Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_ZdbqZDjLwqhqco-OCKHkAW7CHk.roa
File: _ZdbqZDjLwqhqco-OCKHkAW7CHk.roa (raw, json)
Hash identifier: MyiuhW9qjN+LmLQU0unn/T02LOrN6vckY+ROKtjjNLc=
Subject key identifier: FD:97:5B:A9:90:E3:2F:0A:A1:A9:CA:3E:38:22:87:90:05:BB:08:79
Certificate issuer: /CN=ff99bc3d1491f8225f881164f593144b7a25c8eb
Certificate serial: 018CC3B6F78A88619F2209D31362AF5AAAB8
Authority key identifier: FF:99:BC:3D:14:91:F8:22:5F:88:11:64:F5:93:14:4B:7A:25:C8:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_ZdbqZDjLwqhqco-OCKHkAW7CHk.roa
Signing time: Mon 01 Jan 2024 06:29:57 +0000
ROA not before: Mon 01 Jan 2024 06:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211371
IP address blocks: 193.162.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:f7:8a:88:61:9f:22:09:d3:13:62:af:5a:aa:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff99bc3d1491f8225f881164f593144b7a25c8eb
Validity
Not Before: Jan 1 06:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd975ba990e32f0aa1a9ca3e3822879005bb0879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:48:2a:da:40:f6:88:56:4e:4f:70:99:9a:91:
46:0b:e2:1b:10:e9:fc:ac:91:26:7d:07:ca:e8:70:
ae:52:fd:6c:80:ec:ea:8d:0f:91:f9:0d:af:05:26:
60:1d:dc:5f:75:bb:65:17:db:d9:3e:9e:7c:21:b6:
d4:9e:27:70:86:19:c0:a0:c5:40:a6:e8:0e:4a:88:
2a:25:62:f0:ff:f0:c1:ff:e2:bb:bf:74:e4:a3:51:
7d:82:39:23:d9:4d:93:3e:a4:ee:7b:d7:2d:03:0f:
9f:6d:4e:e5:1f:03:2d:9a:a8:1d:82:b1:54:cc:c2:
4c:41:d8:d3:7c:cc:c4:fd:78:07:c8:2c:f6:4c:cc:
b6:36:d8:3f:05:ae:f2:53:5d:c1:6b:0c:ce:11:b8:
63:7c:54:3b:28:ec:15:ca:1e:1b:10:0d:a0:0c:c9:
06:f1:29:18:56:af:b0:99:89:e7:26:7d:9a:18:7c:
ff:9c:0e:cb:87:69:2a:28:b2:89:cb:74:a0:02:b5:
a1:ac:88:0a:95:7f:d4:ce:28:81:f7:73:4e:f8:ab:
4f:10:d8:6e:f7:31:3d:78:a7:1c:20:e8:7f:a5:f6:
7d:14:58:ac:0b:85:c9:6a:ea:8b:b5:f4:1d:d4:f9:
db:d8:b1:18:c6:87:6f:9b:2c:44:8d:7d:f1:d3:6d:
a3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:97:5B:A9:90:E3:2F:0A:A1:A9:CA:3E:38:22:87:90:05:BB:08:79
X509v3 Authority Key Identifier:
keyid:FF:99:BC:3D:14:91:F8:22:5F:88:11:64:F5:93:14:4B:7A:25:C8:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_ZdbqZDjLwqhqco-OCKHkAW7CHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.46.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:47:5a:42:62:7e:58:86:7d:35:cb:30:20:20:b5:3e:2c:13:
c1:2a:db:e6:bd:cf:bc:7d:70:a0:95:8a:f2:42:8a:b3:f6:10:
19:1a:98:c1:f8:fd:f1:73:d6:f8:b3:77:05:6e:c9:2c:7d:8c:
45:20:82:5e:a6:03:a5:d4:65:3b:1f:45:60:6c:f8:2b:56:b8:
aa:2f:8e:78:8d:78:c5:e4:0c:66:7a:4b:45:44:ad:d1:ba:a0:
39:82:54:0f:f2:a8:3f:e4:e4:3e:d8:24:6e:4a:2b:ac:35:2f:
74:dd:c1:ac:43:36:04:6c:7a:ec:08:14:99:7c:8b:ae:3b:46:
f2:08:67:57:ea:50:64:5d:08:6e:57:5a:1e:bc:49:49:75:d7:
15:72:13:cd:1c:d5:23:09:ea:ef:31:5f:65:b0:9d:a8:9a:5e:
48:23:62:c8:30:06:2a:9d:23:52:e8:f0:0e:52:ef:22:92:b4:
60:4b:8d:02:3e:b5:6b:4b:f5:14:9e:1b:a1:a3:5e:ac:88:b7:
a7:71:43:0e:4b:d2:69:ee:9e:2f:84:fc:74:b9:57:3c:8b:d0:
f1:95:aa:1d:8f:98:53:11:b6:e7:80:3c:c3:9f:5e:a1:ba:79:
ad:f2:8b:3e:ee:30:6e:b7:22:bf:c3:a7:a1:b0:a0:e5:59:55:
2e:d9:47:ce
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDtveKiGGfIgnTE2KvWqq4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmOTliYzNkMTQ5MWY4MjI1Zjg4MTE2NGY1OTMxNDRiN2Ey
NWM4ZWIwHhcNMjQwMTAxMDYyOTU3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDk3NWJhOTkwZTMyZjBhYTFhOWNhM2UzODIyODc5MDA1YmIwODc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkgq2kD2iFZOT3CZmpFGC+IbEOn8
rJEmfQfK6HCuUv1sgOzqjQ+R+Q2vBSZgHdxfdbtlF9vZPp58IbbUnidwhhnAoMVA
pugOSogqJWLw//DB/+K7v3Tko1F9gjkj2U2TPqTue9ctAw+fbU7lHwMtmqgdgrFU
zMJMQdjTfMzE/XgHyCz2TMy2Ntg/Ba7yU13BawzOEbhjfFQ7KOwVyh4bEA2gDMkG
8SkYVq+wmYnnJn2aGHz/nA7Lh2kqKLKJy3SgArWhrIgKlX/UziiB93NO+KtPENhu
9zE9eKccIOh/pfZ9FFisC4XJauqLtfQd1Pnb2LEYxodvmyxEjX3x022jywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP2XW6mQ4y8KoanKPjgih5AFuwh5MB8GA1UdIwQY
MBaAFP+ZvD0UkfgiX4gRZPWTFEt6JcjrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzVtOFBSU1ItQ0pmaUJGazlaTVVTM29seU9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9kYTM0MDYtMDRmOS00N2IwLWExMTkt
Yjg4YWZlZjEzMzY3LzEvX1pkYnFaRGpMd3FocWNvLU9DS0hrQVc3Q0hrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9kYTM0MDYtMDRmOS00N2IwLWExMTktYjg4YWZlZjEzMzY3
LzEvXzVtOFBSU1ItQ0pmaUJGazlaTVVTM29seU9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaIuMA0G
CSqGSIb3DQEBCwUAA4IBAQBaR1pCYn5Yhn01yzAgILU+LBPBKtvmvc+8fXCglYry
Qoqz9hAZGpjB+P3xc9b4s3cFbsksfYxFIIJepgOl1GU7H0VgbPgrVriqL454jXjF
5AxmektFRK3RuqA5glQP8qg/5OQ+2CRuSiusNS903cGsQzYEbHrsCBSZfIuuO0by
CGdX6lBkXQhuV1oevElJddcVchPNHNUjCervMV9lsJ2oml5II2LIMAYqnSNS6PAO
Uu8ikrRgS40CPrVrS/UUnhuho16siLencUMOS9Jp7p4vhPx0uVc8i9Dxlaodj5hT
EbbngDzDn16hunmt8os+7jButyK/w6ehsKDlWVUu2UfO
-----END CERTIFICATE-----
Generated at Mon Jun 24 11:46:07 2024 by rpki-client on console-fra.rpki-client.org