHpsszVqivz+yGV3Y1/jacPJy
-----END CERTIFICATE-----
Generated at Tue Jun 18 12:32:12 2024 by rpki-client on console-ams.rpki-client.org