Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/zDY6ASBaTsdg_bKTDY-K4nup-Ms.roa
File: zDY6ASBaTsdg_bKTDY-K4nup-Ms.roa (raw, json)
Hash identifier: FrmnmQQ9K1mJbMIqaBLQrzFnV+W7WlUbG9WECYp7PJY=
Subject key identifier: CC:36:3A:01:20:5A:4E:C7:60:FD:B2:93:0D:8F:8A:E2:7B:A9:F8:CB
Certificate issuer: /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac
Certificate serial: 018CC34966A00E37B75F19F7392AA0CFFBD2
Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/zDY6ASBaTsdg_bKTDY-K4nup-Ms.roa
Signing time: Mon 01 Jan 2024 04:30:16 +0000
ROA not before: Mon 01 Jan 2024 04:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204489
IP address blocks: 152.89.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft
rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:66:a0:0e:37:b7:5f:19:f7:39:2a:a0:cf:fb:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac
Validity
Not Before: Jan 1 04:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc363a01205a4ec760fdb2930d8f8ae27ba9f8cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ba:0e:5b:6d:cd:c9:5b:10:6e:9b:3c:e9:e4:
a6:52:56:59:18:0a:77:0c:5a:c5:c5:02:13:ee:20:
91:51:b1:a5:34:bc:23:5a:9d:7c:33:ed:3a:2b:e1:
0e:67:6a:4f:37:08:26:3e:a5:90:d5:ec:fc:db:ed:
f6:5d:c4:f5:54:6c:55:22:3c:59:86:89:3b:47:5b:
6f:5f:8c:ed:f6:b5:97:ba:c9:b5:f9:e5:71:ad:c0:
dd:f1:32:3e:4e:72:10:e8:0e:88:6b:3a:80:c1:55:
80:00:41:b6:a8:39:27:cc:eb:49:f3:62:2c:10:ff:
35:eb:be:86:fe:96:b3:35:eb:e6:d7:ef:42:b9:d8:
75:54:76:8f:3d:0c:0e:81:f2:06:17:1f:be:2b:43:
2b:c4:b4:0b:7e:0b:08:5b:28:df:ea:09:d0:ff:ed:
f1:6c:4d:f2:49:79:3b:5c:82:90:17:6c:8a:c1:4d:
c9:0c:29:83:62:f5:e7:20:66:a2:15:3d:e4:ea:48:
d2:1d:77:19:97:d2:5c:d9:c5:ac:fb:c0:38:a2:93:
f3:9d:91:22:15:1e:3c:5f:4a:fd:66:28:ff:19:f8:
10:13:e6:a1:29:2b:b1:f5:50:ba:af:ed:0b:16:b5:
25:7c:75:6b:e1:7a:7b:5e:ef:66:b1:23:fe:75:7a:
bd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:36:3A:01:20:5A:4E:C7:60:FD:B2:93:0D:8F:8A:E2:7B:A9:F8:CB
X509v3 Authority Key Identifier:
keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/zDY6ASBaTsdg_bKTDY-K4nup-Ms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.132.0/24
Signature Algorithm: sha256WithRSAEncryption
19:8e:35:0c:8d:55:4d:3d:0d:97:8b:49:12:7c:8f:41:e9:49:
d6:43:66:54:3c:3f:05:48:8e:68:f8:67:3c:55:d2:5b:46:57:
22:09:fe:80:86:9f:71:05:ff:3a:12:50:5a:c7:72:5b:72:a2:
ac:08:3d:f5:d0:fb:ae:d3:d9:2b:8b:e5:23:f8:e8:1a:75:9b:
d6:b9:22:b9:40:a0:1b:cd:37:e2:6f:0d:c4:0f:19:fd:96:8d:
ce:a6:a1:ee:52:e5:58:34:1b:3e:28:6f:4b:c4:c6:9a:3d:e2:
6c:8b:bf:6f:25:ba:c7:97:3f:9e:84:d9:97:37:bd:50:5c:12:
96:a3:4c:a0:7e:3d:97:f0:20:6d:6e:37:9e:4e:1e:5e:3a:3a:
ab:5f:6c:2b:5f:1b:bd:d8:e0:34:bc:0c:57:6d:b5:b1:e2:84:
8c:65:8c:9d:a0:0b:cb:2a:f8:a2:40:02:72:60:18:7a:50:b3:
fb:10:18:b5:0c:b1:c7:c4:8c:df:55:3a:cd:9e:38:19:10:b7:
47:0c:e6:98:21:b6:43:fb:b9:bd:ff:67:cf:19:38:5a:9e:25:
13:d5:50:71:b1:c1:35:d8:58:ae:2f:d5:1b:51:4b:7a:9b:38:
10:5b:4f:7b:8a:17:d8:e6:04:75:3c:b0:b7:83:50:11:46:ec:
28:fc:c7:13
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDSWagDje3Xxn3OSqgz/vSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3MjU4OGMwMGVlZjcxNTgwOWViNWZkZDZkNjcxN2NjMjhj
MGRmYWMwHhcNMjQwMTAxMDQzMDE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzM2M2EwMTIwNWE0ZWM3NjBmZGIyOTMwZDhmOGFlMjdiYTlmOGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqroOW23NyVsQbps86eSmUlZZGAp3
DFrFxQIT7iCRUbGlNLwjWp18M+06K+EOZ2pPNwgmPqWQ1ez82+32XcT1VGxVIjxZ
hok7R1tvX4zt9rWXusm1+eVxrcDd8TI+TnIQ6A6IazqAwVWAAEG2qDknzOtJ82Is
EP81676G/pazNevm1+9Cudh1VHaPPQwOgfIGFx++K0MrxLQLfgsIWyjf6gnQ/+3x
bE3ySXk7XIKQF2yKwU3JDCmDYvXnIGaiFT3k6kjSHXcZl9Jc2cWs+8A4opPznZEi
FR48X0r9Zij/GfgQE+ahKSux9VC6r+0LFrUlfHVr4Xp7Xu9msSP+dXq90QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMw2OgEgWk7HYP2ykw2PiuJ7qfjLMB8GA1UdIwQY
MBaAFLcliMAO73FYCetf3W1nF8wowN+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUt
N2E0MTI1NGVhYWNhLzEvekRZNkFTQmFUc2RnX2JLVERZLUs0bnVwLU1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUtN2E0MTI1NGVhYWNh
LzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmFmEMA0G
CSqGSIb3DQEBCwUAA4IBAQAZjjUMjVVNPQ2Xi0kSfI9B6UnWQ2ZUPD8FSI5o+Gc8
VdJbRlciCf6Ahp9xBf86ElBax3JbcqKsCD310Puu09kri+Uj+OgadZvWuSK5QKAb
zTfibw3EDxn9lo3OpqHuUuVYNBs+KG9LxMaaPeJsi79vJbrHlz+ehNmXN71QXBKW
o0ygfj2X8CBtbjeeTh5eOjqrX2wrXxu92OA0vAxXbbWx4oSMZYydoAvLKviiQAJy
YBh6ULP7EBi1DLHHxIzfVTrNnjgZELdHDOaYIbZD+7m9/2fPGThaniUT1VBxscE1
2FiuL9UbUUt6mzgQW097ihfY5gR1PLC3g1ARRuwo/McT
-----END CERTIFICATE-----
Generated at Sun Jun 23 01:17:25 2024 by rpki-client on console-ams.rpki-client.org