Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/VALHxZOTsQi_N5aOfwC1kzLEXc8.roa
File: VALHxZOTsQi_N5aOfwC1kzLEXc8.roa (raw, json)
Hash identifier: wXkPaxjjS4SDlRJBcCFsbOam5GaFPjHsjUtvRJ0/Gvw=
Subject key identifier: 54:02:C7:C5:93:93:B1:08:BF:37:96:8E:7F:00:B5:93:32:C4:5D:CF
Certificate issuer: /CN=b10c3cf3dc53ca549c03e4f5f46d91ce90b8e070
Certificate serial: 018D7F618BDE9D2E1A62BE5C4935E9A6E8F0
Authority key identifier: B1:0C:3C:F3:DC:53:CA:54:9C:03:E4:F5:F4:6D:91:CE:90:B8:E0:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/VALHxZOTsQi_N5aOfwC1kzLEXc8.roa
Signing time: Tue 06 Feb 2024 17:05:15 +0000
ROA not before: Tue 06 Feb 2024 17:05:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210928
IP address blocks: 185.161.66.0/24 maxlen: 24
217.168.240.0/24 maxlen: 24
217.168.241.0/24 maxlen: 24
217.168.242.0/24 maxlen: 24
217.168.243.0/24 maxlen: 24
217.168.244.0/24 maxlen: 24
217.168.245.0/24 maxlen: 24
217.168.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:61:8b:de:9d:2e:1a:62:be:5c:49:35:e9:a6:e8:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b10c3cf3dc53ca549c03e4f5f46d91ce90b8e070
Validity
Not Before: Feb 6 17:05:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5402c7c59393b108bf37968e7f00b59332c45dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:71:5f:e4:8d:f1:a8:52:02:66:c8:d4:8c:82:
44:8a:62:ff:98:92:8a:71:21:26:2c:5d:19:5e:2c:
89:54:a5:da:b6:f2:b6:e0:11:ec:83:05:cb:1d:9b:
1f:9f:b7:8a:1c:49:8d:03:6c:25:3c:2e:e0:1b:12:
f8:6b:8f:34:bb:aa:9e:33:16:7b:94:d5:22:2a:85:
03:69:3f:5b:9c:46:2a:6b:c2:89:f0:da:6a:b1:6b:
e5:cc:54:82:79:f6:69:19:ee:be:08:52:ed:49:f5:
53:08:ce:bc:7f:cf:00:ff:78:97:bb:82:59:eb:36:
de:af:be:71:36:c6:ff:83:83:f5:62:f3:81:40:42:
74:a3:4c:74:89:d3:af:53:de:d6:b9:42:a2:23:a5:
38:2a:51:55:a4:99:c3:c1:90:30:7a:8c:c2:ef:01:
20:8f:6b:55:cb:c4:af:5d:58:4c:17:84:6f:f8:70:
28:9f:42:a5:17:61:9f:c3:47:b9:0c:f5:be:c3:a3:
b2:a3:53:aa:14:6b:40:bc:35:6f:5d:f1:12:71:5b:
80:80:79:cd:40:e5:36:d7:4a:78:f2:37:67:87:6d:
c7:84:e2:11:5a:0a:25:9b:be:c1:69:91:41:f8:da:
25:22:52:6f:88:cf:c2:ca:19:7d:3c:cd:b3:97:14:
46:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:02:C7:C5:93:93:B1:08:BF:37:96:8E:7F:00:B5:93:32:C4:5D:CF
X509v3 Authority Key Identifier:
keyid:B1:0C:3C:F3:DC:53:CA:54:9C:03:E4:F5:F4:6D:91:CE:90:B8:E0:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/VALHxZOTsQi_N5aOfwC1kzLEXc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.66.0/24
217.168.240.0-217.168.245.255
217.168.247.0/24
Signature Algorithm: sha256WithRSAEncryption
48:a2:06:ff:da:6e:21:1e:4f:39:0d:f5:35:7e:f3:76:b0:26:
95:b6:67:d9:5e:d1:f6:03:38:93:6c:b7:44:90:3b:00:98:f4:
8f:95:6b:88:6b:2e:60:7a:28:bf:3d:c1:4e:1e:4a:82:c4:52:
0a:00:84:1d:5d:e1:1b:23:7e:01:ee:8b:96:3a:01:50:42:ff:
c0:42:aa:b4:84:a6:6a:cd:2b:b9:5f:ab:8a:3d:80:0a:67:fe:
87:5f:ed:79:03:44:eb:bc:e3:05:4e:3d:bd:b2:5c:4f:53:ef:
62:83:18:78:e4:fb:fb:83:02:1c:f2:07:e7:f1:52:ac:85:c4:
28:6d:07:a2:0e:29:aa:d9:41:cd:eb:68:91:72:b2:2d:5b:2f:
c2:a2:e7:84:cb:fa:85:6e:32:b3:1e:c2:0f:4f:3b:8e:6c:36:
b2:4b:6e:39:31:26:d3:cf:d9:85:94:86:ee:0c:2e:a0:e6:07:
00:0e:2d:6d:fb:09:53:00:38:73:44:41:19:00:b3:c6:ec:11:
5e:9a:e8:2d:a4:cb:7c:dc:9d:25:40:92:d5:16:c5:c8:f6:87:
63:5d:aa:0e:58:78:75:00:94:bf:b1:d2:8a:d2:e4:ca:e6:7e:
82:81:9a:41:6e:67:87:ce:60:be:12:fe:69:8e:4d:77:71:c9:
7c:e2:2e:64
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAY1/YYvenS4aYr5cSTXppujwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxMGMzY2YzZGM1M2NhNTQ5YzAzZTRmNWY0NmQ5MWNlOTBi
OGUwNzAwHhcNMjQwMjA2MTcwNTE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDAyYzdjNTkzOTNiMTA4YmYzNzk2OGU3ZjAwYjU5MzMyYzQ1ZGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3Ff5I3xqFICZsjUjIJEimL/mJKK
cSEmLF0ZXiyJVKXatvK24BHsgwXLHZsfn7eKHEmNA2wlPC7gGxL4a480u6qeMxZ7
lNUiKoUDaT9bnEYqa8KJ8NpqsWvlzFSCefZpGe6+CFLtSfVTCM68f88A/3iXu4JZ
6zber75xNsb/g4P1YvOBQEJ0o0x0idOvU97WuUKiI6U4KlFVpJnDwZAweozC7wEg
j2tVy8SvXVhMF4Rv+HAon0KlF2Gfw0e5DPW+w6Oyo1OqFGtAvDVvXfEScVuAgHnN
QOU210p48jdnh23HhOIRWgolm77BaZFB+NolIlJviM/Cyhl9PM2zlxRGdwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFFQCx8WTk7EIvzeWjn8AtZMyxF3PMB8GA1UdIwQY
MBaAFLEMPPPcU8pUnAPk9fRtkc6QuOBwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1F3ODg5eFR5bFNjQS1UMTlHMlJ6cEM0NEhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8yNWNkYjQtZTUwOC00YjM3LTgxYmMt
MzZmODJiZDM3OWJkLzEvVkFMSHhaT1RzUWlfTjVhT2Z3QzFrekxFWGM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8yNWNkYjQtZTUwOC00YjM3LTgxYmMtMzZmODJiZDM3OWJk
LzEvc1F3ODg5eFR5bFNjQS1UMTlHMlJ6cEM0NEhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAuaFCMAwD
BATZqPADBAHZqPQDBADZqPcwDQYJKoZIhvcNAQELBQADggEBAEiiBv/abiEeTzkN
9TV+83awJpW2Z9le0fYDOJNst0SQOwCY9I+Va4hrLmB6KL89wU4eSoLEUgoAhB1d
4RsjfgHui5Y6AVBC/8BCqrSEpmrNK7lfq4o9gApn/odf7XkDROu84wVOPb2yXE9T
72KDGHjk+/uDAhzyB+fxUqyFxChtB6IOKarZQc3raJFysi1bL8Ki54TL+oVuMrMe
wg9PO45sNrJLbjkxJtPP2YWUhu4MLqDmBwAOLW37CVMAOHNEQRkAs8bsEV6a6C2k
y3zcnSVAktUWxcj2h2Ndqg5YeHUAlL+x0orS5MrmfoKBmkFuZ4fOYL4S/mmOTXdx
yXziLmQ=
-----END CERTIFICATE-----
Generated at Sat Jun 1 17:23:20 2024 by rpki-client on console-fra.rpki-client.org