Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/zGFg6qGLZBBfzNS1IID4rKIDcdQ.roa
File: zGFg6qGLZBBfzNS1IID4rKIDcdQ.roa (raw, json)
Hash identifier: tPII8xMlLLcJfQAW+9tU5dDJPd/MDNe/l6Iw8apj3XY=
Subject key identifier: CC:61:60:EA:A1:8B:64:10:5F:CC:D4:B5:20:80:F8:AC:A2:03:71:D4
Certificate issuer: /CN=78703e7a62309bf027c1f10536926a19b7f14b1e
Certificate serial: 018CC8DF22CFB29CF9E14BED26BB3B7C4D6F
Authority key identifier: 78:70:3E:7A:62:30:9B:F0:27:C1:F1:05:36:92:6A:19:B7:F1:4B:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHA-emIwm_AnwfEFNpJqGbfxSx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/zGFg6qGLZBBfzNS1IID4rKIDcdQ.roa
Signing time: Tue 02 Jan 2024 06:31:55 +0000
ROA not before: Tue 02 Jan 2024 06:31:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47447
IP address blocks: 185.117.215.0/24 maxlen: 24
2a06:8781::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHA-emIwm_AnwfEFNpJqGbfxSx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 18:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:22:cf:b2:9c:f9:e1:4b:ed:26:bb:3b:7c:4d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78703e7a62309bf027c1f10536926a19b7f14b1e
Validity
Not Before: Jan 2 06:31:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc6160eaa18b64105fccd4b52080f8aca20371d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:df:f1:d4:e5:cd:65:ec:9d:42:d0:c2:88:ea:
2e:5d:c3:51:43:cb:18:a5:eb:31:dc:cf:9b:06:b8:
71:74:44:59:ae:f2:94:4a:05:5d:87:f9:16:9a:2e:
c6:f3:28:6d:4a:d8:e5:b3:cb:d6:0e:a5:f5:67:c0:
e2:8e:6e:6a:b6:3a:f7:b8:f2:c4:23:c9:9e:28:eb:
86:e6:25:3e:ce:15:f1:8b:53:fb:ab:75:37:f6:19:
00:fc:0b:cd:36:f7:32:c0:9c:cd:8d:bd:73:db:e7:
05:d1:f3:de:6a:bb:f4:f1:a8:76:47:30:a9:f7:49:
ec:b2:bc:11:85:c8:0e:6b:ca:ec:83:35:36:72:31:
d7:b5:d8:49:c7:68:00:8d:cd:0a:b4:ea:8d:48:ab:
fa:be:5f:63:bc:7b:82:d9:fd:8c:26:d1:20:f2:3a:
c0:00:ff:af:0a:12:f1:e8:c8:27:aa:f1:ff:75:f9:
df:fc:53:a7:86:f3:22:e8:b2:10:62:f0:9b:41:2b:
6a:ac:3e:dd:bd:39:1c:51:df:28:45:6f:1d:34:3d:
55:e4:cc:c6:34:77:7e:f7:d1:bd:fb:1c:4f:65:46:
d3:7f:0c:26:ef:e9:1b:e2:3d:3d:45:db:b8:bc:6b:
fe:f3:b2:12:02:b8:33:d6:90:0c:2e:a6:55:73:aa:
18:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:61:60:EA:A1:8B:64:10:5F:CC:D4:B5:20:80:F8:AC:A2:03:71:D4
X509v3 Authority Key Identifier:
keyid:78:70:3E:7A:62:30:9B:F0:27:C1:F1:05:36:92:6A:19:B7:F1:4B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHA-emIwm_AnwfEFNpJqGbfxSx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/zGFg6qGLZBBfzNS1IID4rKIDcdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.215.0/24
IPv6:
2a06:8781::/40
Signature Algorithm: sha256WithRSAEncryption
7e:16:da:d6:d3:ec:1a:e4:14:80:6f:53:5b:cf:77:f4:81:50:
e2:42:53:87:51:3b:86:79:25:a7:51:83:80:86:34:64:5b:88:
d1:20:75:8d:c3:17:08:37:e3:38:bf:3d:3b:8f:c2:4d:55:ed:
2e:2f:e9:ad:cb:63:53:9d:9e:20:f0:d1:f0:90:e3:0f:7a:ac:
82:b4:37:a6:c6:c4:d2:fd:de:b6:70:01:de:2b:92:c6:00:00:
45:c2:6d:aa:ab:a3:85:85:82:ba:8a:1e:01:a8:db:c9:87:04:
b1:df:61:af:1f:e6:45:3f:59:3d:ea:e1:20:45:9d:59:bf:11:
8b:c6:ec:8a:3e:23:3e:3d:a5:45:d9:5c:a2:d9:3f:77:e7:45:
5d:45:0b:c9:5b:69:57:97:69:29:16:6d:f5:bf:28:d1:d3:c0:
e2:83:ad:fc:48:88:e2:f9:f7:a7:dd:c9:a7:bd:6f:13:0e:b4:
8a:ca:1f:7c:d9:a7:c1:3f:12:bb:95:24:78:cb:b9:91:13:80:
2b:16:62:50:88:d9:eb:c4:ba:49:a9:37:dc:4a:4b:78:9b:c4:
75:0a:09:c8:9e:8f:d7:ca:47:17:76:27:f5:c2:13:54:bd:9e:
e2:6c:2f:3f:5c:83:df:f0:d7:1c:20:a3:db:b2:eb:ff:15:ba:
b2:c8:86:34
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAYzI3yLPspz54UvtJrs7fE1vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4NzAzZTdhNjIzMDliZjAyN2MxZjEwNTM2OTI2YTE5Yjdm
MTRiMWUwHhcNMjQwMTAyMDYzMTU1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzYxNjBlYWExOGI2NDEwNWZjY2Q0YjUyMDgwZjhhY2EyMDM3MWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApN/x1OXNZeydQtDCiOouXcNRQ8sY
pesx3M+bBrhxdERZrvKUSgVdh/kWmi7G8yhtStjls8vWDqX1Z8Dijm5qtjr3uPLE
I8meKOuG5iU+zhXxi1P7q3U39hkA/AvNNvcywJzNjb1z2+cF0fPearv08ah2RzCp
90nssrwRhcgOa8rsgzU2cjHXtdhJx2gAjc0KtOqNSKv6vl9jvHuC2f2MJtEg8jrA
AP+vChLx6MgnqvH/dfnf/FOnhvMi6LIQYvCbQStqrD7dvTkcUd8oRW8dND1V5MzG
NHd+99G9+xxPZUbTfwwm7+kb4j09Rdu4vGv+87ISArgz1pAMLqZVc6oYVQIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFMxhYOqhi2QQX8zUtSCA+KyiA3HUMB8GA1UdIwQY
MBaAFHhwPnpiMJvwJ8HxBTaSahm38UseMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUhBLWVtSXdtX0Fud2ZFRk5wSnFHYmZ4U3g0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81ZmQ0YmYtNzRkOS00MDcyLWI1NTct
MDg0Y2NhMWM4NjIzLzEvekdGZzZxR0xaQkJmek5TMUlJRDRyS0lEY2RRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy81ZmQ0YmYtNzRkOS00MDcyLWI1NTctMDg0Y2NhMWM4NjIz
LzEvZUhBLWVtSXdtX0Fud2ZFRk5wSnFHYmZ4U3g0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAuXXXMA4E
AgACMAgDBgAqBoeBADANBgkqhkiG9w0BAQsFAAOCAQEAfhba1tPsGuQUgG9TW893
9IFQ4kJTh1E7hnklp1GDgIY0ZFuI0SB1jcMXCDfjOL89O4/CTVXtLi/prctjU52e
IPDR8JDjD3qsgrQ3psbE0v3etnAB3iuSxgAARcJtqqujhYWCuooeAajbyYcEsd9h
rx/mRT9ZPerhIEWdWb8Ri8bsij4jPj2lRdlcotk/d+dFXUULyVtpV5dpKRZt9b8o
0dPA4oOt/EiI4vn3p93Jp71vEw60isoffNmnwT8Su5UkeMu5kROAKxZiUIjZ68S6
Sak33EpLeJvEdQoJyJ6P18pHF3Yn9cITVL2e4mwvP1yD3/DXHCCj27Lr/xW6ssiG
NA==
-----END CERTIFICATE-----
Generated at Sun Jun 23 01:36:05 2024 by rpki-client on console-fra.rpki-client.org