Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/vMrVr8xKZFb-xVFhnkRyFS9NXEc.roa
File: vMrVr8xKZFb-xVFhnkRyFS9NXEc.roa (raw, json)
Hash identifier: 4rn/CeTtWdBMtDKKzmGYeE4qKN5rRelC1dtVuMuPjiU=
Subject key identifier: BC:CA:D5:AF:CC:4A:64:56:FE:C5:51:61:9E:44:72:15:2F:4D:5C:47
Certificate issuer: /CN=4662521eb58b45b0c5a2ccbe383315ce79d7eea5
Certificate serial: 018FED203DBDB9A14BB833726817ECBA24FF
Authority key identifier: 46:62:52:1E:B5:8B:45:B0:C5:A2:CC:BE:38:33:15:CE:79:D7:EE:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/vMrVr8xKZFb-xVFhnkRyFS9NXEc.roa
Signing time: Thu 06 Jun 2024 10:37:44 +0000
ROA not before: Thu 06 Jun 2024 10:37:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 193.162.29.0/24 maxlen: 24
2a12:5980::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ed:20:3d:bd:b9:a1:4b:b8:33:72:68:17:ec:ba:24:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4662521eb58b45b0c5a2ccbe383315ce79d7eea5
Validity
Not Before: Jun 6 10:37:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bccad5afcc4a6456fec551619e4472152f4d5c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:87:98:c6:40:35:64:d0:e1:e8:28:55:c8:cc:
20:3e:65:2c:05:9d:fe:01:85:11:11:7a:a3:41:ea:
0b:d3:d7:5e:12:bd:da:d0:98:25:d6:bb:54:db:48:
0e:a5:2a:dd:60:a5:2d:40:35:81:08:d9:cd:f4:31:
ea:09:35:ca:1e:a0:91:4a:f5:ac:f7:9e:26:24:45:
ab:9e:72:0d:4a:b7:f0:89:bb:0b:38:62:b2:e2:c1:
f3:8e:fa:b1:56:57:7f:10:55:8d:a5:b3:ef:43:51:
ed:23:0d:f1:51:a7:36:05:ed:b9:6c:1b:14:26:e1:
b2:10:85:2a:6e:98:a6:0f:f4:2e:f0:4d:2d:ba:a3:
e3:cf:99:d1:3f:ab:3a:2a:7b:6c:6f:ce:37:46:de:
56:95:84:c1:61:56:a4:c2:b3:8d:cb:79:41:3b:70:
66:af:c2:9e:3e:5d:78:5b:04:94:0b:69:ae:96:a7:
31:8d:9b:c7:70:c2:10:17:b3:6a:98:3c:6a:41:4e:
66:b3:ce:d9:a2:18:ae:9a:1a:66:f1:f8:82:a5:dd:
19:39:6d:c9:80:83:f2:56:ce:8b:b9:9b:d4:3c:3c:
5d:ed:1a:25:8c:c9:6c:1c:00:5a:fa:cc:3e:2d:fb:
9f:aa:e9:70:17:fd:a1:f1:74:85:95:a2:68:e7:6d:
27:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:CA:D5:AF:CC:4A:64:56:FE:C5:51:61:9E:44:72:15:2F:4D:5C:47
X509v3 Authority Key Identifier:
keyid:46:62:52:1E:B5:8B:45:B0:C5:A2:CC:BE:38:33:15:CE:79:D7:EE:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/vMrVr8xKZFb-xVFhnkRyFS9NXEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.29.0/24
IPv6:
2a12:5980::/29
Signature Algorithm: sha256WithRSAEncryption
19:d3:f1:2f:9e:57:96:78:2b:52:90:4d:1a:90:12:88:19:7a:
a7:5a:89:9c:06:83:59:65:bc:1c:d8:55:94:d7:c5:20:ef:a5:
95:24:6f:f8:a9:92:80:95:f4:8f:69:f5:8b:eb:c7:37:00:d2:
fb:00:99:cc:bd:bb:39:56:5b:05:14:41:10:4c:39:e8:c7:36:
e2:7b:a2:14:03:c5:3e:eb:9b:e0:bf:9c:25:c7:6c:3a:c2:a0:
f9:66:c6:cc:3f:80:f2:79:2a:0b:c0:d9:ab:be:11:00:04:e6:
38:59:1e:d5:7b:a5:11:cb:b7:9b:d1:6d:21:9c:37:16:5f:ae:
4d:03:7f:2d:11:c4:b0:5c:a0:27:8e:b4:2f:0f:1a:02:78:4a:
cf:82:cf:fb:45:14:5d:f9:13:42:26:44:a2:ac:db:16:b5:49:
41:77:bf:4d:0f:5c:60:39:5a:3e:d3:01:30:7f:94:5c:5e:db:
e1:ce:49:6e:d8:03:8d:ff:8b:48:a0:31:34:9f:0c:de:42:de:
00:b0:81:65:ad:6a:d0:a2:a8:15:79:7a:02:aa:ba:d1:db:29:
f7:07:2c:ce:70:83:c3:18:bb:9d:58:e8:36:ea:a0:71:99:1d:
96:5c:66:3f:d5:52:b7:5f:8d:b8:f9:6a:85:55:a1:59:74:52:
56:18:10:68
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAY/tID29uaFLuDNyaBfsuiT/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NjI1MjFlYjU4YjQ1YjBjNWEyY2NiZTM4MzMxNWNlNzlk
N2VlYTUwHhcNMjQwNjA2MTAzNzQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiY2NhZDVhZmNjNGE2NDU2ZmVjNTUxNjE5ZTQ0NzIxNTJmNGQ1YzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIeYxkA1ZNDh6ChVyMwgPmUsBZ3+
AYUREXqjQeoL09deEr3a0Jgl1rtU20gOpSrdYKUtQDWBCNnN9DHqCTXKHqCRSvWs
954mJEWrnnINSrfwibsLOGKy4sHzjvqxVld/EFWNpbPvQ1HtIw3xUac2Be25bBsU
JuGyEIUqbpimD/Qu8E0tuqPjz5nRP6s6Kntsb843Rt5WlYTBYVakwrONy3lBO3Bm
r8KePl14WwSUC2mulqcxjZvHcMIQF7NqmDxqQU5ms87Zohiumhpm8fiCpd0ZOW3J
gIPyVs6LuZvUPDxd7RoljMlsHABa+sw+LfufqulwF/2h8XSFlaJo520nzwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFLzK1a/MSmRW/sVRYZ5EchUvTVxHMB8GA1UdIwQY
MBaAFEZiUh61i0WwxaLMvjgzFc551+6lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm1KU0hyV0xSYkRGb3N5LU9ETVZ6bm5YN3FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi83MmM5ODQtMTQxMC00NWVjLTg2YzUt
OGFiODY5Mzc0MTBhLzEvdk1yVnI4eEtaRmIteFZGaG5rUnlGUzlOWEVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi83MmM5ODQtMTQxMC00NWVjLTg2YzUtOGFiODY5Mzc0MTBh
LzEvUm1KU0hyV0xSYkRGb3N5LU9ETVZ6bm5YN3FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwaIdMA0E
AgACMAcDBQMqElmAMA0GCSqGSIb3DQEBCwUAA4IBAQAZ0/EvnleWeCtSkE0akBKI
GXqnWomcBoNZZbwc2FWU18Ug76WVJG/4qZKAlfSPafWL68c3ANL7AJnMvbs5VlsF
FEEQTDnoxzbie6IUA8U+65vgv5wlx2w6wqD5ZsbMP4DyeSoLwNmrvhEABOY4WR7V
e6URy7eb0W0hnDcWX65NA38tEcSwXKAnjrQvDxoCeErPgs/7RRRd+RNCJkSirNsW
tUlBd79ND1xgOVo+0wEwf5RcXtvhzklu2AON/4tIoDE0nwzeQt4AsIFlrWrQoqgV
eXoCqrrR2yn3ByzOcIPDGLudWOg26qBxmR2WXGY/1VK3X424+WqFVaFZdFJWGBBo
-----END CERTIFICATE-----
Generated at Thu Jun 13 16:13:01 2024 by rpki-client on console-ams.rpki-client.org